Griddy Privacy Policy

Overview

Griddy is a personal dashboard app. Core dashboard features work without signing in to a third-party service. Users can optionally connect supported calendar, email, Instagram professional-account, and Facebook Page services.

This policy describes data Griddy processes to provide the features a user chooses. Griddy does not sell personal information or use connected-service data for advertising, tracking, data brokering, credit decisions, or model training.

Calendar, Location, and Email Data

If a user grants calendar access, Griddy reads calendar events to display the user's schedule on the dashboard. If a user grants location access, Griddy uses the device location to show local weather conditions, forecasts, and alerts.

Google and Microsoft email connections are optional. For the Smart Inbox, Griddy reads the account label, mailbox counts, recent message metadata and previews, and the contents or attachments of a message only when the user opens it. It can send a message, mark a message read, or move a message to trash only after a user takes the corresponding action in Griddy.

Griddy does not collect provider passwords, read Apple Mail inboxes, browse arbitrary mailbox attachment libraries, send email automatically, or make mailbox changes in the background.

Social Data

Instagram connections are limited to supported Business and Creator accounts. Griddy reads the connected account's profile identity, follower count, media count, and recent owned-media summary for the dashboard.

Facebook connections are limited to Pages the user manages. Griddy reads selected Page identity, follower or like counts, and recent owned Page posts for the dashboard.

Griddy does not scrape Meta websites, read personal Facebook timelines or personal Instagram home feeds, or provide social publishing, comments, or messaging features.

Storage

OAuth tokens are stored locally in the iOS Keychain on the user's device. Cached dashboard data is stored locally by the app to display the features the user enables.

The Griddy Meta token-exchange service protects the Meta app secret during OAuth setup. It does not persist authorization codes, OAuth tokens, profile payloads, feed payloads, or media payloads.

Sharing

Connected-service data is used only to provide the dashboard features requested by the user. Griddy does not sell it or share it with advertisers or data brokers.

Google Workspace data is used only to provide or improve user-facing features in Griddy. It is not used for advertising, and Griddy does not allow humans to read that data except with the user's affirmative agreement, for security purposes, to comply with applicable law, or as necessary for an internal operation when the data has been aggregated and anonymized.

User Controls

Users can disconnect a connected service from Griddy settings. Disconnecting removes the local OAuth credential and clears cached provider data used by the app.

Users can also revoke Griddy's access in the relevant provider's account settings.

Contact

For privacy or data deletion requests, contact admin@akdesignhouse.com.