Privacy Policy

This Privacy Policy explains how Grid(“Grid,” “the App,” “we,” “us,” or “our”), published by NaughtySpirit, collects, uses, and protects information when you use the Grid iOS app. By using Grid, you agree to this policy. If you do not agree, please do not use the App.

1. Information we collect

Account information

Every install of Grid gets a working account automatically the first time you open the App — there is no signup wall. This anonymous account is tied to a random identifier, not to you personally. If you choose to “Save your progress” from Settings, we additionally collect the information needed to authenticate you going forward — typically an email address, and either a password or a passkey credential. Authentication is handled by our backend provider, Supabase.

Habit and progress data

The core of Grid is the data you create by using it: habit names, icons, and colors; which days you marked a habit done; streak-related settings such as your day-boundary hour, skip-weekdays, and vacation mode; optional journal notes attached to a day; and habit “automaticity” check-in answers. This data is stored in our database, scoped to your account, and is never visible to other users — Grid has no public profile, leaderboard, or social feed.

Purchases and subscriptions

Grid Premium purchases are processed by the App Store and by our subscription management provider, RevenueCat. We receive your subscription status (for example, whether Premium is currently active) so the App can unlock the right features — we do not receive or store your payment card details, which are handled entirely by Apple.

AI-generated insights (Premium)

For Premium accounts, Grid looks for weekday-level patterns in your habit history (for example, a weekend dip or a slow Monday start) using logic that runs entirely on our server from your completion data. To turn a detected pattern into a nicely worded weekly message, a short text summary of that pattern — not your raw habit list, name, or any other identifying information — may be sent to a third-party AI language model provider through our server. Free accounts get the same insight from a local template instead, with nothing sent anywhere.

Notifications

Reminder notifications are scheduled locally on your device using standard iOS notification scheduling. You can change or turn these off at any time in Settings, or at the iOS system level.

Technical and diagnostic information

Like any networked app, standard technical metadata (such as IP address and request timing) is processed by our infrastructure providers (Supabase and our hosting provider) as part of handling requests and keeping the service secure. We do not use third-party advertising or behavioral-tracking SDKs in the App.

2. What we don't do

• No ads, and no ad-tracking SDKs.
• We do not sell or rent your personal information.
• No public feed or leaderboard exposing your habits to other users.
• No account is required to use the core App.

3. How we use your information

We use the information above to operate the App's core features (tracking, streaks, widgets, share cards), to process and validate Premium subscriptions, to generate the weekly insight described above, to provide customer support when you contact us, and to maintain the security and reliability of the service.

4. Data storage and security

Habit and account data is stored in a Postgres database hosted by Supabase, protected by row-level security rules that scope every row to your account. Data is encrypted in transit (TLS) and at rest by our infrastructure provider. Your authentication session is additionally encrypted on-device before being stored locally. No method of transmission or storage is completely secure, but we design the App around current best practices for a consumer mobile app.

5. Data retention and deletion

Your data is retained for as long as your account exists. You can permanently delete your account and all associated data at any time from Settings → Delete Account, which requires typing a confirmation phrase before it takes effect. If you only uninstall the App without deleting your account, your data remains stored so it can be restored if you reinstall or sign back in.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. You can export your full habit history as a CSV file at any time from within the App (Premium), and delete your account and data as described above. For any other request, contact us using the details below.

7. Children's privacy

Grid is not directed at children and we do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your region). If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

8. International users

Grid is operated from Bulgaria. If you use the App from another country, your information will be processed in the countries where we and our service providers (including Supabase and our AI provider for Premium insights) operate, subject to applicable law.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above will change when we do. Continuing to use Grid after a change means you accept the updated policy.

10. Contact

For privacy questions or data requests, contact us at support@retroselfie.me.