Grimoire

Privacy Policy

Effective date: 15 July 2026

This Privacy Policy explains how ALNA IT s. r. o. (“we”, “us”, the “data controller”) handles personal data in the Grimoire mobile application. We are based in the European Union and comply with the General Data Protection Regulation (GDPR).

Privacy by default

Grimoire works fully offline and anonymously by default. Until you choose to sign in, everything you enter stays in a local database on your device only and never leaves it. We do not receive it, and no account is required to use the app.

What data we collect

• Account email: only if you choose to sign in (via email or Google Sign-In), so we can sync and restore your collection.
• Content you create: deck titles, cover photos, notes, location, prices, wishlist entries, and similar details you add about your collection.

We do not collect data for advertising, and we do not sell personal data.

How your data is stored

• Locally (default): your collection is stored in an on-device SQLite database.
• In the cloud (only if you sign in): your data is synced to Supabase (Postgres for records and Supabase Storage for cover photos), so it is backed up and available across your devices.

Third-party services

When you enable the relevant features, we rely on these processors:

• Supabase: cloud storage, database, and authentication (used only when you sign in).
• Google: Google Sign-In (used only if you sign in with Google).
• RevenueCat: processing of in-app purchases and subscriptions (used only if you make a purchase).

Each provider processes data under its own privacy terms and appropriate safeguards.

Legal basis

We process your data to perform the service you request (sync, backup, purchases) and, where applicable, on the basis of your consent. You may withdraw consent at any time by signing out or deleting your account.

Your GDPR rights

As a user in the EU, you have the right to:

• Access the personal data we hold about you;
• Export your collection (available as JSON or PDF from within the app);
• Delete your account and all associated cloud data, permanently;
• Rectify inaccurate data, and to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at the address below.

Deleting your account and data

You can permanently delete your Grimoire account (provided by ALNA IT s. r. o.) and all associated data at any time:

1. Open Grimoire and go to Settings → Account.
2. Tap Delete account and confirm.

Alternatively, email us at grimoire476@gmail.com from your account address and we will delete your account on your behalf.

What is deleted: your account email, and all synced collection data — deck titles, cover photos, notes, locations, prices, wishlist entries — are permanently removed from our cloud database and storage (Supabase). Any data kept only on your device is also removed when you delete the app or clear its data.

Retention: deletion is immediate. Residual copies in encrypted cloud backups are purged within 30 days. We do not retain your personal data after deletion, except where required by law.

Children

Grimoire is not directed at children under 13, and we do not knowingly collect their personal data.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected here with an updated effective date.

Contact

For any privacy question or request:
grimoire476@gmail.com

Data controller: ALNA IT s. r. o.
Represented by Aleksandr Lukichev
Karpatské námestie 7770/10A, 831 06 Bratislava, Slovakia
IČO: 57368414 · DIČ: 2122686390