What we keep. What we don't.

This page explains what GRW does with your data — what we collect, where it goes, what we keep, and what you control. It is the longer version of the brief disclosure shown when you upload a video.

If something on this page is unclear or seems inconsistent with what the product does, that's a bug we want to know about. Email privacy@grwproject.app and we'll fix it.

When you upload a video for analysis, the file may be processed in either of two ways depending on its size, format, and your device's capabilities.

(1) On-device path — the video stays in your browser; only derived behavioural statistics (facial landmark summaries, blink rates, expression intensities) are sent to our server. The video itself never leaves your device.

(2) Server-processing path — for larger files or unsupported formats, the video is uploaded to a transient processing server, where we extract behavioural statistics plus voice-derived features (pitch, timing, voice quality) and lexical features from the spoken words (e.g. how often you hedge, the variety of vocabulary, sentence structure). The audio waveform and full transcript are processed in memory and discarded immediately afterwards. What we retain in your report is the derived statistical features and a small set of short quoted excerpts (each ≤ 200 characters, capped at 30 per analysis) used as evidence in findings. The original video file is deleted from the processing server within minutes.

(3) Cardiovascular analysis (optional, opt-in below) — when enabled, heart rate and heart rate variability are estimated from subtle skin-color variations in the video, a technique called remote photoplethysmography (rPPG). The video is processed transiently on our analysis server; only the derived statistics (heart rate, variability metrics, quality flags) are returned to your device and stored. The video itself is discarded after processing.

rPPG is research-grade, not clinical-grade. Do not use these readings to diagnose or rule out cardiovascular conditions. For medical decisions, consult a qualified clinician using validated equipment.

Skin tone affects rPPG accuracy: green-channel methods perform best on lighter skin tones (Fitzpatrick I–IV) and show reduced accuracy on darker skin tones (Fitzpatrick V–VI). When reduced accuracy is detected, the report flags it explicitly.

Videos are deleted from the processing server within minutes of analysis completing. We do not keep copies.

The full audio waveform and the full transcript are processed in memory only — never written to durable storage. Only the derived statistical features (lexical density measures, prosody summaries, etc.) and a small set of short quoted excerpts (each capped at 200 characters, capped at 30 per analysis) are retained as evidence in your report.

Behavioural metrics, baselines, and report data are stored against your account so subsequent reports can compare against your personal norm. You can request export or deletion of this data at any time from settings.

When the cardiovascular analysis option is enabled, heart rate and heart rate variability are estimated from subtle skin-color variations in the video, a technique called remote photoplethysmography (rPPG). The video is processed transiently on our analysis server; only the derived statistics (heart rate, variability metrics, quality flags) are returned to your device and stored. The video itself is discarded after processing.

rPPG is research-grade, not clinical-grade. Do not use these readings to diagnose or rule out cardiovascular conditions. For medical decisions, consult a qualified clinician using validated equipment.

Skin tone affects rPPG accuracy: green-channel methods perform best on lighter skin tones (Fitzpatrick I-IV) and show reduced accuracy on darker skin tones (Fitzpatrick V-VI). When reduced accuracy is detected, the report flags it explicitly.

You can disable cardiovascular analysis at any time from your settings page; analyses run with the option off skip the rPPG extraction entirely.

You can delete your stored baseline at any time from settings. Deleting it does not delete your reports — it just resets the personal norm we use to anchor future analyses.

You can request export of all your account data (reports, baselines, settings) by emailing privacy@grwproject.app. Exports are delivered as JSON.

You can request deletion of your account from settings. This removes your reports, baselines, and account record. Stored audio / transcript / video have already been discarded post-processing, so deletion is principally about your derived metrics and report history.

Under PIPEDA (Canada) and GDPR (EU/UK), you have the right to access, correct, and erase your data. You can exercise these rights through the channels above.

Privacy questions: privacy@grwproject.app.

Data Protection Officer (GDPR contexts): dpo@grwproject.app.

Security disclosures: security@grwproject.app.