Updated on December 29, 2025

Updated on December 29, 2025

Privacy policy

Grano Inc. ("we," "us," or "our") operates the Gratty mobile application (the "Service"). We are committed to protecting your privacy and ensuring you understand how we handle your data. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable laws, including the GDPR (EU) and US State Laws (Delaware, California).

Grano Inc. ("we," "us," or "our") operates the Gratty mobile application (the "Service"). We are committed to protecting your privacy and ensuring you understand how we handle your data. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable laws, including the GDPR (EU) and US State Laws (Delaware, California).

Information we collect

A. Information You Provide to Us

  • Account Information: When you sign up, we may collect your name, email address, and region.

  • User Content: This includes your daily gratitude journal entries, notes, and streak data. We treat this as sensitive personal data.

  • Support Data: If you contact us for support, we collect the details you provide to resolve your issue.

B. Information Collected Automatically

  • Usage Data: We collect anonymous data about how you use the app (e.g., buttons tapped, screens viewed, session length) to improve the user experience.

  • Device Information: We collect device type, operating system version (iOS), and general location (based on IP address/region) to ensure app compatibility.

A. Information You Provide to Us

  • Account Information: When you sign up, we may collect your name, email address, and region.

  • User Content: This includes your daily gratitude journal entries, notes, and streak data. We treat this as sensitive personal data.

  • Support Data: If you contact us for support, we collect the details you provide to resolve your issue.

B. Information Collected Automatically

  • Usage Data: We collect anonymous data about how you use the app (e.g., buttons tapped, screens viewed, session length) to improve the user experience.

  • Device Information: We collect device type, operating system version (iOS), and general location (based on IP address/region) to ensure app compatibility.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data is:

  • Contractual Necessity: To provide the Service to you (e.g., syncing your journal entries).

  • Legitimate Interests: To improve our Service and ensure its security.

  • Consent: For specific actions (like sending optional marketing emails), which you can withdraw at any time.

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data is:

  • Contractual Necessity: To provide the Service to you (e.g., syncing your journal entries).

  • Legitimate Interests: To improve our Service and ensure its security.

  • Consent: For specific actions (like sending optional marketing emails), which you can withdraw at any time.

How We Use Your Information

We use your data solely to:

  • Provide and maintain the Service.

  • Personalize your experience (e.g., "Good morning, [Name]").

  • Send you service-related notifications (e.g., reminders to log gratitude).

  • Analyze aggregate usage trends to improve the app.

  • We do NOT sell your data. We do not sell your personal information or private journal entries to third parties, advertisers, or data brokers.

We use your data solely to:

  • Provide and maintain the Service.

  • Personalize your experience (e.g., "Good morning, [Name]").

  • Send you service-related notifications (e.g., reminders to log gratitude).

  • Analyze aggregate usage trends to improve the app.

  • We do NOT sell your data. We do not sell your personal information or private journal entries to third parties, advertisers, or data brokers.

Data Storage, Security & Retention

  • Hosting: Your data is securely stored using industry-standard cloud infrastructure (e.g., Firebase/Google Cloud, iCloud) located in the United States.

  • Security: We implement commercially reasonable security measures (encryption in transit and at rest) to protect your data.

  • Retention: We retain your personal data only for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete your personal data within 30 days, unless legally required to retain it.

  • Hosting: Your data is securely stored using industry-standard cloud infrastructure (e.g., Firebase/Google Cloud, iCloud) located in the United States.

  • Security: We implement commercially reasonable security measures (encryption in transit and at rest) to protect your data.

  • Retention: We retain your personal data only for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete your personal data within 30 days, unless legally required to retain it.

Data Sharing and Disclosure

We may share your information only in the following limited circumstances:

  • Service Providers: With trusted third-party vendors who help us operate the Service (e.g., cloud hosting, analytics providers), subject to strict data processing agreements.

  • Legal Compliance: If required by law, subpoena, or legal process.

  • Business Transfers: If Grano Inc. is involved in a merger or acquisition, your data may be transferred as part of that transaction.

We may share your information only in the following limited circumstances:

  • Service Providers: With trusted third-party vendors who help us operate the Service (e.g., cloud hosting, analytics providers), subject to strict data processing agreements.

  • Legal Compliance: If required by law, subpoena, or legal process.

  • Business Transfers: If Grano Inc. is involved in a merger or acquisition, your data may be transferred as part of that transaction.

Your Rights (Global)

Regardless of where you live, we grant you the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Correct inaccurate or incomplete data.

  • Right to Deletion ("Right to be Forgotten"): Request that we permanently delete your account and all associated data.

  • Right to Portability: Request your data in a structured, machine-readable format.

  • Right to Object/Restrict: Object to our processing of your data.

To exercise these rights, please contact us at admin@granoapp.io. We will respond to your request within 30 days.

Regardless of where you live, we grant you the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Correct inaccurate or incomplete data.

  • Right to Deletion ("Right to be Forgotten"): Request that we permanently delete your account and all associated data.

  • Right to Portability: Request your data in a structured, machine-readable format.

  • Right to Object/Restrict: Object to our processing of your data.

To exercise these rights, please contact us at admin@granoapp.io. We will respond to your request within 30 days.

International Data Transfers

Our servers are located in the United States. If you access the Service from the EU/EEA or other regions, please note that your data will be transferred to and processed in the USA. By using the Service, you consent to this transfer. We rely on standard contractual clauses or adequacy decisions where applicable to safeguard these transfers.

Our servers are located in the United States. If you access the Service from the EU/EEA or other regions, please note that your data will be transferred to and processed in the USA. By using the Service, you consent to this transfer. We rely on standard contractual clauses or adequacy decisions where applicable to safeguard these transfers.

Children's Privacy

Gratty is not intended for children under the age of 13 (or 16 in certain EU jurisdictions). We do not knowingly collect personal information from children. If we discover we have, we will delete it immediately.

Gratty is not intended for children under the age of 13 (or 16 in certain EU jurisdictions). We do not knowingly collect personal information from children. If we discover we have, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date.

Contact us

Data Controller: Grano Inc.

Address:

1111B S Governors Ave STE 26095

Dover, DE 19904

United States

Email:

admin@granoapp.io

Data Controller: Grano Inc.

Address:

1111B S Governors Ave STE 26095

Dover, DE 19904

United States

Email:

admin@granoapp.io

Use Gratty to notice more, stress less, and find the good in every day

Use Gratty to notice more, stress less, and find the good in every day

Use Gratty to notice more, stress less, and find the good in every day

Create a free website with Framer, the website builder loved by startups, designers and agencies.