Privacy Policy

Effective date: September 30, 2026
Last updated: September 30, 2026

This policy explains what personal data Gramatik (the iOS and Android app that corrects grammar, spelling and style, formerly called Poodle) and its website gramatik.app process, why, for how long, who helps us do it and what rights you have. We have tried to keep it short and plain.

1. Who is responsible

The data controller is Roberto Díaz Badra – Disruptive Normality, a self-employed developer based in Spain.

Contact for anything related to privacy: disruptivenormality@gmail.com

2. The short version

• Gramatik does not ask for your name or email to work. It uses an anonymous app ID.
• The text you ask us to correct, paraphrase or change is sent to our server and to our AI provider (OpenAI) only to return the result to you. We do not store that text on our servers.
• Your correction history is stored only on your device, and you can clear it in the app at any time.
• If you correct text from a photo, the image is read with Google Cloud Vision and is not stored on our servers either.
• We do not use your texts to train AI models, and we do not sell your data or show you ads.
• Payments are handled by Apple or Google. We never see your card details.

3. What data we process

Content you submit

• The text you write, paste or share with Gramatik (including text you select in other apps and send to Gramatik, or share through the share menu), and the instructions you choose (for example, correct, paraphrase, simplify, change the tone or translate).
• Photos of text you take with the camera or pick from your gallery (only after you allow access), so we can extract and correct their text.
• The results we create for you: the corrected, rewritten or translated text.

This content may contain personal data about you or other people. You decide what you submit.

App and device data

• An anonymous user ID created by the app (Firebase Authentication). It is not linked to your name or email.
• Device and app information: device model, operating system, app version, language, country or region, currency and time zone.
• Usage events: for example, when you open the app, run a correction, view a subscription screen or use a feature, and the answers you give in the welcome questions (such as how you found the app or what you mainly use it for).
• Crash reports and diagnostic logs.
• A push notification token, if you allow notifications. Reminders you set up in the app are scheduled on your device.

Purchases

• Your subscription status, product, trial and renewal dates, and an anonymous purchase identifier. Apple or Google processes the payment; we do not receive or store your payment card details.

Feedback you send us

• Error reports, answers to in-app surveys, feature votes, promo codes you redeem, comments and emails you send us.

4. Why we use it and on what legal basis

• To provide Gramatik (correct, rewrite and translate your text, read text from photos, keep your subscription in sync and send the reminders you ask for): performance of our contract with you (Article 6(1)(b) GDPR).
• To send push notifications: your consent, given through the permission of your device. You can turn them off at any time in your device settings.
• To keep the app working and secure (crash reports, diagnostics, preventing abuse): our legitimate interest in offering a reliable and safe service (Article 6(1)(f) GDPR).
• To understand how the app is used and improve it (product analytics, subscription screen tests, your feedback): our legitimate interest in improving Gramatik. We use pseudonymous IDs, not your name or email. You can object at any time by writing to us.
• Website analytics on gramatik.app: your consent (see section 10).
• To comply with legal obligations (for example, tax and accounting rules, or answering requests from authorities): legal obligation (Article 6(1)(c) GDPR).

We do not use your data for advertising, we do not sell it, and we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

5. Who helps us (service providers)

We share data only with the providers we need to run Gramatik. They process the data on our behalf and may only use it to provide their service to us.

• Google Firebase and Google Cloud (Google): anonymous sign-in, database, server functions that process your text, push notifications, remote configuration, Firebase Analytics and Crashlytics. Servers mainly in the United States.
• Google Cloud Vision (Google): reads the text in the photos you submit. United States.
• OpenAI: corrects, rewrites and translates your text. United States.
• RevenueCat: manages subscription status. United States.
• Superwall: shows subscription screens and measures how they perform. United States.
• Amplitude: product analytics and feature tests. United States.
• Apple and Google: App Store and Google Play distribution and payments. They act as independent controllers for your purchases; see their privacy policies.
• Google Analytics (gramatik.app website only, with your consent).

We may also disclose data when the law requires it, or to protect our rights or the safety of users.

6. AI processing

To correct, rewrite or translate your text we send it from our server to OpenAI, which returns the result to us. Our servers do not keep a copy of your text: our technical logs only record its length and an irreversible fingerprint. OpenAI processes the content to return the result and may keep it for a short period under its own policies (for example, to prevent abuse). We do not use your texts to train AI models.

AI corrections and rewrites can contain mistakes. Please check important texts before relying on them.

7. How long we keep data

• Text and photos you submit: processed to return the result and not stored on our servers.
• Correction history: stored only on your device until you clear it in the app («Clear history») or delete the app.
• Anonymous ID and basic app data (creation and last session dates, platform, language, country, subscription flag): kept while you use Gramatik. You can ask us by email to delete them at any time (see section 9).
• Subscription data: while your subscription is active and afterwards for as long as needed for accounting, tax and legal claims (generally up to 6 years under Spanish law).
• Analytics and crash data: for the retention period set in each tool, after which it is deleted or anonymized.
• Feedback, error reports and emails: for as long as needed to answer you and improve the app.

Our providers may keep data for short periods under their own policies, after which they delete it.

8. International transfers

Several providers are based in the United States, so your data may be transferred outside the European Economic Area. When this happens, transfers are made with appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework. You can ask us for more information about these safeguards.

9. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time without affecting earlier processing.

To exercise your rights, email disruptivenormality@gmail.com. Because Gramatik does not use names or emails, we may ask for details that help us find your data (for example, your App Store or Google Play purchase receipt). We will reply within one month.

If you are not satisfied with our answer, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the data protection authority of your country.

10. The gramatik.app website and cookies

The website does not require any personal data from you. We use:

• Google Analytics 4, only if you accept analytics cookies in the banner (in the European Economic Area, the United Kingdom and Switzerland it stays off until you accept). It tells us how many people visit and which pages they view. Google Analytics cookies (such as _ga) last up to 2 years.
• dl_attr: our own first-party cookie that remembers how you arrived at the site (for example, the campaign or referring website). It is set only if you accept analytics cookies and lasts 90 days.
• Local storage in your browser to remember your cookie choice and your preferred language. This is strictly necessary and does not track you.

You can change your choice at any time with the «Cookie settings» button at the bottom of every page, or by deleting cookies in your browser.

11. Children

Gramatik is not intended for users under the age of 18. We do not knowingly collect personal data from people under 18. If you believe a minor has used Gramatik and shared personal data with us, contact us and we will delete it.

12. Security

We use encrypted connections, access controls and signed requests between the app and our servers, and we avoid storing the texts you submit. No system is completely secure, but we work to protect your data and will notify you and the authorities of a breach when the law requires it.

13. Changes to this policy

We may update this policy when Gramatik or the law changes. We will publish the new version here with its date and, if the changes are significant, we will also let you know in the app or on the website.

14. Contact

Roberto Díaz Badra – Disruptive Normality
Email: disruptivenormality@gmail.com