Privacy Policy

GRVTY ("we," "us," or "our") operates the GRVTY mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Account Information

When you create an account, we collect the following information:

• Email address
• Display name (if provided)
• Authentication provider identifiers (Google Sign-In or Apple Sign-In)
• Profile photo URL (if provided by your sign-in provider)

1.2 Authentication Data

We support three authentication methods: Google Sign-In, Apple Sign-In, and email-based login. Authentication is managed through Supabase, our authentication provider. We store authentication tokens and user identifiers necessary to maintain your session and secure your account. We do not store your Google or Apple account passwords.

1.3 Subscription Information

Subscription purchases are processed through Apple's App Store or Google Play. We use RevenueCat to manage subscription status and entitlements. We receive and store:

• Subscription status (active, expired, or cancelled)
• Subscription plan type (weekly, monthly, or annual)
• Purchase and expiration dates
• Anonymous RevenueCat user identifiers

We do not receive or store your payment card details, billing address, or other financial information. All payment processing is handled directly by Apple or Google.

1.4 Usage and Progress Data

We collect data related to your use of the App, including:

• Active journey selection
• Challenge and mission completion status
• Progression through the curriculum
• Timestamps of activity within the App

1.5 Device and Technical Data

We may collect technical information about your device, including device type, operating system version, and app version. This data helps us diagnose issues and improve the App.

2. Future Data Collection

In future versions of the App, we may collect the following additional data. We will update this Privacy Policy before enabling any of these features:

2.1 Camera Access

A future AI Coach feature may request access to your device's camera to record exercise form for analysis. Camera access will only be used when explicitly initiated by you and will require your device's permission. Video data captured for form review will be processed for analysis purposes and will not be shared with third parties.

2.2 Push Notifications

We may send push notifications for training reminders and important account updates. You can opt out of push notifications at any time through your device's settings.

2.3 Analytics

GRVTY currently does not transmit analytics data to third-party analytics platforms. If analytics are introduced in the future, this Privacy Policy will be updated before those systems become active. Any analytics data collected will be aggregated and anonymized where possible.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Authenticate your identity
• Manage your subscription and entitlements
• Track your training progress across the curriculum
• Provide and maintain the App's functionality
• Diagnose technical issues and improve the App
• Communicate important service updates
• Comply with legal obligations

4. Data Sharing and Third-Party Services

We do not sell, rent, or trade your personal information. We share data only with the following service providers, which are necessary to operate the App:

• Supabase — Authentication and data storage
• RevenueCat — Subscription management and entitlement verification
• Apple App Store / Google Play — Payment processing

Each of these providers operates under their own privacy policies. We encourage you to review their respective policies.

We may also disclose your information if required by law, court order, or governmental regulation, or if disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the App's services. If you delete your account, we will delete your personal data in accordance with our data retention obligations, except where we are required to retain certain data for legal, regulatory, or legitimate business purposes (such as maintaining transaction records).

Anonymized and aggregated data that cannot be used to identify you may be retained indefinitely for analytical purposes.

6. Account Deletion

You can permanently delete your account directly from within the GRVTY app:

Deleting your account removes your personal account data from our systems in accordance with our data retention obligations. This includes:

• Your account and authentication credentials
• Your progress and usage data
• Your information from our active databases

Subscription cancellation must be handled separately through your Apple App Store or Google Play account if you have an active subscription. Deleting your account does not automatically cancel an active subscription.

If you experience technical issues during the deletion process, contact us at ks227626@gmail.com.

7. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), secure authentication protocols, and access controls on our infrastructure. However, no method of electronic storage or transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — You may request a copy of the personal data we hold about you.
• Correction — You may request correction of inaccurate or incomplete data.
• Deletion — You may request deletion of your personal data, subject to legal retention requirements.
• Portability — You may request an export of your data in a machine-readable format.
• Objection — You may object to certain processing of your data.

To exercise any of these rights, contact us at ks227626@gmail.com. We will respond to your request within 30 days.

9. Children's Privacy

The App is not intended for use by individuals who do not meet the minimum age requirements applicable in their country or region, or the age requirements of the platform from which the App is downloaded. We do not knowingly collect personal data from users who do not meet these requirements. If we become aware that we have collected data from such a user without appropriate consent, we will take steps to delete that information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your jurisdiction. By using the App, you consent to the transfer of your information to such countries. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective date" at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

12. Legal Entity

The data controller for the purposes of this Privacy Policy is:

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

ks227626@gmail.com