← gritfile.com

Privacy Policy

Gritfile is a pain-point journal for solo founders ("Gritfile", "we"). This policy explains what we collect, why, and what we never do. The short version: your journal is yours, we collect the minimum needed to run the app, and we don't sell data or run ads.

What we collect

• Account. Your email address and a password (stored hashed by our authentication provider, Supabase). We use it to sign you in and to scope your data to your account.
• Journal content. The entries you write, plus tags, severity, and timestamps. Stored in our database (Supabase/PostgreSQL) with row-level security so only your account can read them.
• AI analyses. The diagnoses, reports, and idea deep-dives generated from your entries are stored alongside them.
• Purchase state. Whether your account has an active subscription or credit balance. Payments are processed entirely by Apple's App Store or Google Play — we never see your card details. Our payments partner RevenueCat processes purchase receipts to keep this state in sync.
• Crash diagnostics. If the app crashes, an anonymous crash report (stack trace, device model, OS version) is sent to our error-monitoring provider, Sentry, so we can fix the bug. Crash reports are not linked to your account or journal content.

We do not collect analytics profiles, advertising identifiers, contacts, or location. Gritfile contains no ads and no behavioral tracking SDKs.

How AI analysis works

When you request an analysis, the text of the relevant entries is sent from our server to Anthropic's Claude API to generate the result. This happens server-side; API keys never touch your device. Per Anthropic's API terms, data sent to the API is not used to train their models. Your entries are only sent when you invoke an AI feature — logging alone stays in the database.

Notifications

Reminders are scheduled locally on your device and can be turned off anytime in the app. We do not send marketing pushes or emails.

Your data, your controls

• Export. You can export your full journal as Markdown from the Profile screen at any time.
• Deletion. Deleting your account (Profile → Delete account) permanently removes your profile, entries, analyses, saved ideas, and usage records from our database, immediately. If you can't sign in, you can request deletion by email instead.

Retention

Your account, journal, and analyses are kept until you delete them or your account. Purchase records held by Apple, Google Play, and RevenueCat are retained as required for billing, tax, refund, and fraud-prevention purposes and are not linked back to a deleted account. Anonymous crash reports are retained by Sentry for up to 90 days.

Data sharing

We share data only with the processors named above (Supabase for auth/database hosting, Anthropic for AI analysis, RevenueCat for purchase state, Sentry for crash diagnostics, Apple/Google for payments) plus Expo, whose update service delivers app updates to your device and receives only technical device/runtime information, and only as needed to provide the service. We do not sell or rent personal data. We would disclose data only if legally required.

Children

Gritfile is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially, we'll update this page and the effective date above.

Contact

Questions or requests: hello@gritfile.com