Privacy Policy

1. Who we are

The Grind is operated by Adam Wudzinski - IT Solutions. This policy explains what data we handle and why. Contact: adaswudzinski94@gmail.com.

2. Data we collect

• Account data — email address and authentication details, managed by our auth provider Clerk. We store your user id and email in our database.
• Payment data — purchases are processed by Lemon Squeezy (merchant of record). We never see your card details; we store order metadata (plan, amount, currency) to manage your access.
• Product data — everything you create in the app: your classes and skills, logged time entries, goals and milestones, streaks, life events, your hero name, the AI-generated journal entries, stories and summaries written for you, and any API tokens you create for logging entries programmatically.

3. Where it lives

Application data is stored in a PostgreSQL database hosted by Neon in the EU (Frankfurt, eu-central-1). The app runs on Vercel's global infrastructure. Authentication runs on Clerk; payments on Lemon Squeezy. AI features (journal entries, stories, milestone suggestions, coaching insights) are generated by sending the relevant parts of your product data — such as skill names, logged sessions and goals — to OpenAI, which processes them to produce the text. If we send transactional email, it is delivered via Resend. Some of these providers process data in the United States; where they do, transfers rely on recognized safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.

4. What we use it for

To provide the service, manage your access and purchases, and keep the service secure (e.g. rate limiting). We use Vercel Analytics and Speed Insights for aggregate, privacy-friendly usage and performance statistics — no advertising, no cross-site tracking cookies. We don't sell your data, and we don't use it for marketing. Where GDPR applies, we process your data to perform our contract with you (providing the service), to comply with legal obligations (accounting records), and in our legitimate interest in keeping the service secure and improving it.

5. Deletion and export

Deleting your account (account menu → Manage account → Delete account) removes your login and all your data from our database. Payment records are retained without your identity, as required for accounting. You can download all your product data as JSON at any time from Settings → Export. You can also request deletion by email: adaswudzinski94@gmail.com.

6. Your rights

If you are in the European Union (or another jurisdiction with similar laws), you have the right to access, correct, export and erase your personal data, to restrict or object to its processing, and to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO), or the authority in your own country. To exercise any of these rights, use the in-app export and deletion tools or email adaswudzinski94@gmail.com.