Gritly

Privacy Policy

Effective from 16 Oct 2026

1. Controller

The controller of personal data is HAKS s.r.o., IČO 28318323, Na Vyhlídce 255/1, 586 01 Jihlava, Česká republika. Privacy questions and requests: support@gritly.cz.

2. Data we process

  • Sign-in: account identifier and email from Apple or Google (Apple may hide your email).
  • Profile: display name, nickname, avatar and privacy settings.
  • Journal: workout and rest days, exercises, exercise groups, notes, mood, energy, sleep, water and body weight if you enter it.
  • Nutrition: daily diet adherence status.
  • Steps: daily step count from Apple Health, only after you grant permission in iOS. We store only the count and date; we do not write to Apple Health.
  • Progress photos in private storage, accessible only to you.
  • Friends: friend requests and links between accounts.
  • Support: content of messages you send us.
  • Widget: a random secret token assigned to your account.
  • Technical data: app error reports and standard server logs needed for functionality and security.

We process data to provide the app under contract (Art. 6(1)(b) GDPR): sign-in, storing and syncing the journal, statistics, widgets, sharing with friends per your settings and support. Technical data is processed based on our legitimate interest in secure and reliable operation (Art. 6(1)(f)). Steps, weight and similar data may reveal health information; we process it only based on your explicit consent (Art. 9(2)(a)), given by entering it or granting Apple Health access, which you can withdraw at any time by deleting it or revoking the permission.

4. Cookies and analytics

Gritly uses no advertising or analytics tracking tools and does not sell data. Only technical data needed for sign-in and settings (e.g. language, theme) is stored on your device.

5. Sharing with friends

Friends may see your profile and summary statistics according to your privacy settings. Progress photos and personal notes are not shared.

6. Recipients and processors

Data is stored with the cloud platform provider that provides hosting, database, authentication and storage. Sign-in is provided by Apple and Google; payment for the app by Apple. Where data is transferred outside the EEA, this relies on safeguards under Chapter V GDPR (e.g. standard contractual clauses). Details on processors and transfers are available on request.

7. Widgets

The widget loads selected data (calendar, streaks, steps) using a secret token. Anyone who obtains the token can load this data; do not share it. People with access to your device may see data on the Home and Lock Screen. After account deletion the token is invalid.

8. Security

Data access is restricted to your account by database-level rules, photos are in private storage and communication is encrypted (HTTPS).

9. Retention and deletion

We keep data while your account exists. You can delete your account in Profile: progress photos, journal, workout records, steps, nutrition, exercise groups, profile, settings including the widget token, support messages, friendships and the sign-in account are irreversibly removed. Other users' data is not affected. If deletion fails, it can be safely retried. Residual copies in the provider's technical backups expire in its regular backup cycle. Email correspondence is kept as long as needed to resolve the matter.

10. Your rights

You have the right to access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Send requests to support@gritly.cz or via in-app support; we will respond without undue delay and within one month. You may lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.gov.cz) or your local authority.

11. Health

Gritly is a fitness app, not a medical device. Statistics are not a medical diagnosis.

12. Children

The app is not intended for children under 15 without parental consent.

13. Changes

We will inform you about material changes in the app. The current version is always on this page.