Sprout Privacy Policy

Last updated: September 12, 2026

Sprout (“Sprout”, “we”, “us”, or “our”) is a social memory app that lets you capture memories, keep them in private circles, and optionally publish memories to the Discover area. This Privacy Policy explains what information Sprout collects, how we use it, when it is visible to other people, how we protect it, and how you can request deletion of your account and associated data.

1. Information we collect

Account and authentication information

• Your email address and account identifier when you use Google sign-in.
• Your phone number when you use phone-number authentication and SMS OTP.
• Your name and profile photo when provided by your authentication provider or entered in your Sprout profile.
• Your Sprout profile information, including your profile photo and, where you choose to provide it, date of birth.

Memories and other content you provide

• Photos you upload as memories.
• Memory titles/captions and optional location information attached to memories.
• Circle names, descriptions, cover images, memberships and invitations.
• Comments and reactions you add to memories.
• Notifications generated by activity in your circles and on your memories.

Location information

If you grant location permission, Sprout may obtain the device’s approximate or precise foreground location to help fill in the location associated with a memory. Location is used for the memory feature and is not used for advertising or background tracking. You can edit the location before saving a memory.

Information processed by authentication services

Sprout uses Supabase Authentication for account authentication and Firebase Authentication for phone-number verification. Firebase may process authentication security information such as IP address and user-agent information to provide authentication and prevent abuse. Google may process information required when you choose Google sign-in. These services operate under their own privacy and security terms as applicable.

2. How we use information

• To create and manage your Sprout account.
• To authenticate you using Google or phone OTP.
• To store, display and organize your memories and profile.
• To provide circles, memberships, invitations, comments, reactions and notifications.
• To show public memories in Discover when you explicitly choose to make a memory public.
• To automatically add a memory location when you choose to use location access.
• To protect the service, prevent abuse, maintain security and troubleshoot service problems.
• To respond to support requests and account-deletion requests.

3. Who can see your information

Private circle memories

A memory shared with one or more circles is intended to be visible to members of those selected circles. Memory images are stored in private storage and are served through access-controlled, time-limited links.

Public memories

If you choose the Public option when creating a memory, that memory can appear in Sprout’s Discover area and may be visible to other Sprout users. You should not publish information you do not want to make public.

Profile information

Basic profile information used by Sprout, such as your name and profile photo, may be visible to signed-in users where required for profiles, circles, invitations and memory attribution. Your phone number is kept as account information and is not displayed as part of the public profile.

4. Service providers

We use third-party infrastructure providers to operate Sprout. These providers process information on our behalf as needed to provide their services. They include:

• Supabase for authentication, database storage, file storage, access control and server-side functions.
• Firebase Authentication for phone-number authentication and SMS OTP verification.
• Google when you choose Google sign-in and for services involved in Firebase Authentication.

We do not sell your personal information. We do not use your personal information for third-party advertising profiles.

5. Photos, camera and device permissions

Sprout requests camera and photo/media access so you can create memories and profile or circle images. Sprout does not access your photo library for unrelated purposes. Photos you select or capture are uploaded only when you use a feature that requires them.

6. Data security

We use access controls and database/storage security rules to restrict data to the people and features that need it. Data transmitted between the app and our backend services is sent over encrypted connections such as HTTPS/TLS. Private memory images are stored in access-controlled storage and are not exposed as permanent public URLs.

No method of transmission or storage can be guaranteed to be completely secure, but we take reasonable technical and organizational measures to protect the information handled by Sprout.

7. Data retention and deletion

We retain account and content information for as long as necessary to provide Sprout and while your account remains active. You can delete your account from Settings in the app. Account deletion is intended to remove your authentication account, profile, circles created by you, memberships, invitations, memories, comments, reactions, notifications and stored images associated with your account.

You can also request account deletion through our external deletion resource: Delete your Sprout account. Some limited information may remain temporarily in encrypted backups, security logs, or where retention is required by law or necessary to resolve security or abuse issues. Such retained information is not used for ordinary app functionality and is deleted or anonymized when the applicable retention period ends.

8. Your choices

• You choose whether to sign in with Google or phone OTP.
• You control whether a memory is shared with selected circles or made public.
• You can deny or revoke camera, photo/media and location permissions through your device settings, although related features may not work.
• You can edit profile information and memory information where the app provides those controls.
• You can request deletion of your account and associated data.

9. Children

Sprout is not directed to children under the age required by applicable law, and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us so we can review and take appropriate action.

10. Changes to this Privacy Policy

We may update this Privacy Policy when our app, data practices or legal obligations change. We will update the “Last updated” date at the top of this page. Material changes may also be communicated through the app or other appropriate channels.

11. Contact us

For privacy questions, data requests or account-deletion assistance, contact: mahesh@akshatmedia.in.

This Privacy Policy is intended to describe the current data practices of the Sprout mobile application and should be kept consistent with Sprout’s Google Play Data safety declaration.