1. Overview & Data Philosophy
At Grada, your data belongs to you. We believe fitness tracking should empower you without compromising your personal privacy. Grada operates offline-first on your device, and all synchronization is secured with TLS 1.3 transit encryption and PostgreSQL Row-Level Security (RLS).
2. What Information We Collect
- Website Training Preview & Early Access: When using our interactive Fit Finder, you may optionally submit your email address to receive your 4-week training architecture preview and early access updates. We record your goal preset, equipment tier, experience level, and schedule preset alongside your explicit Double Opt-In consent. Note: Joint comfort selections are processed solely in local browser memory and are never transmitted to our servers or stored as health records.
- App Account Information: Email address for account authentication and subscription management.
- Training & Readiness Data: Self-reported workout logs, recovery ratings (sleep, soreness) used solely to generate your adaptive plan in-app.
- Technical Analytics: Privacy-preserving, cookie-less event metrics (e.g. app performance, anonymous interaction events).
3. Purpose, Legal Basis & Third-Party Processors
We process marketing leads based on your explicit consent (Art. 6(1)(a) GDPR) verified via Double Opt-In. Transactional confirmation emails are dispatched using Resend on EU infrastructure under a formal Data Processing Agreement (DPA). We never sell your personal data or share it with third-party advertising networks.
4. Data Retention & Right to Erasure (Art. 17 GDPR)
Unconfirmed Double Opt-In tokens expire automatically after 30 days. Confirmed subscriber records are retained until you unsubscribe or request deletion. You can unsubscribe at any time in one click via the link in any email or by visiting our unsubscribe page.
To request complete erasure of your records from our systems under Art. 17 GDPR, email privacy@grada.fit. Our automated erasure workflow will immediately pseudonymize your records (clearing all identifiers and tokens).
5. Your Rights Under GDPR
You have the right to access, rectify, export, restrict processing, or delete your entire personal data history at any time directly within the Grada app settings or by contacting privacy@grada.fit.