Privacy Policy

1. General Information

This Privacy Policy explains how Sole Proprietor Biriulin Oleksandr Serhiiovych / FOP Biriulin Oleksandr Serhiiovych ("we," "us," or "our") processes personal data when you use the GritMode: App Blocker mobile application (referred to as "GritMode" or the "App") and related services (together, the "Service").

We act as the entity responsible for the processing of personal data as described in this Privacy Policy.

2. Scope of This Policy

This Privacy Policy applies to personal data that may be processed when you:

• install, open, or use GritMode;
• grant access to device features such as HealthKit, Screen Time / Family Controls, notifications, or camera, where applicable;
• create, edit, or delete habits, tasks, statistics, records, and other data within the app;
• purchase a subscription or in-app product;
• contact support.

This Privacy Policy does not govern separate data practices of third parties such as Apple, the App Store, or email service providers unless expressly stated otherwise.

3. What Data We Collect and Process

3.1. Data You Provide Directly

GritMode does not require account creation and may be used without registration.

However, we may process data that you voluntarily provide, such as:

• your name and email address if you contact support;
• the content of your request;
• attachments, screenshots, or other materials you send to us.

3.2. Habit, Task, Progress, and Content Data

When you use GritMode, the app locally processes and stores data that you create within the app, such as:

• habits, tasks, goals, and related settings;
• completion records, streaks, schedules, and reminders;
• progress, activity, and feature statistics;
• notes, entries, and other data you type into the app;
• workout session data, time balance data, and unlock events, where such features are used.

This data is used to provide the core functionality of the app and is stored locally on your device. We do not access this data and do not transmit it to our servers.

3.3. Data from Device Features and Permissions

Depending on the features you enable, GritMode may process the following categories of data locally on the device:

• HealthKit: for example, step count data if used to award minutes or calculate progress;
• Screen Time / Family Controls / Device Activity / Managed Settings: data and technical tokens necessary to apply restrictions, blocks, and rules to selected apps;
• Camera: if the app uses local repetition counting or a similar feature, the camera may be used for on-device image processing. Camera images are not saved and not transmitted off the device;
• Local notifications: information required to display reminders and notifications from your device.

All such data is processed on the device using Apple's system APIs and is not transmitted to us.

3.4. Device and Technical Data

The app uses technical information on the device that is necessary for functionality, compatibility, and security, such as:

• device type and model;
• operating system version;
• device language and regional settings;
• app version;
• time zone;
• technical identifiers needed for internal app functions.

This information is used to support the correct operation of the app on the device and is not transmitted to us. Separately, information about the status of your subscription is processed through Apple / StoreKit, as described in Section 3.7.

3.5. Diagnostics and Crash Data

At this time, GritMode does not use third-party crash reporting services and does not automatically receive crash diagnostics directly.

Apple may collect anonymous diagnostic information and crash statistics in accordance with your iOS settings ("Analytics & Improvements"). Such processing is governed by Apple's policies.

If you voluntarily send us an error description, screenshots, or other support materials, we may process that information in order to investigate and resolve the issue.

3.6. Analytics

GritMode uses Amplitude (operated by Amplitude, Inc., United States — https://amplitude.com/privacy) as a product analytics provider to understand how the app is used in aggregate and to improve it.

Amplitude processes:

• a pseudonymous, device-generated analytics identifier (no name, email, or Apple ID);
• technical information automatically captured by the Amplitude SDK, such as approximate country derived from IP address, device model, operating system version, carrier, app version, and session start / end;
• product events generated by your use of the app, such as app opens, onboarding completion, paywall views, subscription purchases and restores, completed workout sessions (exercise type, repetition count, duration, earned minutes), and streak start / break events;
• user-level properties such as "days since first open," app version, and premium status flag.

Amplitude does not receive the content of your habits, tasks, notes, HealthKit data (including step counts), camera images, the list of apps you have selected to block in Screen Time, names, email addresses, or any other personally identifying information.

GritMode does not use advertising SDKs, advertising identifiers (IDFA), or cross-app / cross-site tracking technologies, and does not participate in behavioral advertising.

3.7. Payments and Subscriptions

If GritMode offers subscriptions or in-app purchases, subscription-related information is processed to provide access to the relevant features.

In particular:

• payments and transactions are processed by Apple through the App Store / StoreKit;
• we do not receive or store full payment credentials, including bank card details;
• subscription entitlements are managed through RevenueCat (https://www.revenuecat.com/privacy). RevenueCat receives Apple transaction receipts and a pseudonymous, device-generated app user ID so that premium status can be validated and restored across devices. We do not send health data, habits, workout content, or any other user content to RevenueCat;
• we may process limited subscription status information required to activate, restore, or confirm premium access.

3.8. AI Insights (Optional Premium Feature)

GritMode offers an optional AI Insights feature that generates a short daily report about your discipline patterns. The feature is available to premium subscribers and works only after you give explicit consent inside the app. If you do not enable it, no data described in this section is transmitted.

When you request a report, the app sends the following data to our proxy server (hosted on Cloudflare Workers, operated by Cloudflare, Inc.):

• anonymized, aggregated usage statistics generated by the app for the preceding 7 days: the number of completed workout sessions, earned minutes, and exercise types by time of day; the number of unlock events, their sources (workout / bank / credit), and time of day; the current minute bank balance and debt; the number of Deep Focus and Stop Block sessions; and the number of blocked apps and websites;
• the pseudonymous, device-generated RevenueCat app user ID (used solely to verify that your subscription is active and to enforce a one-report-per-day limit);
• your app language code (so the report is written in your language).

This payload does not include Screen Time / Family Controls data, the names or identifiers of the apps or websites you block, HealthKit data, camera images, notes or other content you type, or personal identifiers such as your name, email address, or Apple ID.

To generate the report, the statistics are forwarded to OpenAI (OpenAI, L.L.C., United States) and processed by a language model via the OpenAI API — see https://openai.com/policies/privacy-policy. Under OpenAI's API data usage terms, data submitted through the API is not used to train OpenAI models.

We do not store the transmitted statistics or the generated reports on our server. The only server-side record is a technical rate-limit marker (the pseudonymous user ID and the date), which is deleted automatically within approximately 25 hours. The generated report is stored locally on your device.

Data is transmitted only at the moment you request a report. If you stop using the feature, no further data is sent.

4. Purposes of Processing and Legal Bases

We process data only to the extent necessary for app operation and legitimate purposes.

Depending on the circumstances, legal bases may include:

• performance of a contract or provision of requested functionality;
• your consent where you grant device permissions or voluntarily contact us;
• our legitimate interests in maintaining app security, stability, and protection;
• compliance with applicable legal obligations.

5. How We Use Data

We may use data to:

• operate focus, discipline, and productivity features;
• store and display your habits, tasks, progress, and statistics;
• award minutes or calculate internal app metrics;
• apply the restrictions and app controls you choose;
• manage subscriptions and premium access;
• generate optional AI-based discipline reports where you have explicitly enabled the AI Insights feature (see Section 3.8);
• send local reminders and notifications;
• respond to support requests;
• fix bugs and improve app stability;
• comply with legal obligations and protect our rights.

6. Sharing of Data with Third Parties

We do not sell personal data.

We also do not disclose personal data to third parties for their own independent advertising or marketing purposes.

Because the core functionality of GritMode operates without accounts or cloud synchronization, the main body of user data remains on the user's device. The optional AI Insights feature uses a proxy server as described in Section 3.8.

However, in limited circumstances, data may be processed by the following categories of recipients:

• Apple / App Store / StoreKit for subscriptions, purchases, and transaction restoration;
• RevenueCat, Inc. (United States) for subscription entitlement validation and cross-device restoration — see https://www.revenuecat.com/privacy;
• Amplitude, Inc. (United States) for product usage analytics as described in Section 3.6 — see https://amplitude.com/privacy;
• Cloudflare, Inc. (United States) — hosting of the proxy server for the optional AI Insights feature (Section 3.8) — see https://www.cloudflare.com/privacypolicy/;
• OpenAI, L.L.C. (United States) — generation of AI Insights reports from anonymized statistics (Section 3.8) — see https://openai.com/policies/privacy-policy;
• email service providers if you contact us by email;
• public authorities, courts, regulators, or law enforcement where required by law;
• professional advisers where necessary to protect our rights and legitimate interests.

7. SDKs and Service Providers

GritMode uses the following third-party SDKs:

• RevenueCat — subscription entitlement management and cross-device restore. Privacy policy: https://www.revenuecat.com/privacy.
• Amplitude — product usage analytics (see Section 3.6 for the scope of events and data). Privacy policy: https://amplitude.com/privacy.

GritMode does not use third-party SDKs for advertising, crash reporting, marketing attribution, or cloud synchronization of user-generated content.

The app uses native Apple frameworks, which may include, depending on the app configuration:

• SwiftUI;
• SwiftData;
• UserDefaults;
• App Group;
• HealthKit;
• FamilyControls;
• ManagedSettings;
• DeviceActivity;
• UserNotifications;
• StoreKit.

Where the app uses features requiring additional system frameworks (for example, camera access or sending email through a system interface), such frameworks operate locally within the scope of permissions you grant.

If the list of providers or SDKs changes in the future, this Privacy Policy will be updated.

8. International Data Transfers

We do not routinely transfer core app data internationally through our own servers because the main user data is stored locally on the device.

However, in limited cases, data may be processed by external services in jurisdictions outside your country:

• Apple (App Store, StoreKit) — Apple's global infrastructure under Apple's policies;
• RevenueCat, Inc. — United States;
• Amplitude, Inc. — United States;
• Cloudflare, Inc. — United States (optional AI Insights feature only);
• OpenAI, L.L.C. — United States (optional AI Insights feature only);
• email service providers.

In such cases, processing takes place within the infrastructure of those services under their respective data protection frameworks.

9. Data Retention

Because GritMode primarily stores user data locally on the device, data is generally retained:

• until you delete it manually in the app settings;
• until you use the in-app data deletion or reset function;
• until you delete the app from your device;
• or for as long as technically necessary to maintain subscription status or handle your support request.

In addition:

• subscription-related data may be processed by Apple for periods determined by Apple and applicable law;
• support communications may be retained for as long as reasonably necessary to respond to the request, resolve disputes, comply with legal obligations, or protect rights.

10. Data Security

We apply reasonable technical and organizational measures to protect data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Because the main body of user information is processed locally on the device, a significant part of security also depends on your device security, operating system protections, and access settings.

However, no method of storage or transmission can guarantee absolute security.

11. Your Rights

Depending on your location and applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion of data;
• request restriction of processing;
• object to certain types of processing;
• receive a copy of data in a structured, commonly used, and machine-readable format where provided by law;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent data protection authority where applicable.

Because most data is stored locally on your device, many data management actions can be performed directly through the app or by deleting the app.

For privacy-related requests, you may contact us at alex.biriulin.pro@gmail.com.

12. Choices and Controls

You may manage data processing and permissions in the following ways:

• through iOS settings for HealthKit, camera, notifications, and other permissions;
• through Screen Time / Family Controls settings, where applicable;
• through the app settings, including the option to delete or reset locally stored data;
• by deleting the app from your device.

If you disable certain permissions, some GritMode features may be limited or unavailable.

13. Children's Privacy

GritMode is not directed to children under 13 years of age or any other age threshold required by applicable law in the relevant jurisdiction.

We do not knowingly collect personal data from children where prohibited by law, and we do not sell or "share" personal data of minors.

If you believe that a child has provided us with personal data in violation of applicable requirements, please contact us at alex.biriulin.pro@gmail.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

When we do, we will revise the effective date at the top of this document. Where required by law or where changes are material, we may also notify users through the app or another reasonable method.

15. Contact Us

16. Additional Notice for U.S. / California Residents

Applicable if U.S. or California privacy law applies to the processing of your data.

Depending on applicable law, you may have additional rights, including the right to:

• know what categories of personal information are collected and used;
• request deletion of personal information;
• request correction of inaccurate personal information;
• receive information about categories of sources, purposes of use, and categories of recipients;
• not be discriminated against for exercising applicable rights.

At this time, we do not sell and do not "share" personal information as those terms may be defined under applicable U.S. or California law for cross-context behavioral advertising. This also applies to personal information of minors.