Privacy Policy
Last updated: July 19, 2026
Grani is a personal finance app. This policy explains plainly what data we collect, why we collect it, and what you can do about it.
By using Grani you agree to the practices described here. If anything is unclear, reach us at suporte@grani.io.
1. Data we collect
Account data: name, email and profile photo, provided by you at sign-up or through Google sign-in.
Financial data: transactions, cards, invoices, recurring bills, budgets, goals and statement imports you record in the app. This data is entered by you — Grani does not connect automatically to your bank.
Device data: push notification identifier, language and basic device information, used to run the app.
Subscription data: premium subscription status, processed by the app stores (App Store) and RevenueCat. We never see your card number.
2. How we use your data
We use your data solely to operate Grani: sync your information across devices, generate analyses and insights (including AI features), deliver notifications you configure, process your subscription and provide support.
We do not sell your data. We show no ads. We do not use your financial data for third-party marketing.
3. Biometrics
Biometric lock (Face ID / fingerprint) happens entirely on your device, using the phone's own system. Grani never receives, stores or accesses your biometric data.
4. Who we share with
Supabase: database and authentication infrastructure, where your data is stored encrypted.
RevenueCat and app stores: premium subscription status processing.
Google: only if you choose to sign in with your Google account.
Beyond these processors required to run the service, your data is not shared with anyone, except under legal obligation.
5. Security
Your data travels encrypted (TLS) and is stored encrypted at rest. Access tokens live in the system's secure storage (device Keychain / Keystore).
6. Retention and deletion
We keep your data while your account is active. You can export everything as PDF or CSV at any time, inside the app.
When you delete your account, your personal and financial data is removed from our systems within 30 days, except what we must keep under legal obligation.
7. Your rights
Under Brazil's data protection law (LGPD) and similar regulations, you may request: confirmation of processing, access, correction, portability, anonymization and deletion of your data, as well as consent withdrawal.
To exercise any right, write to suporte@grani.io. We respond within the legal deadlines.
8. Minors
Grani is not directed at people under 18. Accounts created by minors without authorization will be removed.
9. Changes to this policy
If this policy changes in a relevant way, we will notify you through the app or by email before the change takes effect. The last-updated date at the top always reflects the current version.
10. Contact
Questions about privacy or your data: suporte@grani.io.