Grit is a self-discipline tracker for iPhone, made by devmobileuae (“we”, “us”). This policy explains what data the Grit app and this website handle, and why. The short version: Grit works without an account, your day-to-day data lives on your device, and the little that does leave it is anonymous or pseudonymous.
Summary
- No account, no sign-up, no profile.
- Your tasks, score history, journal, and settings are stored on your device. We cannot read them.
- Step counts are read from Apple Health only to verify step challenges, and raw step data never leaves your device.
- Challenge participation is shared as anonymous events so cohort counts work. Nothing in them identifies you.
- We use analytics (PostHog) to understand how the app and this website are used. We do not sell personal data and we do not show ads.
Data in the app
Stored on your device
Your onboarding answers, daily protocol and task completions, score history, challenge progress, journal entries, and settings are stored locally on your iPhone. They are included in your device backups if you have iCloud Backup or local backups enabled (those backups are governed by Apple’s terms, not ours). We run no account system and have no way to access this data.
If you lock the journal with Face ID, authentication is performed entirely by iOS. We never receive biometric data.
Apple Health (steps)
With your permission, Grit reads your step count from Apple Health. It is read-only, limited to steps, and used for one purpose: showing progress and verifying step-based challenges. Raw step data never leaves your device. We do not write to Apple Health, and we never use health data for advertising or share it with third parties. You can revoke access at any time in the Health app.
Challenge cohorts
Challenges show anonymous cohort counts: how many people are in a challenge and how many finished. To make that work, joining or completing a challenge sends a minimal event to our database (hosted on Supabase): the challenge identifier, a random install identifier, and a timestamp. The install identifier is generated on your device and is not linked to your name, email, phone number, or Apple ID. For step challenges, the event discloses only the fact that the day’s threshold was met, never your step count.
Purchases
Payments are processed by Apple through your Apple ID. We never see your card details. To validate subscriptions and unlock Premium, the app uses RevenueCat, which receives a pseudonymous app user identifier, purchase receipt data, and product information.
Analytics
The app uses PostHog to collect usage analytics: feature usage events, screens viewed, diagnostic events such as errors, device model, OS version, app version, approximate region derived from IP address, and a random identifier. This tells us what is used and what is broken. Analytics events are tied to that random identifier, not to your name or Apple ID, are not used for third-party advertising, and never include journal text or health data.
Notifications
Reminders are local notifications scheduled on your device, and only if you grant permission. You can turn them off in Settings at any time.
Data on this website
This site is hosted on Vercel, which keeps standard server logs (IP address, user agent) for operating and securing the service. We use PostHog on the site to measure page views, referrers, and basic device and browser information.
Cookies
The site sets no advertising cookies. PostHog may use first-party cookies or local storage to keep analytics consistent between visits. You can block or clear these in your browser settings; the site works fine without them.
What we do not do
- We do not sell or rent personal data.
- We do not show third-party ads or use ad networks.
- We do not collect your contacts, photos, or precise location.
- We do not read your journal. It stays on your phone.
Sharing
We share data only with the service providers named above (Apple, RevenueCat, PostHog, Supabase, Vercel), each processing it to provide their service to us. We may also disclose information if required by law, or as part of a merger or acquisition, in which case this policy would continue to apply to it.
Retention
On-device data stays until you delete it: use “Reset my journey” in the app’s settings or uninstall the app. Anonymous cohort events are kept to compute long-running challenge statistics. Analytics data is retained under PostHog’s standard retention settings, and server logs are short-lived.
Your rights
Depending on where you live (for example under GDPR or CCPA), you may have rights to access, correct, delete, or object to the processing of your personal data, and to complain to a supervisory authority. Most of Grit’s data is on your device and already under your direct control. Cohort and analytics events are designed not to identify you, which means we may be unable to locate records tied to you specifically; where we can, we will honor your request. Write to us at borodin32@gmail.com.
Children
Grit is rated 12+ and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.
International transfers
Our service providers process data in the United States and the European Union under their own compliance frameworks and data processing agreements.
Changes
We will post any changes to this policy on this page and update the date above. Material changes will be flagged in the app or on this site.
Contact
Questions about privacy: borodin32@gmail.com.