Privacy Policy

1. Introduction

Welcome to GrindProof ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our productivity tracking application.

By using GrindProof, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Profile Information: Optional profile picture and display name
• Task and Goal Data: Tasks, goals, routines, notes, and related productivity data you create
• Communication Data: Information you provide when contacting us for support

2.2 Information Collected Automatically

• Usage Data: Information about how you interact with our service, including features used and actions taken
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, and referring website addresses

2.3 Information from Third-Party Integrations

• GitHub Integration: When you connect your GitHub account, we collect your GitHub username, repository information, commit activity, and pull request data to track your development work
• Google Calendar Integration: When you connect Google Calendar, we access your calendar events, event attendance status, and event details to help track your time and commitments

3. How We Use Your Information

We use the information we collect to:

• • Provide, maintain, and improve our services
• • Create and manage your account
• • Track your productivity metrics and generate insights
• • Integrate with third-party services you authorize (GitHub, Google Calendar)
• • Send you service-related notifications and updates
• • Respond to your comments, questions, and support requests
• • Monitor and analyze usage patterns and trends
• • Detect, prevent, and address technical issues and security threats
• • Comply with legal obligations and enforce our Terms of Use

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• • Encryption of data in transit using SSL/TLS
• • Encryption of sensitive data at rest
• • Regular security assessments and updates
• • Access controls and authentication mechanisms
• • Secure data centers with physical security measures

Your data is stored using Supabase, a secure database platform that complies with industry-standard security practices. We retain your data for as long as your account is active or as needed to provide you services.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Third-Party Services

GrindProof uses the following third-party services to provide and improve our application:

5.1 Supabase

We use Supabase for database hosting, authentication, and data storage. Supabase has its own privacy policy governing the use of your information. Learn more at https://supabase.com/privacy

5.2 GitHub

When you connect your GitHub account, we access your GitHub data through their API. GitHub's privacy policy applies to data collected through their service. Learn more at GitHub Privacy Statement

5.3 Google Calendar

When you connect Google Calendar, we access your calendar data through Google's API. Google's privacy policy applies to data collected through their service. Learn more at Google Privacy Policy

We do not sell, trade, or rent your personal information to third parties. We may share aggregated, anonymized data that does not identify you personally for analytics and service improvement purposes.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications

6.2 GDPR Rights (European Users)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing, restrict processing, and lodge a complaint with a supervisory authority.

6.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, to delete personal information, and to opt-out of the sale of personal information (note: we do not sell your information).

To exercise any of these rights, please contact us at support@grindproof.co. We will respond to your request within 30 days.

7. Cookies and Local Storage

GrindProof uses cookies and browser local storage to enhance your experience:

• Essential Cookies: Required for authentication and security
• Session Storage: Stores your authentication state and preferences
• Local Storage: Caches application data for offline functionality and improved performance
• Service Worker: Enables Progressive Web App (PWA) features including offline access

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies. However, this may prevent you from taking full advantage of our service.

8. Children's Privacy

GrindProof is intended for users who are at least 13 years old. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@grindproof.co.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information from our servers.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• • Posting the new Privacy Policy on this page
• • Updating the "Last Updated" date at the top of this policy
• • Sending you an email notification (for significant changes)

Your continued use of GrindProof after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry as promptly as possible, typically within 48 hours.