Privacy Policy

Last updated: July 17, 2026 · Version 1.3 · App: Gramly (com.gramly.app)

1. Who We Are

Gramly is an AI-powered nutrition tracking mobile application developed and operated by Krew Designs ("Developer"), based in the Republic of Argentina.

This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and what rights you have. By using Gramly, you agree to this policy.

2. Data We Collect

2.1 Data You Provide

• Full name
• Date of birth
• Biological sex
• Height and weight (initial and ongoing)
• Country of residence
• Nutritional goal (lose weight, maintain, or gain muscle)
• Food photographs (taken with camera or selected from gallery)
• Food descriptions entered as text or voice dictation
• Daily water intake logs
• Messages sent to the AI nutrition assistant (chat)
• Gramly Real Plan personal notes (preferences, restrictions, comments about your progress)

Voice dictation is converted to text on your own device using the operating system's speech recognition; the audio file is not sent to or stored on Gramly's servers.

2.2 Data from Google Sign-In

When you sign in with Google, we receive from Google:

• Full name
• Email address
• Profile photo (URL)

We do not request or access any other Google account data (contacts, calendar, Drive, etc.).

2.3 Automatically Generated Data

• Unique user identifier (generated by Supabase Auth — not your Google ID)
• Language and appearance preferences
• Selected background theme index
• App usage events (analytics: which features you use and when — e.g. photo analyzed, chat message sent), linked to your user account
• Your premium subscription status and receipt, if you subscribe (see Section 5)

3. How Your Data is Stored

3.1 Local Storage (Your Device)

Your meal history, macronutrients, calories, weight logs, water logs, favorites and profile settings all reside in the app's internal SQLite database and are what you use day to day. A copy of your account data is also backed up to the cloud (see 3.3).

3.2 Food Photographs

Photos are saved in your device's internal storage (Documents/meals/), not on any Gramly server. History photos are automatically deleted after 365 days. Photos saved as favorite meals are kept indefinitely until you manually remove them. History photos are not uploaded to the cloud.

3.3 Cloud Sync (Account Backup)

When you sign in with your account, Gramly keeps a copy of your account data in our cloud database (Supabase, USA), linked to your user identifier. This lets you restore your information on a new device or after reinstalling the app. The following is synced:

• Profile (name, date of birth, sex, height, weight, goal, daily target, country, language, plan notes) and profile photo
• Meal history (nutritional data, without the photos)
• Favorite meals, including their photo
• Weight and water logs
• Streak and unlocked achievements

Your meal history photos and AI chat history are not uploaded to the cloud: those stay only on your device. Access to your cloud copy is protected by row-level security (RLS): only your authenticated account can read or modify it. When you delete your data (see Section 8), this cloud copy is deleted as well.

4. AI Processing

When you use the photo analysis, text/dictation analysis, or nutrition chat features, data flows as follows:

1. Your device sends the photo, text, or message to Supabase Edge Functions (our secure proxy server), authenticated with a JWT session token.
2. The Edge Function forwards the request to the Claude API (Anthropic) for analysis.
3. The response is returned to your device and stored locally.

Anthropic processes data according to their own privacy policy at anthropic.com/privacy. By using Gramly, you also agree to Anthropic's usage policies.

If you activated the Gramly Real Plan, the personal notes you wrote (preferences, restrictions, comments about your progress) are also sent as additional context to the chat assistant, to personalize its responses.

5. Third-Party Services

Gramly uses the following third-party services. Each has its own privacy policy and acts as a data processor under our instructions.

We do not sell, rent, or share your personal data with third parties for advertising or commercial purposes.

6. Purpose of Processing

We use your data to:

• Provide personalized AI nutritional analysis
• Calculate your daily calorie goal and macronutrients (Mifflin-St Jeor formula)
• Display your meal history, weight progress, and hydration habits
• Manage your session and security (JWT authentication)
• Send local nutritional reminders (only if you enable them)
• Improve your AI nutrition assistant chat experience
• Manage your premium subscription if you choose to subscribe
• Back up and sync your account data so you can restore it on another device
• Record aggregated usage events (analytics) to understand how the app is used and improve it

7. Data Retention

8. Your Rights

8.1 General Rights

As a Gramly user, you have the right to:

• Access: all your data is visible directly within the app.
• Correction: you can edit your profile (name, weight, height, goal, etc.) at any time from the Profile screen.
• Deletion: you can delete all your data directly from the app, via Profile → Delete all my data (requires typing a confirmation word for safety). This removes both your local data and the cloud copy associated with your account (profile, history, favorites, weight, water and their cloud photos). You can also clear the local data via Device Settings → Apps → Gramly → Clear Data, or automatically when you sign in with a different account. If you prefer, email us at krewdesigns.app@gmail.com and we'll do it for you (including usage events).
• Portability: data resides on your device; you have full control over it.
• Objection: you can stop using the app and delete all data at any time.

9. International Data Transfers

When using AI features and cloud sync, your data is transferred to and/or stored on servers located in the United States (Supabase, Anthropic, Google). For AI, this is the analysis photos, text and messages; for sync, it is the copy of your account data described in Section 3.3. These transfers are necessary to provide the service.

Supabase and Anthropic implement appropriate safeguards for international data transfers. For European users, processing is carried out under the guarantees provided by the EU Standard Contractual Clauses (SCCs).

10. Children's Privacy

Gramly is not intended for children under 13 years of age. We do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child under 13 has used Gramly and provided personal information, please contact us at krewdesigns.app@gmail.com so we can delete that data immediately.

For EU residents between 13 and 16 years old, parental or guardian consent may be required under GDPR.

11. Security

We implement the following technical security measures:

• The Anthropic API Key is never stored on the client; all AI calls go through our secure proxy (Supabase Edge Function) with mandatory JWT authentication.
• Communications between the app and Supabase use HTTPS with TLS.
• Session tokens are stored securely on the device.
• Gramly does not store passwords; authentication is delegated to Google OAuth.

However, no security system is infallible. We recommend keeping your device updated and using a strong password on your Google account.

12. Push Notifications

Gramly may send you local nutritional reminders (e.g., to log meals or drink water). These notifications are generated and processed entirely on your device, without involving external servers. You can disable them at any time from the Profile screen or your device's notification settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated date. For significant changes that affect your rights, we will notify you within the app at least 15 days in advance. Continued use of Gramly after an update constitutes acceptance of the revised policy.

14. Contact