Privacy Policy

Grimoire is an app for solitary witches: a digital grimoire, practice journal, and esoteric toolkit. It is available on Android and on the web at app.getgrimoire.app. It is published by Persephone Digital Studios, the trading name of Stacy Bisschop, 4th Floor, Silverstream House, 45 Fitzroy Street, London W1T 6EB. Contact: hello@getgrimoire.app. Our website is getgrimoire.app. For data protection matters, please use the subject line “Privacy: [your query]”.

Account and profile data. When you create an account we collect your email address (used for sign-in) and your chosen craft name, plus any optional profile details you add, such as a bio, path, or patron deities.

Journal and practice data. Most of what you create in the app is stored on our servers, linked to your account, so it is there when you sign in on another device. This includes journal and grimoire entries, spells, rituals, dreams, sigils, your Apothecary, Deity Journal records, Artifact Log entries, and any attachments you add (photos, video, audio). See “Who We Share Data With” below for our hosting provider.

Data that stays on your device. Some things are never sent to our servers. Your Shadow Work journal is stored only on your device: it is not uploaded, backed up, or visible to us. The location you set for Pulse (moon and sky timings) and some tool preferences are also kept on your device only. If you uninstall the app or clear its data, this information is gone and we cannot recover it.

Natal chart data. If you use the Astrology Tower, you may provide a birth date, time, and place to generate a natal chart. This is saved on your device and also stored against your account, along with your calculated sun, moon, and rising signs, so your chart carries over to other devices.

Reminders. If you turn on practice reminders, they are scheduled locally by your device's operating system. We do not collect a push notification token.

Device permissions. We only request a device permission when you actively use a feature that needs it:

• ✦Camera: to take photos or video for your entries, sigils, altar images, or profile picture.
• ✦Photo / media library: to attach existing photos or videos to entries.
• ✦Microphone: to record voice memos, or the audio for video entries.
• ✦Notifications: to show practice reminders you have set up.

We do not use these capabilities in the background, and we do not access your device's GPS location.

Authentication data. Sign-in is handled by Supabase Auth using your email address and password. Passwords are stored only in hashed form; we never see your raw password.

Subscription data. Grimoire Pro subscriptions are paid through Google Play (Android) or Stripe (web), depending on where you subscribe. We never see or store your payment card details; those are handled entirely by Google or Stripe. We use RevenueCat to manage subscriptions on both platforms. RevenueCat receives your purchase details and our internal account ID for you, and tells the app whether your account has an active subscription, a free trial, or a gifted period of Pro, and when it ends.

Referrals. If you invite a friend, or join through someone's invite, we record which two accounts are linked by the referral and whether each has subscribed, so that referral rewards can be applied.

Crash and error reports. When the app crashes or hits an error, it sends a report to Sentry so we can fix the problem. Reports include technical details (device model, operating system, app version, and what the app was doing when the error occurred) and our internal account ID for you. They do not include your name, email address, or the content of your entries.

Place searches. When you search for a birth place or set your Pulse location, the text you type is sent to OpenStreetMap's Nominatim service to look up the place's coordinates. This lookup is not linked to your account.

Website analytics. This website uses Vercel Analytics, which collects anonymised, aggregate data such as page views, referring site, and country-level location. No cookies are set and no personal identifiers are stored. The app itself does not use analytics.

Email correspondence. If you contact us by email, we collect the information you include in that message in order to respond to you.

Account, practice, and natal chart data. We store this to provide the service you signed up for, so your grimoire persists across devices. Our lawful basis is contract.

Subscription and referral data. We process your subscription status and referral records to unlock Pro features and apply referral rewards. Our lawful basis is contract.

Account emails. We send emails that are part of running your account: confirming your email address, password resets, a welcome email, and a reminder before a free trial ends. Our lawful basis is contract.

Crash and error reports. These help us find and fix bugs. Our lawful basis is legitimate interests. Reports contain no journal content and are kept for a limited time.

Reminders. Reminders are shown only if you turn them on and grant notification permission. Our lawful basis is consent. You can turn them off at any time in Settings.

Website analytics. Anonymised analytics help us understand how visitors use the site and improve it. Our lawful basis is legitimate interests. Because Vercel Analytics is cookieless and collects no personal data, this processing has minimal privacy impact.

Email correspondence. We process email in order to respond to your enquiry. Our lawful basis is legitimate interests.

We do not sell your data. We do not share it with advertisers. We share it only with the following service providers, where needed to run the service:

Supabase. Our database, file storage, and sign-in provider. All app data stored on our servers (your account, entries, natal chart, Deity Journal, and uploaded files) is held in Supabase, which runs on AWS in the EU. Privacy policy: supabase.com/privacy.

RevenueCat. Manages subscriptions and Pro access across Google Play and the web. Privacy policy: revenuecat.com/privacy.

Google Play and Stripe. Process subscription payments. Their own privacy policies apply to the payment information you give them: policies.google.com/privacy and stripe.com/privacy.

Resend. Delivers our emails (sign-up confirmation, password reset, and welcome and trial reminder emails). Resend also keeps a contact list of app users' email addresses; we do not use it to send marketing or newsletters. Resend receives your email address and the content of these messages, never your journal content or other app data. Privacy policy: resend.com/legal/privacy-policy.

Sentry. Receives crash and error reports from the app, as described above. Privacy policy: sentry.io/privacy.

OpenStreetMap Foundation (Nominatim). Looks up coordinates for place names you search for. It receives the search text and your IP address. Privacy policy: osmfoundation.org/wiki/Privacy_Policy.

CARTO. Provides the map tiles for the Sacred Sites Atlas. When the map loads, CARTO receives your IP address and the area of the map being viewed. Privacy policy: carto.com/privacy.

Vercel. Hosts this website and the web app, and provides anonymised website analytics. Privacy policy: vercel.com/legal/privacy-policy.

Affiliate partners. The in-app Shop contains affiliate links to Amazon (via the Amazon Associates programme), Etsy (via the Etsy affiliate programme), and other partner platforms. When you tap an affiliate link you leave Grimoire and enter the partner's site, where their privacy policy applies, including any cookies they set to attribute the referral. We receive only anonymised commission reports from these partners and never see your personal purchase data. Affiliate links are clearly identified in the app.

Some of these providers process data outside the UK, for example in the USA. Those transfers are covered by the UK Extension to the EU-US Data Privacy Framework, Standard Contractual Clauses, or the UK International Data Transfer Agreement.

Account and practice data. We keep your data for as long as your account is active. When you delete your account (via Settings in the app, or by submitting a request at getgrimoire.app/delete-account if you can no longer sign in), your account, entries, and uploaded files are permanently deleted and your email address is removed from Resend. This is completed within 30 days. Backup copies are purged on their normal rotation, typically within 90 days.

Subscriptions. Deleting your account does not cancel a subscription. Please cancel it in Google Play, or via the Manage subscription option in the web app, first. Google, Stripe, and RevenueCat keep their own records of past purchases as required for tax and accounting.

Device-only data. Shadow Work entries and other data stored only on your device remain there until you delete them, clear the app's data, or uninstall the app.

Crash and error reports. Deleted automatically by Sentry after a limited period, at most 90 days.

Email correspondence. Retained for up to 12 months from the last exchange, unless there is reason to keep it longer (such as an ongoing dispute).

Website analytics. Anonymised and aggregated. No personal data is retained.

You have the right to:

• ✦Access the personal data we hold about you
• ✦Correct inaccurate data (you can update most profile data yourself in the app)
• ✦Ask us to delete your data; the quickest route is to delete your account in the app
• ✦Receive your data in a portable format (you can export your entries yourself from Settings, or ask us for a full copy)
• ✦Restrict or object to processing in certain circumstances
• ✦Withdraw consent at any time, where consent is the lawful basis, without affecting prior processing
• ✦Lodge a complaint with the ICO if you believe we have mishandled your data

To exercise any of these rights, email hello@getgrimoire.app. We will respond within one month. The Information Commissioner's Office (ICO) is the UK supervisory authority for data protection. You can find out more at ico.org.uk.

All data in transit is encrypted using TLS, and data at rest is encrypted by Supabase. Row Level Security on our database means each account can only access its own data. On Android, your sign-in session and Shadow Work journal are kept in the device's encrypted secure storage. No system is completely secure, so please use a strong password and keep your device safe.

This website does not use tracking or advertising cookies. Vercel Analytics works without cookies. When you dismiss the notice at the bottom of the page, your browser remembers that choice in local storage so the notice is not shown again.

The web app stores your sign-in session in your browser's local storage so you stay signed in. This is strictly necessary for the service to work. If you subscribe on the web, payment takes place on Stripe's checkout pages, where Stripe's own cookie policy applies.

If you have a complaint about how we have handled your personal data, please email hello@getgrimoire.app with the subject line “Data Protection Complaint”. We will acknowledge within 5 working days and aim to resolve within 30 days. If you are not satisfied, you have the right to escalate to the ICO at ico.org.uk/make-a-complaint.

Grimoire is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

We may update this policy from time to time. Material changes will be notified via an in-app notice or email. The date at the top of this page shows when it was last updated.

Questions about this policy or your data? Email us at hello@getgrimoire.app.