Privacy policy
Last updated:
This policy explains how the Grappler Guide iPhone app and this website process data. It describes the app’s actual data flow: no account, no ads, no analytics and no tracking.
Who is responsible
The data controller is the app’s developer, i2p30m. Contact for anything about privacy: i2p30m@gmail.com.
In short
- You do not create an account or give a name or email address.
- The voice recording never leaves your phone: speech becomes text on the device.
- Only the text of your post-class note and a list of technique names are sent for AI processing.
- Your sessions, mosaic, game plan and blocks are stored only on your phone.
- We use no ads, no analytics, no crash-reporting tools and no advertising identifier (IDFA).
What data goes where
| Data | Where it goes | How long |
|---|---|---|
| Voice recording | Nowhere. Transcription happens on the phone (Apple on-device speech recognition). | The recording is not stored. |
| Text of the post-class note and a list of technique names | Over an encrypted connection (HTTPS) to our server on Cloudflare, and from there to Anthropic’s Claude model, which extracts techniques and suggests a focus. | Our server does not store note content or AI replies. Anthropic may keep API request data for up to 30 days and does not use it to train models. |
| Anonymous device identifier (from Apple App Attest) | Our server, for the daily AI limit, abuse protection and access codes. | Daily counters expire after 3 days, access-code counters after 31 days. The device key stays while you use the app. |
| IP address | Our server, only to count access-code attempts. | Up to 2 hours. |
| Profile, sessions, mosaic, game plan, blocks | Only your phone. | Until you delete them. Export and delete-all are in the app’s Settings. |
The device identifier and IP address are not linked to your identity: we do not know your name, email or Apple account. The server logs only counters, timings and error codes, never note content.
Purpose and legal basis
We process the note’s text because you ask for it when you save a session: performance of the service (GDPR Art. 6(1)(b)). We process the device identifier and IP address in our legitimate interest in protecting the service from abuse and keeping AI costs under control (Art. 6(1)(f)).
Who receives data
- Cloudflare, Inc.: hosting for our server and this website (Cloudflare privacy policy).
- Anthropic, PBC: the Claude model that processes the note’s text (Anthropic privacy policy).
These providers may process data outside the European Economic Area, including in the US. Transfers rely on the GDPR mechanisms they offer in their terms (such as standard contractual clauses). We do not sell data or share it with advertisers.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. Data on your phone you export and delete yourself in the app’s Settings. Because the server does not know who you are, write to i2p30m@gmail.com about server-side data and we will help as far as the anonymous identifier allows. You can also complain to a data protection authority; in Poland, the President of the Personal Data Protection Office (uodo.gov.pl).
Children
The app asks for no identifying information and we do not knowingly collect personal data from children.
This website
This website uses no cookies, no analytics and no third-party tracking scripts. Cloudflare, as the host, may process technical connection data (such as IP address) to deliver the site and protect it from attacks.
Changes
If the way we process data changes (for example a new service is added), we will update this page and the date at the top. Questions: i2p30m@gmail.com. See also the terms.