Privacy Policy

What We Collect

Grandma collects the information you provide directly: your email address, name, and any health data you choose to log (cycle information, pregnancy details, child growth data, symptoms, notes).

We also collect basic usage data to improve the app experience, including which features you use and how often. We do not track your location or access your contacts.

How We Store Your Data

Your data lives in Supabase, a secure database infrastructure. All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Your authentication credentials are hashed using bcrypt.

We use industry-standard security practices and regularly audit our infrastructure. Data is stored in EU-based servers to comply with GDPR requirements.

AI Processing

Grandma is powered by Claude, Anthropic's AI assistant. When you chat with Guru Grandma, your messages are sent to Anthropic's API for processing. Anthropic does not use your conversations to train their models when accessed via API.

Your health data may be included in chat context to provide personalized responses. You can disable this in Settings.

Payment Processing

Payments are processed through RevenueCat, which handles subscriptions across iOS and Android. We do not store your payment card details — all payment processing is handled by Apple Pay, Google Pay, or RevenueCat's secure payment infrastructure.

Health Data

We take health data seriously. Grandma is designed to be HIPAA-aware and GDPR-compliant:

We never sell your health data.

We never use your health data for advertising.

We never share your health data with third parties without your explicit consent.

Your health data is never used to train AI models.

Children's Data

Grandma helps you track your children's development. We take special care with children's data:

No advertising IDs are associated with child profiles.

No behavioral profiling is performed on children's data.

Child data is only visible to parents and explicitly authorized caregivers.

All child data can be exported or deleted at any time.

Data Export & Deletion

You have full control over your data:

Export all your data at /account/export.

Delete your entire account at /account/delete.

Deletion is permanent and completed within 30 days.

Care Circle Sharing

When you invite caregivers to your care circle, you control exactly what they can see. Permissions are granular — a nanny can log naps without seeing medical records. All sharing is opt-in and can be revoked at any time.

The waitlist

When you join the waitlist we store your email, your name if you give it, the chapter you chose, your country, the site language, whether you want the launch notice, where you came from (campaign tags and referring site) and a one-way hash of your IP address used only to prevent abuse.

We use this only to send your invite and, if you asked, one launch notice. We never sell it or share it for marketing.

To be removed, email support@grandma.app and we'll delete your entry.

Contact

For privacy questions or data requests, contact us at privacy@grandma.app