Privacy Policy

Effective Date: February 25, 2026

1. Information We Collect

Personal Information

When you create an account with Grind or Pay, we collect:

• Email address
• Name (if provided)
• Profile information you choose to share
• Currency preference

Financial Information

Routine Proof Data

When you submit proof of completing a routine (photos or text), this data may be:

• Temporarily transmitted to OpenAI for automated validation
• Stored on our servers for record-keeping purposes
• Used to verify compliance with your commitment

Usage Data

We automatically collect information about how you interact with the App, including:

• Device information (model, operating system version)
• App usage patterns and features accessed
• Log data and error reports
• Performance metrics

2. AI Proof Validation

The App uses OpenAI's API to automatically validate your routine proofs. When you submit a proof for AI validation:

• What is sent: Your proof content (photo or text) and the routine name/description
• Purpose: To determine whether your proof meets the criteria for your routine
• Data retention: OpenAI does not store this data beyond the validation request
• AI training: Your data is not used to train AI models
• Third-party sharing: Data is not shared with any other parties

For more information about OpenAI's privacy practices, visit openai.com/privacy.

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Create and manage your account, process commitments, validate proofs, and enforce penalties
• Process Payments: Manage subscription billing and payment collection through our third-party processors
• Communicate with You: Send account notifications, routine reminders, and service updates
• Improve the App: Analyze usage patterns, monitor performance, and develop new features
• Ensure Security: Prevent fraud, abuse, and unauthorized access
• Comply with Legal Obligations: Respond to legal requests and protect our rights

4. Sharing Your Information

We share your information only in the following circumstances:

Third-Party Service Providers

We work with trusted service providers who help us operate the App:

• OpenAI: AI-powered proof validation
• RevenueCat: Subscription management for mobile purchases
• Stripe: Payment processing for web purchases
• Apple & Google: In-app purchase processing
• Hosting Providers: Data storage and server infrastructure

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

Legal Requirements

We may disclose your information if required by law or if we believe such action is necessary to:

• Comply with legal obligations or respond to legal requests
• Protect our rights, property, or safety
• Investigate potential violations of our Terms of Service
• Prevent fraud or illegal activity

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and monitoring
• Limited employee access to personal data

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and personal data
• Withdrawal of Consent: Withdraw consent for AI proof validation at any time
• Data Portability: Request a copy of your data in a structured format

Deleting Your Account

You can delete your account at any time through the App's settings or by contacting us at contact@grindorpay.app. Upon deletion:

• Your personal information will be removed from our active databases
• Some data may be retained for legal compliance, fraud prevention, or backup purposes
• Deletion is permanent and cannot be undone

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your data, except where we are required to retain it for legal obligations.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data in compliance with applicable privacy laws.

9. Children's Privacy

The App is not intended for users under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Do-Not-Track Signals

Some browsers include a Do-Not-Track ("DNT") feature. We do not currently respond to DNT signals, as there is no industry standard for how to handle them. We will update this policy if we adopt DNT practices in the future.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Notify you through the App or by email
• Provide a summary of key changes

Your continued use of the App after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: