Grindly

Privacy Policy

Last updated: 18 May 2026

1. Who we are

Grindly ("we", "us", "our") is a productivity and lifestyle management platform. This policy explains how we collect, use, and protect your personal data when you use our service.

2. Data we collect

  • Account data: email address, username, hashed password, and timezone.
  • Productivity data: habits, habit completions, focus sessions, water logs, mood logs, daily missions, routines, tasks, projects, clients, revenue entries, challenges, achievements, and XP events.
  • Technical data: anonymized page view counts (via Plausible Analytics, which is cookieless and does not track individual users).

3. How we use your data

  • To provide and operate the Grindly service.
  • To calculate gamification metrics (XP, levels, streaks, achievements).
  • To send transactional emails (email verification, password reset).
  • To process payments via Stripe (if you subscribe to a paid plan).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party services

  • Neon (database): stores your account and productivity data. Data is encrypted at rest and in transit.
  • Resend (email): processes transactional emails only.
  • Stripe (payments):processes subscription payments. Stripe's privacy policy applies to payment data.
  • Plausible Analytics: cookieless, EU-hosted analytics. No personal data is collected — only anonymous pageview counts.
  • Vercel (hosting): serves the application.

5. Data retention

Your data is retained for as long as your account exists. When you delete your account, all associated data is permanently and irreversibly removed from our systems.

6. Your rights

Under GDPR and applicable privacy law, you have the right to:

  • Access your data — available via the data export feature in Settings.
  • Export your data — download a machine-readable JSON file of all your data from Settings.
  • Deleteyour account and all data — available in Settings > Danger Zone.
  • Rectify your data — edit your profile information in Settings.

7. Cookies

Grindly uses a single essential cookie for authentication (session token). We do not use tracking cookies, advertising cookies, or third-party cookies. Plausible Analytics is fully cookieless.

8. Security

Passwords are hashed with bcrypt (12 rounds) and never stored in plain text. All data is transmitted over HTTPS. Database connections are encrypted.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notification. The "last updated" date at the top reflects the most recent revision.

10. Contact

For privacy questions or data requests, email us at privacy@grindly.com.