We don’t collect your identity.
Neuracorn is built to verify growing — not people. If a feature needs personal data, the feature is wrong.
Plain-language policy. No “we may share with trusted partners” nonsense.
Quick answers
We use SSO (Google/Apple) to sign you in, then derive a non-reversible account identifier.
No ad networks. No “partners”. No behavioural profiling.
1. Safety by design
2. Why do you need location? (And what kind?)
Verification needs a reality anchor: a grow happens somewhere. We use location to help confirm that the environment matches plausible growth (light, climate, seasonality) and that progress photos are tied to the same grow site.
- ✓ We need a general location, not your specific home address.
- ✓ Used for verification signals (weather/daylight plausibility), not for tracking you.
- ✓ Stops “remote farming” fraud (submitting photos from unrelated places).
3. Do you store my personal info?
No. We don’t store your name or email on our servers. We authenticate via SSO (Google/Apple) so we don’t need to run a password database or hold your identity.
4. What do you store, then?
We store what the system needs to function:
- ✓ Account identifier: a non-reversible ID derived from sign-in (not your email).
- ✓ Grow records: plant type, timestamps, verification status.
- ✓ Verification evidence: photos you submit (for the grow you’re proving).
- ✓ Anti-fraud signals: limited, purpose-bound signals to prevent bot farming.
We avoid storing identity data because it creates risk with no benefit to verification.
5. What is a hash (and what do we actually do)?
A cryptographic hash turns input into a fixed-length string. It’s designed to be one-way. In practice we use a modern approach (e.g. SHA-256 + salt/pepper or a stable SSO subject identifier) so your email is not stored as plaintext.
// Illustrative example
input → hash
'myemail@example.com' → 'c4f1...9a2b'
'myemail@example.com' (same input) → 'c4f1...9a2b' (same output)
This lets the system recognize “the same account” without keeping your email in our database.
6. Device identity & anti-fraud (no tracking)
To stop automated reward farming, we may use limited device-level signals (e.g. via fingerprinting approaches). This is used for one thing only: preventing bots and multi-account abuse.
- ✓ Bot prevention: blocks scripted account farming from a single machine.
- ✓ System integrity: helps ensure grows come from real humans, not server farms.
- ✗ No ad tracking: we do not follow you across the web or build a behavioural profile.
7. The promise in one sentence
We built the app so your identity is not the product.