Privacy Policy

Account data: name, email and profile photo, provided by you at sign-up or through Google sign-in.

Financial data: transactions, cards, invoices, recurring bills, budgets, goals and statement imports you record in the app. This data is entered by you. Grani does not connect automatically to your bank.

Receipt photos: when you use receipt reading, the photo you take or choose is sent to be read. If you keep the receipt attached, the image is stored with the transaction, and you can remove it at any time.

Device data: push notification identifier, language and basic device information, used to run the app.

Subscription data: premium subscription status, processed by the app stores (App Store) and RevenueCat. We never see your card number.

Site measurement: on grani.io we use Vercel Analytics, which sets no cookie and does not identify you, and Microsoft Clarity, which records browsing anonymously (scrolling, clicks and heatmaps) with its own cookie, so we can see what to improve on the page. Clarity masks typed content, and none of this reaches the app or your financial data.

We use your data solely to operate Grani: sync your information across devices, generate analyses and insights, deliver notifications you configure, process your subscription and provide support.

The AI features are optional: the financial guide sends a summary of your financial data to OpenAI to generate recommendations, and receipt reading sends the photo of the receipt to OpenAI to fill in the transaction. Each one only happens with your explicit in-app consent. See the “Artificial intelligence (OpenAI)” section.

We do not sell your data. We show no ads. We do not use your financial data for third-party marketing.

Grani offers two AI features: the financial guide and receipt reading. Each one asks for your permission in the app before its first use, and only then do we send data to OpenAI, L.L.C. (United States).

Financial guide: we send a summary of your financial data, which OpenAI processes to return the recommendations.

What is sent: monthly income, expenses and savings, balance, spending categories, merchants from recent transactions, goals, recurring bills, budgets and cards (brand and due dates). What is NOT sent: your name, email, tax ID or phone number.

Receipt reading: we send the photo of the receipt you took or chose. OpenAI reads the amount, date, merchant and category and returns only those fields, which you review and can edit before saving. No account data (name, email, tax ID) is sent with the photo. When the receipt is a Brazilian invoice with an access key, we look up the issuer's company registration number (CNPJ) in a public registry (BrasilAPI) to show the company's official name and activity; only the issuing company's CNPJ is sent in that lookup, nothing about you.

Why it is sent: solely to generate your analysis or read your receipt at that moment. You authorize each feature separately and may decline. If you decline, that feature is not used and the rest of the app keeps working normally. You can withdraw your consent at any time in Settings > Privacy.

OpenAI acts as a processor, with protection equivalent to this policy. Data sent through the OpenAI API is not used to train its models.

Biometric lock (Face ID / fingerprint) happens entirely on your device, using the phone's own system. Grani never receives, stores or accesses your biometric data.

Supabase: database and authentication infrastructure, where your data is stored encrypted.

OpenAI: processing of the financial guide and of receipt reading, only with your consent, as described in the “Artificial intelligence (OpenAI)” section.

BrasilAPI: public lookup of the CNPJ of the company that issued an invoice you read, to show its official name and activity.

RevenueCat and app stores: premium subscription status processing.

Google: only if you choose to sign in with your Google account.

Beyond these processors required to run the service, your data is not shared with anyone, except under legal obligation.

Your data travels encrypted (TLS) and is stored encrypted at rest. Access tokens live in the system's secure storage (device Keychain / Keystore).

We keep your data while your account is active. You can export everything as PDF or CSV at any time, inside the app.

When you delete your account, your personal and financial data is removed from our systems within 30 days, except what we must keep under legal obligation.

Under Brazil's data protection law (LGPD) and similar regulations, you may request: confirmation of processing, access, correction, portability, anonymization and deletion of your data, as well as consent withdrawal.

To exercise any right, write to suporte@grani.io. We respond within the legal deadlines.

Grani is not directed at people under 18. Accounts created by minors without authorization will be removed.

If this policy changes in a relevant way, we will notify you through the app or by email before the change takes effect. The last-updated date at the top always reflects the current version.

Questions about privacy or your data: suporte@grani.io.