Privacy Policy

Effective July 22, 2026

Gritfile is a pain-point journal for solo founders ("Gritfile", "we"). This policy explains what we collect, why, and what we never do. The short version: your journal is yours, we collect the minimum needed to run the app, and we don't sell data or run ads.

What we collect

Account. Your email address and a password (stored hashed by our authentication provider, Supabase). We use it to sign you in and to scope your data to your account.
Journal content. The entries you write, plus tags, severity, and timestamps. Stored in our database (Supabase/PostgreSQL) with row-level security so only your account can read them.
AI analyses. The diagnoses, reports, and idea deep-dives generated from your entries are stored alongside them.
Purchase state. Whether your account has an active subscription or credit balance. Payments are processed entirely by Apple's App Store or Google Play — we never see your card details. Our payments partner RevenueCat processes purchase receipts to keep this state in sync.
Crash diagnostics. If the app crashes, an anonymous crash report (stack trace, device model, OS version) is sent to our error-monitoring provider, Sentry, so we can fix the bug. Crash reports are not linked to your account or journal content.

We do not collect analytics profiles, advertising identifiers, contacts, or location. Gritfile contains no ads and no behavioral tracking SDKs.

How AI analysis works

When you request an analysis, the text of the relevant entries is sent from our server to Anthropic's Claude API to generate the result. This happens server-side; API keys never touch your device. Per Anthropic's API terms, data sent to the API is not used to train their models. Your entries are only sent when you invoke an AI feature — logging alone stays in the database.

Notifications

Reminders are scheduled locally on your device and can be turned off anytime in the app. We do not send marketing pushes or emails.

Your data, your controls

Export. You can export your full journal as Markdown from the Profile screen at any time.
Deletion. Deleting your account removes your profile, entries, and analyses from our database. Email us if you want confirmation or need help.

Data sharing

We share data only with the processors named above (Supabase for auth/database hosting, Anthropic for AI analysis, RevenueCat for purchase state, Sentry for crash diagnostics, Apple/Google for payments), and only as needed to provide the service. We do not sell or rent personal data. We would disclose data only if legally required.

Children

Gritfile is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially, we'll update this page and the effective date above.

Contact

Questions or requests: hello@gritfile.com