Privacy Policy for Grid
Effective Date: October 4th, 2024
Introduction
Grid ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our end-to-end encrypted (E2EE) location-sharing application (“App”), available on iPhone and Android. By using Grid, you agree to the terms of this Privacy Policy. If you do not agree with the terms, please discontinue use of the App.
1. Information We Collect
We collect only the minimal personal information necessary to provide the App’s services:
- Phone Number and Username: When you register for Grid, we collect your phone number for verification purposes and to create your account. We also collect your username for identification within the app.
- Location Data: Grid does not have access to your location data. Your location is collected locally on your device and shared only with individuals or groups that you select. All location data is encrypted on your device before being transmitted using the Matrix protocol, ensuring that only the intended recipient(s) can view your location.
2. How We Use Your Information
We use the limited information we collect as follows:
- Phone Number and Username: Your phone number is used solely for account verification during registration. Your username is used to identify you within the app so others can find and connect with you.
- Location Data: We do not have access to your location data, and it is shared only with the contacts or groups you select, encrypted through E2EE. The location data is temporarily stored locally on your device for this purpose and is never stored on our servers.
3. Map Services and Cloudflare
Grid hosts its own map tile server on Cloudflare using Protomaps to provide map services. We do not log your location or map usage data, but Cloudflare may log anonymized information such as IP addresses or requests for technical performance purposes. This logging is managed by Cloudflare and is outside our control. Please refer to Cloudflare’s Privacy Policy for more details on how they handle data and our About Map Data page to learn more.
4. End-to-End Encryption (E2EE)
Your location data is encrypted on your device before it is transmitted using Matrix Synapse servers. This ensures that only the intended recipients can decrypt and view your location. Grid, Matrix Synapse, and any third parties involved cannot decrypt or view this data. We take every measure to ensure that your location-sharing remains private and secure.
5. Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal data, such as:
- Access: You may request a copy of the personal information we hold about you (your phone number and username).
- Correction: You may request that we correct inaccurate information.
- Deletion: You may request that we delete your account and any personal data associated with it (phone number and username).
To exercise these rights, please contact us at [Insert Contact Info]. Please note that deleting your account will prevent you from using Grid.
6. Data Sharing and Disclosure
Grid does not share, sell, or trade your personal information (phone number or username) with third parties, except:
- To Comply with Legal Obligations: We may disclose your personal data if required by law or in response to legal processes.
- For Security Reasons: We may disclose data if we believe it is necessary to protect our rights, your safety, or the safety of others.
7. Data Security
We take appropriate security measures to protect your personal information. All location data is encrypted end-to-end. While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
8. Children’s Privacy
Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal data, we will delete such information promptly. If you believe we may have collected such data, please contact us.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. If significant changes are made, we will notify you via the app or by email.
10. Third-Party Links
The App may contain links to third-party websites or services that are not owned or controlled by Grid. We are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of those third parties.
11. Data Retention
We retain your phone number and username only as long as necessary to provide the App’s services. If you delete your account, your data will be deleted from our servers, though it may remain in backup storage for a limited time for legal compliance and legitimate business purposes.
12. Data Breach Protocol
In the unlikely event of a data breach, we will promptly notify affected users and relevant authorities where required by law. We will also take necessary steps to contain and rectify the breach.
13. Self-Hosting
Grid is designed to allow users to host their own backend/Matrix server. If you choose to use your own server or another third-party server, please be aware that Grid is not responsible for the privacy, security, or handling of your data on those servers. Your location data and other personal information may be at risk if the server you use is not properly secured or managed. It is your responsibility to ensure that the server you use meets the necessary privacy and security standards.
By using a self-hosted or third-party server, you acknowledge that Grid cannot guarantee the security of your data and disclaims any liability for issues arising from the use of such servers.
14. Your Consent
By using Grid, you consent to the collection and use of your information as outlined in this Privacy Policy. If you do not agree with the terms, please discontinue use of the App.
15. Contact Us
If you have any questions or concerns about this Privacy Policy, or if you want to exercise any of your rights regarding your personal data, please contact us at:
- Email: contact@mygrid.app
- Address: 8 The Green Suite B, Dover, DE 19901
