Privacy Policy
Grippa is a habit tracker with group standings. This policy describes what the app stores, what leaves your device, and what never does.
What stays on your device
Your habit list, schedules, check-in history, streaks, freezes and statistics are stored on your iPhone and synced through your own iCloud account, so the same data appears on your other devices under the same Apple ID.
Proof photos are the strictest case. A photo taken inside the app is written to the device only. It is never uploaded to our servers, never shown to your group, and never included in anything we receive. Delete the app and those photos go with it.
What we receive
Running a group means moving a small amount of data between members. What we store is limited to:
- An account identifier and the display name you choose.
- The clubs and teams you belong to, your role in them, and invite codes you created.
- Check-in events inside a group: which habit, which day, the points awarded — not the photo, not private notes.
- Messages and reactions you post in a group feed, because other members have to be able to read them.
- Coach conversations, so the thread survives a reinstall.
What we do not collect
No contacts, no location, no camera roll, no health records, no advertising identifiers. There is no advertising in Grippa and no third-party analytics or tracking SDKs in the app. We do not sell personal data and do not share it with data brokers.
What your group can see
A club shows one shared habit list; personal habits stay private. A team shows each member's habits to the rest of the team — that is the point of the format, which is why joining one asks for explicit confirmation.
In both formats members see your check-ins, points, streak length and whatever you post in the feed. They do not see your proof photos or your private notes.
The AI coach
The coach asks for consent before anything is sent. If you accept, your message and a summary of the relevant habit — schedule, completion rate, streak — are sent to a third-party model provider to generate a reply. Photos are never sent. The provider processes requests on our behalf and is not permitted to train on them.
The rest of the product works fully without ever enabling the coach.
Payments
Subscriptions are handled by Apple through the App Store. We never see your card details; we receive only whether a subscription is active and when it renews.
Who else processes your data
We use four companies to run Grippa. Each one receives only what is listed here, and nothing more.
- Supabase (United States) hosts our database and file storage. It holds your account identifier, display name, group memberships, check-in events, feed posts and coach history.
- Apple (United States) handles sign-in and every payment. We never receive your card details.
- RevenueCat (United States) records whether your subscription is active and when it renews. It receives your account identifier and the purchase, nothing else.
- DeepSeek (China) is the model behind the coach. It receives only the message you write to the coach and a short summary of the habit you asked about — never your name, your email, your group or your photos — and only after you have turned the coach on.
How long we keep things
Group data stays while your account exists. When you delete your account we remove your profile, memberships and coach history within 30 days. Messages you posted in a group feed are anonymised rather than deleted, so other members' conversations stay readable. Backups are overwritten within 90 days.
Your rights
You can export everything the app holds about you as CSV from Settings at any time, without asking us. You can also request access, correction or deletion, or object to processing, by writing to ustechnologyllc@proton.me. We answer within 30 days.
In the EEA and the UK the legal basis for group features is our contract with you; for the coach it is your consent, which you can withdraw at any time.
If you are in the EEA or the UK: coach messages are transferred to China, which the European Commission has not recognised as providing an adequate level of protection. That transfer happens only with your explicit consent, under Article 49(1)(a) GDPR, and you can withdraw it at any time by turning the coach off in Settings. Everything else stays with providers in the United States.
Children
Grippa is not directed at children under 13 and accounts are not knowingly created for them. If you believe a child has an account, write to ustechnologyllc@proton.me and it will be removed.
Changes
If this policy changes in a way that affects what we collect, the app shows the change before the new version takes effect. The date below always reflects the current version.