Last updated: 31.08.2026
The short version: we store what the app needs to work — your email, your goals, and your conversations with the assistant. We don't sell your data, we don't show ads, and we don't build advertising profiles. You can delete everything from inside the app, in two taps, and the deletion is real.
The Grindy app service.
Questions about your data: @GRINDY_support on Telegram.
Your account. Email address and password. The password is stored only as a hash (Argon2) — we don't know it and can't recover it. If you turn on two-factor authentication, we store its secret key and your recovery codes.
Why: so you can sign in from your device and not lose your goals when you change phones.
Your goals and plans. How you phrased the goal, your answers to the interview questions when you created it, the roadmap, your daily tasks and which ones you completed.
Why: this is the content of the app. Without it there is nothing to build a plan from.
Daily check-ins. Your ratings of each task and whatever you write in the free-text field — how the day went, what got in the way, what worked.
Why: tomorrow's plan is built around how today actually went. Without your input it would be the same plan for everyone.
Conversations with the assistant. Your messages and the model's replies are saved so the conversation continues the next day instead of starting over.
The questionnaire about you. Your answers about your rhythm, experience and circumstances, if you filled it in. You can retake it at any time — the new answers replace the old ones.
Technical data. Your time zone, so that "today" in the app matches your today rather than the server's. Your IP address and sign-in events, to rate-limit requests and notice password-guessing attempts. A referral tag, if you arrived through an ad link or our Telegram bot.
Telegram. If you came from our bot, we store your Telegram identifier so the bot and your app account are linked.
We do not request or receive: location, contacts, calendar, photos, microphone, camera, the list of apps installed on your device, or your device's advertising identifier. The app contains no advertising trackers and no third-party analytics.
Our language-model provider. To build your plan and answer in chat, we send the wording of your goal, your interview answers, the week's tasks, your daily check-ins and your chat messages. Only the text is sent — not your email, your name, or your account identifiers.
This is the single most important thing to know about the app: your plan is written by a language model, and for it to write that plan, your text has to reach the model. If that isn't acceptable to you, this app isn't for you — without that transfer it doesn't function at all.
Hosting. Servers operated by Hostinger. Your data lives in a database that only the service and we can reach.
Nobody else. We do not sell or pass your data to ad networks, data brokers, or other apps.
For as long as your account exists. We don't delete goals or conversations on a timer: a goal you closed a year ago is your own history, and whether you still want it is your call.
Exceptions: technical sign-in records and rate-limit counters are cleared automatically after a few days, and expired sessions delete themselves.
In the app: Profile → tap your name → Delete account. You'll need your password, plus your two-factor code if you have it enabled. This is not a "disabled" flag: your account, all goals, plans, tasks, daily check-ins, questionnaire answers and your entire conversation history are removed. It cannot be undone and we cannot restore it.
You can delete a single goal without touching the others: Profile → My goals → trash icon.
If you don't have the app to hand, write to us and we'll delete it on request. So that nobody can delete someone else's account, we'll ask you to confirm the email address is yours.
You can ask what data we hold about you, ask us to correct it, request a copy, or demand deletion. You can withdraw your consent to processing — which amounts to deleting your account, because the app cannot work without the data. Write to us and we'll respond within the period the law allows.
Grindy is not intended for children under 13. We do not knowingly collect children's data. If you are a parent and believe your child registered without your consent, write to us and we'll delete the account.
The connection to our server is encrypted (HTTPS). Passwords are stored only as hashes. Database access is restricted, and you can protect your account with two-factor authentication.
Nobody can promise perfect security, and we won't: if a breach affects your data, we will tell you and notify the supervisory authority within the required time.
If this policy changes materially, we'll tell you in the app before the change takes effect. The date of the last update is at the top of this page.