Privacy Policy

Last updated: September 2026

Grifoli (“we”, “us”) is a drawing and skill-training application. This Privacy Policy explains how we collect, use, and protect your information when you use the Grifoli app or website.

1. Information We Collect

1.1 Account Information

Email address and authentication data managed through our identity provider. We do not store passwords directly.

1.2 User Content

Sketches, images, versions, Skill Checks, and related metadata such as size and timestamps.

1.3 Analytics & Diagnostics

The Grifoli app uses PostHog for product analytics and crash diagnostics. Events may include a user ID and, for signed-in users, an email address so activity and diagnostics can be associated with the correct account. The website also uses PostHog to measure explicit landing views and download-link clicks using landing-page context.

1.4 Device Permissions

Access to photos, camera, and network connections.

2. How We Use Information

3. Storage & Retention

Account authentication data is stored securely using our identity provider. User-created content and related metadata are stored securely to provide core app functionality.

You may delete your account at any time from within the App settings. When you delete your account, your authentication data is permanently removed. Any remaining non-identifiable data may be retained temporarily for operational or legal purposes.

4. Third-Party Services

We use Apple APIs and Apple StoreKit to provide core app functionality and process in-app purchases. We use PostHog for the analytics and diagnostics described above.

For AI feedback, Skill Checks, and drawing-guide generation, our backend sends the relevant images and request text to OpenAI for processing. AWS hosts our backend and media storage. When the app registers for remote notifications, we store the device token with your account. Purchase and subscription records include Apple transaction identifiers linked to your account.

5. Children’s Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child has provided personal information through the App, please contact us and we will take appropriate steps to remove such information.

6. Your Rights

You can access and manage your account information directly within the App. You may delete your account at any time from the App settings.

If you have questions about your data or this Privacy Policy, you may contact us at support [at] grifoli [dot] com or use the contact form.

7. Changes

We may update this policy as needed.