Privacy Policy

Information We Collect

How We Use Your Information

We use your information to:

• Provide and maintain the App’s functionality
• Authenticate your account and maintain your session
• Sync your habit data across devices
• Process and manage subscriptions and premium access
• Respond to support requests and account issues
• Improve and optimize the App based on usage patterns
• Diagnose technical issues and monitor app stability
• Understand how users interact with features so we can prioritize improvements

Data Storage and Security

Grid10X uses Supabase for cloud database storage and authentication.

Based on the current implementation:

• Authentication sessions are persisted securely
• On supported native devices, session storage uses secure device storage
• Data is transmitted over encrypted connections
• Account-linked data is designed to be scoped to the authenticated user

The in-app policy states that Supabase uses industry-standard encryption and that row-level security is used to ensure user data is accessible only to the relevant user.

Analytics and Tracking

We use PostHog, a product analytics platform, to understand how users interact with the App.

The current in-app legal copy states that:

• PostHog is hosted in the European Union
• Analytics data is used solely to improve the App
• Analytics data is not sold to third parties
• Analytics data is not used for advertising purposes

Data collected by PostHog may include

• Screen views and navigation patterns
• Feature usage events, including interactions such as habit creation, habit completion, paywall views, purchase completion, restore completion, and related purchase errors
• Session information
• App version
• Device type and operating system version
• A pseudonymous or account-linked identifier

Data PostHog is not intended to collect under the current policy

• Habit names or habit content
• Precise location or GPS data
• Contacts, photos, or personal files
• Passwords
• Full payment information

For more information about PostHog, you can refer to: https://posthog.com/privacy

Third-Party Services We Use

Grid10X currently relies on the following providers:

Data Sharing

We do not sell, rent, or trade your personal information to third parties.

We may share limited information only as necessary with service providers that help us operate the App, including:

• Supabase for authentication and data storage
• RevenueCat for subscription management and purchase verification
• PostHog for analytics
• Apple or other platform providers for billing, authentication, and platform functionality

We may also disclose information if required by law or if necessary to protect our rights, users, or the security of the service.

Data Retention

According to the current in-app policy:

• Account and habit data are retained while your account remains active
• Analytics data collected by PostHog may be retained for up to 12 months and then deleted
• When you delete your account, your personal data is permanently removed from our servers
• Aggregated or anonymized analytics data that cannot reasonably identify you may be retained for product improvement purposes

Your Rights and Choices

Depending on your location, you may have rights regarding access, correction, deletion, or limitation of processing.

Within the current app experience:

• You can access your habit data in the App
• You can delete your account through the App settings
• You can restore purchases through the purchase flow or customer center
• You can manage or cancel subscriptions through your App Store account settings

The app also supports password reset for email/password accounts.

Account Deletion

The current app implementation includes an account deletion flow that removes account data using a backend deletion procedure.

Please note:

• Deleting your Grid10X account does not automatically cancel an App Store subscription
• Subscriptions must be managed separately through the applicable app marketplace account settings

Analytics Choices

The current in-app policy states that you may limit analytics collection through your device privacy settings. The same policy also states that when you delete your account, analytics data is disassociated from your identity.

International Data Transfers

The current in-app policy states that:

• Account data is stored on Supabase servers
• Analytics data is processed by PostHog in the European Union
• Transfers are protected by appropriate security measures, including encryption

By using the App, you consent to the transfer and processing of your data as described in this policy.

Children’s Privacy

Grid10X is not intended for children under 13 years of age, or under 16 in the EU/EEA where applicable. We do not knowingly collect personal information from children.

If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date and may provide notice through the App or other appropriate channels.

Contact Us

If you have questions about this Privacy Policy or your personal data, contact:

• Email: grid10x@outlook.com