Privacy Policy
Last updated: May 18, 2026
Overview
GrowVPD Pro ("the app") is an indoor-growing climate and grow-diary app published by VPD Labs LLC (Wyoming, USA), which is the data controller for the purposes of this policy.
GrowVPD Pro is built offline-first: the core app — the VPD calculator, grow diary, calculators, and guides — works fully offline, and the data you create is stored on your device. Several features that connect to the internet are optional and off by default. When you turn them on, limited data is transmitted as described below. This policy explains what is collected, why, and your choices.
Data stored on your device
By default, the data you enter is stored only on your device and is not uploaded:
- Grow diary entries, photos, and notes
- Sensor history, VPD calculations, and settings
- Equipment profiles and templates
- App preferences (language, theme, units)
When you uninstall the app, this local data is permanently removed from your device.
Crash reporting and diagnostics
The app uses Firebase Crashlytics (a Google service) to report crashes so we can fix them. When the app crashes, it sends a crash report containing the error, your device model, operating-system version, app version, an app-installation identifier, and a small set of non-identifying app-state values (such as your selected language and theme, and the number of grows or tents you have). This does not include your name, diary content, photos, or sensor readings.
You can turn crash reporting off at any time in the app's Settings.
Push notifications
To deliver notifications (for example, sensor or watering alerts), the app registers a push token with Firebase Cloud Messaging (a Google service). If you enable cloud monitoring (below), this token is also shared with our monitoring service so it can send you alerts.
Cloud monitoring (optional)
If you enable cloud monitoring, the app periodically sends a status update to our monitoring service (operated by VPD Labs LLC) so it can alert you when something needs attention. This update includes an installation identifier and device model, current environmental readings (temperature, humidity, VPD) and target ranges, the names of your rooms, tents, grows, and devices, automation and watering status, and basic diagnostics (such as battery level and network type). Cloud monitoring is off unless you turn it on, and disabling it stops these updates.
Smart-device connections (optional, Pro)
If you connect smart devices, the app communicates with the relevant manufacturer's cloud service using credentials you provide (e.g. email and password, or API keys). Supported services include Tuya / Smart Life, AC Infinity, Mars Hydro, Spider Farmer, Vivosun, and Bluelab (Edenic). These credentials and the resulting device data are transmitted to that manufacturer's service to control your devices and read sensor data.
If you additionally choose to monitor a smart-device account through cloud monitoring, the sign-in details you enter are also transmitted, over an encrypted connection, to our monitoring service so it can connect to that platform on your behalf while the app is closed. You can remove these at any time by disconnecting the platform or by requesting deletion (see Data Deletion).
Multi-device sync (optional)
If you enable multi-device sync, your grow data is relayed between your own devices through a relay service operated by VPD Labs LLC. This data is end-to-end encrypted on your devices — the relay only passes along encrypted data and cannot read its contents. Photos are not synced.
Illustrative plant images (optional)
When you open certain strain or plant-disease galleries, the app may request illustrative images from our image service, sending the plant variety name and growth-stage details needed to retrieve the matching image. This happens only in response to your action.
Camera, photos, Bluetooth and location
Camera and photo access is used for your grow diary and the disease-identification guide; photos are stored on your device and are not uploaded. Bluetooth is used to connect to nearby sensors and devices. On Android, the app requests location permission solely because Android requires it for Bluetooth scanning — the app does not collect, track, or transmit your location.
Advertising and analytics
GrowVPD Pro contains no advertising and no advertising or general-analytics SDKs (no Google AdMob, no Firebase Analytics). It does not build advertising profiles and does not track you across other apps or websites. The only Google services used are Crashlytics and Cloud Messaging, described above.
Third-party services
Depending on the features you use, data may be processed by:
- Google / Firebase — Crashlytics (crash reports) and Cloud Messaging (push notifications)
- VPD Labs LLC services (hosted on Cloudflare) — cloud monitoring, the multi-device sync relay, and the image service
- Smart-device manufacturers — Tuya / Smart Life, AC Infinity, Mars Hydro, Spider Farmer, Vivosun, Bluelab — only when you connect their devices
- Google Play Billing — for Pro purchases; we never receive your payment details
All network communication uses encrypted (HTTPS/TLS) connections.
Data retention
- On-device data — kept until you delete it or uninstall the app.
- Crash reports — retained by Firebase Crashlytics for up to 90 days.
- Cloud-monitoring data — kept while cloud monitoring is enabled, and deleted when you disable it or request deletion.
- Multi-device sync data — relayed only transiently and not stored by us in readable form.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict its processing, and to withdraw consent for optional features at any time. Users in the European Economic Area and the United Kingdom have these rights under the GDPR; California residents have comparable rights under the CCPA, including the right not to be discriminated against for exercising them. We do not sell personal data.
To exercise any of these rights, contact us at privacy@growvpd.pro.
Data deletion
You can delete on-device data at any time by clearing the app's data in your device settings or by uninstalling the app. To request deletion of any data held by our services, see our Data Deletion page or email privacy@growvpd.pro.
International data transfers
VPD Labs LLC is based in the United States, and the optional cloud services described above are operated from the United States. If you use these features from outside the US, your data is transferred to and processed in the US.
Children's privacy
GrowVPD Pro is intended for adults (18+) and is not directed to children. We do not knowingly collect personal data from children.
Changes to This Policy
We may update this privacy policy from time to time. Material changes will be posted on this page with a revised "last updated" date.
Contact
VPD Labs LLC
30 N Gould St, Sheridan, WY 82801, USA
privacy@growvpd.pro