Privacy Policy — Grailr

1. Introduction

Grailr ("we", "our", or "us") operates the Grailr mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and display name. Authentication is handled by Supabase, a third-party authentication provider.

Watch Images

When you use the scan feature, photos of watches are sent to our servers for analysis. Images are processed for identification purposes only and are not used for model training.

Uploaded photos are stored with your scan history. Grailr issues short-lived viewing links after checking account ownership. Anyone you share a viewing link with can use it until it expires. Avoid including faces, documents or other sensitive information in watch photos.

Usage Data

We collect information about how you interact with the Service, including scan history, search queries, and feature usage patterns. To limit abuse, we also temporarily store a keyed hash of your network address rather than the raw address in our application rate limiter.

Purchase Information

Subscription purchases are processed through Apple's App Store or Google Play. We do not collect or store payment card details. RevenueCat manages subscription state on our behalf.

Result Reports

If you report a scan result, we store your selected reason and optional note with your account and scan identifiers so our team can review it. Reports are kept in private storage and removed when you delete your account. Please avoid including sensitive personal information in a report.

Email Preferences

Optional watch-check tips and product updates are sent only when you choose to receive them. We store your preference, consent time and delivery status. You can unsubscribe at any time using the email link or the website email preferences page. Essential account messages are separate.

Notifications

If you enable push notifications, a device notification token is used to deliver alerts and is stored with your account. Delivery uses Expo and the platform delivery service: Google Firebase Cloud Messaging on Android or Apple Push Notification service on iOS. You can turn notifications off in your device settings.

3. How We Use Your Information

To provide watch identification and market pricing services
To maintain your scan history and account preferences
To manage subscriptions and entitlements
To improve the accuracy and quality of our Service
To communicate important updates about your account

4. Third-Party Services

We share data with the following services to operate Grailr:

Supabase — Authentication and database
Resend — Email delivery, unsubscribe and delivery-failure handling
Anthropic — Watch image analysis and identification
RevenueCat — Subscription and in-app purchase management
Expo, Google and Apple — Push notification delivery when enabled
Affiliate Partners — When you click marketplace links (Chrono24, eBay, Amazon, Jomashop), we may record the click for affiliate tracking. The retailer receives your request and ordinary connection and browser information under its own privacy policy.

5. Data Retention

We retain your account data and scan history for as long as your account is active. Account deletion removes your sign-in, profile, saved scans, uploaded watch photos, result reports and affiliate-click records linked to your user account from our active systems. Payment providers may retain transaction records under their own retention policies. Deletion does not cancel an active subscription; cancel it with your payment provider to prevent further charges.

Use the public account deletion page without installing the app, or select Profile → Delete Account in the app.

6. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Delete your account and all associated data
Export your scan history
Opt out of non-essential communications

To exercise any of these rights, contact us at support@grailr.watch.

7. Data Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission over the Internet is 100% secure.

8. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at support@grailr.watch.