Privacy Policy

Account data: name, email and profile photo, provided by you at sign-up or through Google sign-in.

Financial data: transactions, cards, invoices, recurring bills, budgets, goals and statement imports you record in the app. This data is entered by you. Grani does not connect automatically to your bank.

Device data: push notification identifier, language and basic device information, used to run the app.

Subscription data: premium subscription status, processed by the app stores (App Store) and RevenueCat. We never see your card number.

Site measurement: on grani.io we use Vercel Analytics, which sets no cookie and does not identify you, and Microsoft Clarity, which records browsing anonymously (scrolling, clicks and heatmaps) with its own cookie, so we can see what to improve on the page. Clarity masks typed content, and none of this reaches the app or your financial data.

Android waitlist: if you leave your email on grani.io to be notified about the Google Play launch, we store only that email and the page language. We use it exclusively to send the launch announcement, never for third-party marketing, and delete the record afterwards, or earlier if you ask at privacidade@grani.io.

We use your data solely to operate Grani: sync your information across devices, generate analyses and insights, deliver notifications you configure, process your subscription and provide support.

The AI financial guide is optional and sends a summary of your financial data to OpenAI to generate recommendations. This only happens with your explicit in-app consent. See the “Artificial intelligence (OpenAI)” section.

We do not sell your data. We show no ads. We do not use your financial data for third-party marketing.

Grani offers an AI financial guide. Only when you enable this feature and grant permission in the app do we send a summary of your financial data to OpenAI, L.L.C. (United States), which processes the text and returns the recommendations.

What is sent: monthly income, expenses and savings, balance, spending categories, merchants from recent transactions, goals, recurring bills, budgets and cards (brand and due dates). What is NOT sent: your name, email, tax ID or phone number.

Why it is sent: solely to generate your personalized financial analysis at that moment. You authorize this sharing before the first use and may decline. If you decline, the AI feature is not used and the rest of the app keeps working normally.

OpenAI acts as a processor, with protection equivalent to this policy. Data sent through the OpenAI API is not used to train its models.

Biometric lock (Face ID / fingerprint) happens entirely on your device, using the phone's own system. Grani never receives, stores or accesses your biometric data.

Supabase: database and authentication infrastructure, where your data is stored encrypted.

OpenAI: processing of the AI financial guide, only with your consent, as described in the “Artificial intelligence (OpenAI)” section.

RevenueCat and app stores: premium subscription status processing.

Google: only if you choose to sign in with your Google account.

Beyond these processors required to run the service, your data is not shared with anyone, except under legal obligation.

Your data travels encrypted (TLS) and is stored encrypted at rest. Access tokens live in the system's secure storage (device Keychain / Keystore).

We keep your data while your account is active. You can export everything as PDF or CSV at any time, inside the app.

When you delete your account, your personal and financial data is removed from our systems within 30 days, except what we must keep under legal obligation.

Under Brazil's data protection law (LGPD) and similar regulations, you may request: confirmation of processing, access, correction, portability, anonymization and deletion of your data, as well as consent withdrawal.

To exercise any right, write to suporte@grani.io. We respond within the legal deadlines.

Grani is not directed at people under 18. Accounts created by minors without authorization will be removed.

If this policy changes in a relevant way, we will notify you through the app or by email before the change takes effect. The last-updated date at the top always reflects the current version.

Questions about privacy or your data: suporte@grani.io.