Privacy Policy
Your data. Your choice.
- What you log in Grrl is yours. We use it to run Grrl for you, and for nothing else.
- No ads. We never sell your data or share it for advertising. We don’t use trackers, analytics cookies or data brokers, and we don’t train AI on your data.
- You choose who sees what. Partners, family and friends see only what you share with them.
- You can download everything, or delete your account and all of it, from inside the app at any time.
1. Who we are
Grrl (“Grrl”, “we”, “us”) is run by [Legal entity name], [Postal address]. We are the controller of your personal information. For anything about privacy, email privacy@grrl.app. Our separate Consumer Health Data Privacy Policy covers the health information laws of Washington, Nevada and other US states.
2. What we collect
| What | Examples | Why |
|---|---|---|
| Account | Email, first name, password (stored only as a secure hash by our database provider) | To create your account and keep it secure |
| Age | Birth month and year (never the day) | To show what fits your age, to keep under-13s off Grrl and under-18s out of Circles |
| Health and body information you log | Periods and cycle signs, fertility signs, pregnancy and due date, symptoms, measurements, medicines, birth and recovery, menopause symptoms, mood, journal entries, self-check answers, photos | To show your trackers, predictions, guides, reminders and reports |
| Your children | Name, birthday, sex (for growth charts), growth, checkups, vaccines, feeds, illnesses, allergies, milestones you add | To help you care for them. You control this information as their parent or carer |
| People and plans | Names and contact details of people you invite; event pages; guest lists and replies; village schedules; lists; budgets | To share your tracker and run your events and plans |
| Circles and groups (18+) | Your circle name, posts, reactions, reports; if you ask to be matched: due month and the country, region or city you choose | To run peer support and groups, and keep them safe |
| Notifications | A push address for your device, your reminder choices | To send the reminders you turned on |
| Payments (Grrl Plus) | Subscription status and dates. Card details go to Stripe and never reach us | To provide Plus |
| Support | Emails you send us | To help you |
| Error reports | The error message, the page, the app version and browser type. Never what you typed or logged | To fix problems. Kept 30 days |
Event page guests give us their name, their reply and any note or photo they choose to send. Their information goes to the host and is handled under this policy.
We don’t collect your precise location, contacts, or anything from other apps, and we don’t buy data about you.
3. How we use it, and our legal bases
- To provide Grrl (performing our contract with you): your trackers, guides, reminders, sharing, events, Circles, Plus.
- Health information, with your explicit consent, which you give when you create your account and choose what to log. You can withdraw it at any time by deleting what you logged or your account.
- To keep Grrl safe and working (our legitimate interests): security, preventing abuse, fixing errors, enforcing our Terms and Community Guidelines.
- To meet legal obligations, such as tax records for payments and responding to valid legal requests.
We only email you about your account, your subscription and important changes. We don’t send marketing emails unless you ask for them.
4. Who can see your information
- You. Some things, like your self-check results and notes, are visible only to you, even if you share your tracker.
- People you choose. A partner you add as an admin sees and edits your tracker. Family and friends you invite see only the categories you pick, and you can change or remove that at any time.
- Event guests see what you publish on an event page. Pages aren’t listed in search engines, but anyone with the link can open them.
- Other members of a circle or group see your posts under your circle name, never your email.
- Our team. Access rules in the database keep your information to you and the people you share with. Our admins can see account details (such as your email, when you joined, your subscription and any Circles restriction) to help you, and only counts across Grrl, never your logs. We look at your information only when you ask us to help, or when the law requires it.
- Our service providers, who process data only on our instructions, under contracts that protect it:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database and sign-in | United States (AWS, Ohio) |
| Netlify | Hosting the app and pages | Global network |
| Cloudflare | Photo storage; notification and payment services | Global network |
| Resend | Sending account emails (sign-up, password reset) | United States |
| ImprovMX | Forwarding emails you send us | Their network |
| Stripe | Payments for Grrl Plus | United States and others |
| Apple, Google, Mozilla push services | Delivering notifications you turned on, to your device | Their networks |
We don’t sell personal information and we don’t share it for cross-context behavioural advertising, as those terms are defined in California law.
5. Requests from police and governments
Information about periods, fertility and pregnancy can be sensitive in law. We disclose personal information only when a valid, binding legal process requires it. We read every request carefully, give only the minimum required, challenge requests we believe are unlawful or too broad where we lawfully can, and tell you before we disclose unless the law or a court forbids it.
6. How long we keep it
- While your account is open, we keep what you logged so Grrl can work.
- When you delete your account, everything in it is deleted straight away, including your posts in Circles. Photo files are cleared from storage within hours. Encrypted backups expire within 7 days.
- If you share a tracker you own and delete your account, it’s deleted for everyone. If you help on someone else’s tracker, anything you wrote there stays with its owner.
- Error reports: 30 days. Payment records: as long as tax law requires.
7. Your rights
Wherever you live, you can:
- Get a copy of your information: Me → Export backup, or email privacy@grrl.app.
- Correct it: edit it in the app, or ask us.
- Delete it: Me → Your account → Delete your account, or see Delete your account.
- Withdraw consent to us using your health information, by deleting it or your account.
- Object to or restrict how we use it, and take it elsewhere (the backup is a standard JSON file).
In the UK and EU you can also complain to your data protection authority (in the UK, the ICO). In California and other US states with privacy laws, you have the right to know, delete and correct, and to opt out of sale and sharing (we do neither). We won’t treat you differently for using your rights. We answer within one month (45 days where US state law allows), and we may need to confirm it’s really you. You can use an authorised agent where the law allows. If we refuse a request, you can appeal by replying to our answer; we’ll respond within 45 days.
8. Children and teens
- Grrl is for people aged 13 and over. If someone tells us they’re under 13, their account and everything in it are deleted straight away.
- For 13 to 17 year olds, Circles and groups are switched off (enforced in our database), nothing is sold, and there are no offers. What a teen logs is private to them unless they choose to share it.
- Information about children that a parent adds is controlled by that parent, and is deleted with their tracker.
- If you believe a child under 13 is using Grrl, email privacy@grrl.app.
9. Security
Information travels encrypted (HTTPS) and is encrypted at rest by our providers. Access rules in the database check every request, so one account can’t read another’s data. Passwords are stored only as secure hashes. Very few people on our team can access our systems, and only for running Grrl. No system is perfectly secure; if a breach affects your information, we’ll tell you and the authorities as the law requires. To report a security problem, see Security.
10. Storage on your device
Grrl keeps a copy of your tracker on your device so it works offline, plus small settings like your layout choice. This is essential to how Grrl works, not tracking. We use no advertising or analytics cookies, and load no third-party scripts or fonts. Signing out locks the app; “Remove from this device” in Me deletes the copy on that device.
11. Where your information is stored
Your information is stored in the United States. If you live in the UK or EU, our providers transfer it under the European Commission’s Standard Contractual Clauses and the UK addendum, or an adequacy decision such as the EU–US Data Privacy Framework.
12. Changes
If we make a material change, we’ll tell you in the app (and by email for important changes) before it takes effect. The date at the top shows the latest version.
13. Contact
[Legal entity name], [Postal address]. Email privacy@grrl.app.