Privacy Policy

1. Introduction

Grand Log ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, the legal basis for that processing, and your rights regarding that data when you use the Grand Log application and website (collectively, the "Service").

2. Information We Collect

We collect information you provide directly to us and information generated through your use of the Service:

• Account information: Name, email address, and password when you create an account.
• Usage data: Episodes logged, series tracked, watching progress, streaks, and statistics you generate within the app.
• Social data: Friend connections, activity shared with friends, and interactions within the platform.
• Device information: Device type, operating system, and app version for diagnostic and analytics purposes.
• Log data: IP address, browser type, pages visited, and timestamps when you access the Service.
• Third-party library data: If you connect a third-party tracker (e.g. Trakt), we import your watch history with your permission.
• Marketing preference: Whether you have opted in to receive marketing and product update emails.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Personalise your experience and deliver your stats, streaks, and recommendations.
• Enable social features such as friend activity and leaderboards.
• Send transactional emails (e.g. password reset, streak reminders you opt into).
• Send marketing and product update emails where you have given consent.
• Monitor usage and detect fraudulent or abusive behaviour.
• Comply with legal obligations.

4. Legal Basis for Processing (GDPR)

Where the GDPR or similar legislation applies, we process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b)): Account creation, delivering the tracking and social features you signed up for.
• Legitimate interests (Art. 6(1)(f)): Operational and product analytics (app-open events, screen views, feature usage) necessary to understand how the Service is used and to improve it. These analytics do not profile you across third-party services. You may opt out of analytics tracking in the app's Settings → Privacy.
• Consent (Art. 6(1)(a)): Marketing emails and product updates. You may withdraw this consent at any time by updating your preferences in Settings or emailing privacy@grandlog.app.
• Legal obligation (Art. 6(1)(c)): Fraud prevention, responding to lawful requests.

5. Third-Party Processors

We do not sell your personal information. We share data only with the following sub-processors, each bound by contractual obligations to process data only as instructed:

For transfers of personal data outside the EEA, we rely on the Standard Contractual Clauses (SCCs) adopted by the European Commission, or equivalent safeguards offered by each processor.

We may also disclose information where required by law or to protect the safety and rights of our users.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your personal data from our database and request deletion from third-party processors (RevenueCat, OneSignal) within a reasonable timeframe. Some anonymised or aggregated data may be retained for analytics. Certain records may be retained for legal or fraud-prevention purposes as required by applicable law.

7. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

9. Your Rights

Depending on your location, you may have rights under applicable privacy law, including the right to:

• Access a copy of the personal information we hold about you.
• Correct inaccurate personal information.
• Request deletion of your personal information (exercisable directly in-app via Settings → Delete Account, or by emailing us).
• Object to or restrict certain processing of your data.
• Withdraw consent for marketing emails at any time.
• Opt out of analytics tracking in Settings → Privacy.
• Data portability where applicable.
• Lodge a complaint with your local data protection supervisory authority (e.g. the ICO in the UK, or your national DPA in the EU).

To exercise any of these rights, contact us at privacy@grandlog.app.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@grandlog.app.