Issue 01 · Manchester Multi-sport performance, tracked · 2026

Privacy Policy

Last updated: 22 June 2026

1. Who we are

GRAFT ("we", "us", "our") is a personal athletic performance tracking application. This policy explains how we collect, use, and protect your information when you use the GRAFT app.

For the purposes of UK data protection law, GRAFT is the data controller responsible for your personal data.

2. Data minimisation

We follow the principle of data minimisation. We only collect information that is necessary to provide the GRAFT service. We do not collect data "just in case" and we regularly review what we hold to ensure it remains relevant.

3. What we collect

We collect only what is necessary to provide the service:

  • Account information: When you sign in with Google (or Apple), we receive your display name, email address, and profile photo URL from your authentication provider. We use this solely for account identification and displaying your name in the app.
  • Performance data: Session logs, body stats, nutrition entries, goals, and other data you voluntarily enter. This data is stored locally on your device and, if you sign in, synced to Firebase Cloud Firestore.
  • Photos: Photos you choose to attach to a session or to your profile are first stored locally on your device. If you are signed in, photos attached to your training sessions and your custom profile picture may also be uploaded to Google Firebase Storage so that they sync across your devices. We do not use these photos for advertising, profiling, or analytics. If you are signed out (guest mode), photos remain local-only and are not uploaded.
  • Behavioural analytics: We use PostHog to collect anonymous, aggregated usage signals such as which features are used and share actions taken. This data is behavioural, not personal. We do not track your name, email, health data, session content, or any personally identifiable information through analytics. Autocapture, session recording, and page tracking are all disabled. On the graft.fit website you can opt out of analytics on our Privacy Policy page (below), and we honour your browser's Do Not Track setting.
  • Newsletter sign-ups: If you subscribe to our newsletter on graft.fit, we collect the email address you submit, the date and time you subscribed, and the country your request comes from (derived from your IP address by Cloudflare; we do not store your full IP address). We use this only to send you occasional GRAFT news and product updates.
  • Motion & movement data (optional): If you grant permission, GRAFT reads daily movement summaries from your device's health or motion service (for example Apple Health / HealthKit on iOS or Health Connect on Android). We only read daily totals: daily step count, estimated distance, active minutes, and (where the source provides it) an hourly rhythm for the current day. We store daily summaries alongside your other performance data; we do not collect raw motion sensor streams. Motion access is off by default and can be toggled off in Settings at any time. Location is not collected or used for step counting.

4. What we do NOT collect

  • We do not collect your location for step counting or any other feature
  • We do not access your contacts, calendar, or camera
  • We do not collect advertising identifiers (IDFA/GAID)
  • We do not sell, rent, or share your personal data with third parties
  • We do not use your data for advertising or profiling
  • We do not use tracking cookies

5. Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

  • Contract: Processing your account information and performance data is necessary to provide the GRAFT service you have signed up for.
  • Legitimate interests: We use anonymous behavioural analytics to understand how the app and the graft.fit website are used and to improve them. This processing is minimal and privacy-safe; you can opt out at any time.
  • Consent: We rely on your consent for our newsletter (you opt in by subscribing, and can unsubscribe at any time) and for optional app permissions such as notifications. You can withdraw consent at any time.

Analytics opt-out: Analytics on graft.fit are anonymous and on by default. You can opt out for this browser at any time:

6. How your data is stored

Locally: All performance data is saved to your device's browser storage (localStorage). This data remains on your device and is under your control.

Cloud sync: If you sign in, your performance data is synced to Google Firebase Cloud Firestore, and any photos you attach to sessions or your profile may also be uploaded to Google Firebase Storage so they sync across your devices. Firebase uses industry-standard encryption in transit (TLS) and at rest (AES-256). Photos uploaded to Firebase Storage are scoped to your authenticated account; only you can read or write them.

7. Optional health data import

When you connect Apple Health on iOS or Health Connect on Android, or grant motion access, GRAFT reads workout sessions and daily movement summaries only (daily totals such as steps, distance and active minutes). We do not read raw motion sensor streams, and we do not read location. You choose whether to connect health data, and we process it on the basis of your explicit consent. When you are signed in, your daily step totals are synced to your private, account-scoped storage in Google Firebase so they stay available across your devices; your imported workout sessions and the more detailed movement metrics stay on your device only. In guest mode, all of this data stays on your device. We do not sell or share imported health data, and we never use it for advertising or profiling. You can revoke health or motion access in your device's settings at any time, and you can remove the synced data by deleting your account. GRAFT is fully usable without connecting health data.

8. International data transfers

Your data may be processed in the United States or European Economic Area through our use of Google Firebase and PostHog. These transfers are protected by:

  • Google's compliance with the EU-US Data Privacy Framework and standard contractual clauses
  • PostHog's data processing agreements and standard contractual clauses

We only use providers that maintain appropriate safeguards for international data transfers as required by UK GDPR.

9. AI Performance Insights

If you choose to use AI Performance Insights, GRAFT may use relevant information from your account to generate personalised summaries, observations, and suggestions. Depending on what you have logged, this may include activity logs, performance statistics, recovery information, injury logs, body map or body stat entries, nutrition logs, profile settings, sport preferences, and related app context needed to generate the insight.

Consent: AI Performance Insights are optional and require your explicit in-app consent before the feature can run. If you do not accept the consent notice, GRAFT will not run AI insights for your account. Consent is linked to your signed-in account where possible, and is versioned. If the feature or this policy changes materially, you may be asked to accept consent again.

Control: You can keep AI insights switched off. Setting the insight frequency to Off in Settings stops scheduled AI insights for your account. You can also export your data at any time using the app's export tools, or contact support using the details in section 16. Consent controls may be expanded over time.

Third-party processing: To provide AI Performance Insights, relevant data may be processed by secure backend services and third-party AI technology providers. We aim to limit the data used to what is relevant for generating the requested insight. The services used to provide this feature may change over time; see section 10 for the current list of third-party services.

Purpose: Data is used to generate personalised training and performance insights and to improve the relevance of your experience. The text GRAFT generates from the feature is stored locally on your device so you can review it.

Safety note: AI Performance Insights are informational and supportive only. They are not medical advice, diagnosis, treatment, injury assessment, nutrition prescription, or a replacement for advice from a qualified professional.

10. Third-party services

  • Google Firebase: Authentication, database (Firestore), media storage (Firebase Storage, for signed-in session and profile photos), and analytics. Subject to Google's Privacy Policy.
  • Anthropic (Claude AI): Powers the AI Insights feature via our secure backend. Anonymised training summaries only. Subject to Anthropic's Privacy Policy.
  • PostHog: Anonymous product analytics. Subject to PostHog's Privacy Policy.
  • RevenueCat: Manages your GRAFT Pro subscription status (entitlement) and relays purchase events from the Apple App Store or Google Play Store. RevenueCat does not receive your payment card details. Subject to RevenueCat's Privacy Policy.
  • Resend: Email delivery for our newsletter; receives subscriber email addresses in order to send these emails. Subject to Resend's Privacy Policy.
  • Cloudflare: Hosting and security for graft.fit, including Turnstile, a privacy-friendly tool that protects our forms from bots without tracking you. Subject to Cloudflare's Privacy Policy.

11. Subscriptions and payments

GRAFT Pro is a paid subscription. Payments are processed exclusively by the Apple App Store (on iOS) or the Google Play Store (on Android). GRAFT does not collect, see, or store your payment card details. Card and billing information is held by Apple or Google under their own terms.

To manage entitlements (whether your account currently has Pro access) we use RevenueCat. RevenueCat receives the subscription/purchase events from the relevant store and tells the app whether your account is entitled to Pro features. RevenueCat does not receive your payment card details and is not used for advertising. See section 10 for the third-party reference.

You can manage, change, or cancel your subscription at any time from your Apple ID subscription settings or Google Play subscription settings. Refunds are handled under Apple's or Google's published refund policies.

12. Data retention

Your data is retained for as long as you have an active account. If you delete your account, all associated cloud data is removed permanently. Specifically:

  • Local data: Remains on your device until you clear it via Settings → Danger Zone → Clear device data, or clear your browser storage.
  • Account and cloud data: Permanently deleted when you use Settings → Danger Zone → Delete Account, or by following the steps on our account deletion page. This removes your account, all cloud data, leaderboard entries, and profile. This action is irreversible.
  • Selective deletion: GRAFT currently supports full account deletion only. Deletion of individual data categories is not currently available.
  • Analytics data: Behavioural analytics are anonymous and cannot be linked back to you after account deletion.
  • Newsletter: If you subscribe, we keep your email address until you unsubscribe, after which we remove it from our active list. Every newsletter email includes an unsubscribe link.

13. Security

We take reasonable technical and organisational measures to protect your data, including encryption in transit, secure authentication via established providers, and limited data collection. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to a standard appropriate to the nature of the information.

14. Your rights

Under UK GDPR and applicable data protection laws, you have the right to:

  • Access your data (via the Export feature in the app)
  • Correct your data (via the app's editing features)
  • Delete your data (via the in-app Delete Account feature, or by following the account deletion page; email requests to graftappofficial@gmail.com are processed within 7 days after verification)
  • Port your data (via JSON/CSV export)
  • Object to processing based on legitimate interests
  • Withdraw consent at any time for consent-based processing (such as notifications)

To exercise any of these rights, you can use the relevant feature in the app or contact us at graftappofficial@gmail.com. We will respond to data rights requests within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have not been respected.

15. Children's privacy

GRAFT is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us at graftappofficial@gmail.com and we will delete it promptly.

16. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. If we make significant changes to how we handle your data, we will notify you through the app where possible. Continued use of GRAFT after changes are posted constitutes acceptance of the updated policy.

17. Contact us

If you have questions about this policy, want to exercise your data rights, or have a concern about how your data is handled, contact us at:

graftappofficial@gmail.com

© 2026 GRAFT. All rights reserved.