For clients
How Grove keeps your information safe.
The things you share with your coach should stay private, encrypted, and yours. Here, plainly, is how Grove protects them.
Your coach invited you to Grove, or you booked time with them through their booking page, so the two of you can stay connected between sessions. The things you share here, your goals, reflections, check-ins, and messages, stay private between you and your coach. We built Grove so your information is protected, never sold, and only ever seen by the people it is meant for.
- Only you and your coach can see what you share.
Your information is tied to your coach’s practice and kept separate from every other coach’s clients. No other coach, and no one outside your coaching relationship, including an employer who may be sponsoring your coaching, can see what you write.
- Sage applies text redaction before processing.
Sage is Grove’s AI assistant. Before coaching text is sent to Anthropic for Sage, Grove replaces known coach and client names, email addresses, and phone numbers with neutral placeholders and removes account identifiers. The placeholders are restored in the result you or your coach sees. We also redact email addresses and phone numbers in free text, but we do not scan for other names. The remaining text can still include identifying or sensitive details. These controls do not redact raw voice audio.
- Voice memos use a separate transcription service.
When voice memos are available and the person recording has given recording consent (the practice for a coach's voice memos, the client for their own), Grove stores recorded coach and client audio in AWS S3 and sends the actual audio to OpenAI for transcription. Voices and spoken names are not de-identified. Audio is kept for 90 days after sending, then deleted; the transcript remains with the message. Voice-memo transcripts are not supplied to Sage. Recording consent is separate from Sage AI consent, and typed messages are an alternative. See the Privacy Policy for details.
- Sage is a choice, and you hold your half of it.
It is off unless your coach has turned it on for their practice and you have turned it on for yourself. Either of you can turn it off at any time, and turning it off stops it. If your coach kept notes about you before you had a Grove account, they were responsible for that choice. Once you have an account, the choice is yours, and yours overrides theirs.
- A session held in Grove is transcribed only if you agree.
If your coach holds the session in Grove, that call can produce an audio transcript. It is never a video recording. Transcription runs only when your coach has turned it on for their practice and you have turned it on for yourself, and both start off. The screen you join from tells you plainly, and you can always join without it. The call runs on Daily, our video provider, which keeps its own copy of the transcript.
- A session transcript becomes a note only after your coach reviews it.
The transcript is stored with your session, and inside Grove your coach is the only person who can read it. Sage does not touch it unless your coach asks for a draft, and that needs your AI consent too, because agreeing to a transcript is a separate thing from agreeing to Sage.
- No one is quietly reading your check-ins.
Our records track activity and IDs, not the words you write. We have no internal tools that surface your messages, check-ins, or notes, and there is no standing way for anyone at Grove to browse what you share.
- Encrypted, coming and going.
Everything you send is encrypted in transit and where it is stored, so nothing travels or sits in the clear.
- Private, reliable infrastructure.
Grove runs on Amazon Web Services. The database lives on a private network, is not reachable from the public internet, and is backed up every day.
- Never sold, never advertised.
We share data with service providers to deliver Grove, as described in our Privacy Policy. We do not sell your data or use it for advertising. There are no advertising trackers in the Grove app. We do count which features get used, under an internal ID rather than your name, with no session recording and no capture of what you write, so we can tell which parts of Grove are worth building.
- You stay in control.
In the Grove mobile app you can delete your account and your data yourself, at any time. If you use Grove in a browser, ask your coach or email us at hello@grove.coach and we will do it. You agreed to how your information is used when you joined, and you can ask us anything.
Some people arrive at Grove by booking a session on a coach’s public page rather than by invitation. If that was you, you gave very little: a first name, an email address, optionally a last name, the time you picked, and the answers to any intake or consent form your coach attached to that session. That is all we asked for and all we kept.
A record was created for you in your coach’s practice, which is where your session, your confirmation email, and your coach’s notes live. It carries the same protections as everything else on this page. You may not have a Grove login at all, and you do not need one to keep your appointment. Paid bookings run through your coach’s own payment account with Stripe, so their business name is what shows on your statement, and your card details go from you to Stripe and are never stored by Grove.
One thing worth knowing: your confirmation, your intake form, and your “Your session” page open from a long random link instead of a password, so you never have to make an account to keep an appointment. It does mean anyone you forward the link to can open that page, so treat it like a ticket rather than a login. Each link shows one session, never your whole record.
Emails from Grove lead with your coach’s practice: their name in your inbox, their logo at the top, Grove in a small line at the bottom. The mail is sent by Grove on your coach’s behalf, from an address at grove.coach, so if something in one of those emails looks wrong, you can check with your coach directly.
Grove is a good home for the everyday context that helps your coach support you: your goals, reflections, check-ins, habits, and the notes that keep your work going between sessions.
Grove is not a medical records system. You do not need to put clinical records such as diagnoses, lab results, or treatment notes here. A good rule of thumb: share what helps your coach support you, and keep formal medical records with your healthcare providers.
Questions welcome
Your privacy should be clear, not a mystery. If you ever want more detail, or you have a concern about your information, ask your coach or reach out to us directly.