Privacy Policy

Effective Date: November 2025

1. Data Controller

Granny-AI
Email: privacy@granny-ai.com

Full contact details are available in the Imprint.

2. Overview

Granny-AI is a mobile app for seniors that offers personalized stories, memoirs, and brain training. The protection of your personal data is important to us. This privacy policy informs you about the collection, processing, and use of your data in accordance with applicable international privacy laws, including the EU General Data Protection Regulation (GDPR) where applicable.

3. Legal Basis

3.1 Applicable Privacy Laws

Data processing is conducted in compliance with the Protection of Privacy Law and the Privacy Protection Regulations (Data Security), 5777-2017.

3.2 EU General Data Protection Regulation (GDPR)

  • Art. 6(1)(a) GDPR – Consent
  • Art. 6(1)(b) GDPR – Contract fulfillment (subscriptions)
  • Art. 6(1)(f) GDPR – Legitimate interests (app functionality)

4. Data We Collect

4.1 Account Data (required)

  • Email address (for login and communication)
  • Password (stored encrypted)
  • Account creation date

4.2 Profile Information (optional)

  • First name, last name, preferred name
  • Gender (for personalization)
  • Date of birth (month/year only for age adaptation)
  • Information about family members (grandchildren, pets)
  • Physical characteristics for story generation (hair color, eye color)

4.3 Usage Data

  • App usage times
  • Selected features

4.4 Technical Data

  • Device type, operating system version
  • App version
  • Language settings
  • Time zone
  • IP address (for security and fraud prevention)

4.5 Subscription Data

  • Selected subscription plan
  • Purchase and renewal date
  • Transaction data (processed by Stripe for Web/PWA, or by App Store/Google Play for Mobile)

5. Web Subscriptions, App-Store Purchases, and Subscriptions

5.1 Available Plans

Try free for 14 days with usage limits and no credit card. Further AI use then requires a paid subscription. The trial does not automatically start a paid subscription.

Standard: EUR 4.99/month or EUR 49.99/year. Premium: EUR 9.99/month or EUR 99.99/year. Both plans have usage limits. Web subscriptions are purchased and managed through Stripe.

5.2 Free Trial

Try free for 14 days with usage limits and no credit card. Further AI use then requires a paid subscription. The trial does not automatically start a paid subscription.

5.3 Auto-Renewal

Subscriptions automatically renew unless canceled at least 24 hours before the end of the current period. Renewal is charged at the current subscription price.

5.4 Cancellation

Web / PWA (Stripe): Manage and cancel your subscription anytime via the Stripe Customer Portal, accessible from your account settings.

Mobile (iOS / Android): Cancel via App Store (iOS) or Google Play Store (Android) settings.

Access remains active until the end of the paid period.

5.5 Payment Processing

Web / PWA: Payments are processed by Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.). Full card data is collected directly by Stripe and never reaches our servers.

Mobile: Payments are processed directly by Apple (App Store) or Google (Google Play). We do not store your payment information.

6. Third-Party Services

We use the following third-party services:

6.1 Supabase (Backend Infrastructure)

  • Purpose: User authentication, data storage
  • Data shared: Account and profile information
  • Privacy policy: supabase.com/privacy

6.2 OpenAI (AI Content Generation)

  • Purpose: Generating personalized stories and texts
  • Data shared: Profile information, user preferences
  • Note: OpenAI does not use your data for AI model training
  • Privacy policy: openai.com/privacy

6.3 Google Gemini (Additional AI Features)

  • Purpose: Alternative AI model for content generation
  • Data shared: User inputs, generated responses
  • Privacy policy: policies.google.com/privacy

6.4 ElevenLabs (Text-to-Speech)

  • Purpose: Converting generated texts to speech
  • Data shared: Text content only
  • Privacy policy: elevenlabs.io/privacy

6.5 Stripe (Web/PWA Payments)

  • Provider: Stripe Payments Europe, Ltd. (Ireland) / Stripe, Inc. (USA)
  • Purpose: Processing web/PWA subscription payments and managing the Stripe Customer Portal
  • Data shared: Email address, billing details, payment metadata. Full card data is collected directly by Stripe and never reaches our servers.
  • Privacy policy: stripe.com/privacy

6.6 RevenueCat (Mobile In-App Subscription Management)

  • Purpose: Managing in-app purchases and subscriptions
  • Data shared: User ID, subscription status, purchase receipts
  • Privacy policy: revenuecat.com/privacy

6.6 Google Cloud Storage (Media Storage)

6.7 Vercel (Website Hosting and CDN)

  • Provider: Vercel Inc. (USA)
  • Purpose: Hosting the landing pages, legal pages, and PWA web delivery
  • Data shared: Technical request data such as IP address, browser information, requested URL, and security logs
  • Privacy policy: vercel.com/legal/privacy-policy

7. Data Transfer

Some of our service providers are located outside the European Economic Area (EEA). Data transfers are secured through:

  • Standard Contractual Clauses (SCC) as required by GDPR
  • Data Processing Agreements (DPA)

8. Data Retention

We store your data for the following periods:

  • Account data: Until account deletion
  • Profile information: Until account deletion
  • Usage data: 12 months
  • Transaction data: 7 years
  • Technical logs: 90 days
  • Backups: Automatically deleted after 90 days

9. Data Security

We protect your data through:

  • End-to-end encryption for sensitive data
  • Secure HTTPS connections
  • Regular security audits
  • Access controls and authentication
  • Encrypted data storage
  • No storage of credit card information

10. Your Rights Under GDPR (EU Residents)

Under GDPR, EU residents have the following rights:

  • Right to access (Art. 15 GDPR): Request a copy of your stored data
  • Right to rectification (Art. 16 GDPR): Correct inaccurate data
  • Right to erasure (Art. 17 GDPR): Delete your data ("right to be forgotten")
  • Right to restriction (Art. 18 GDPR): Limit data processing
  • Right to data portability (Art. 20 GDPR): Receive your data in a structured format
  • Right to object (Art. 21 GDPR): Object to data processing
  • Right to withdraw consent (Art. 7(3) GDPR): Withdraw previously given consent
  • Right to lodge a complaint: You may file a complaint with your local data protection authority

11. Your Privacy Rights

Depending on your location, you may have the following privacy rights:

  • Right to Access: You may request to review the personal data we hold about you
  • Right to Correction: You may request correction of inaccurate data
  • Right to Deletion: You may request deletion of data that is not required by law to be retained
  • Right to Object: You may object to the use of your data for direct marketing purposes
  • Right to File a Complaint: You may have the right to lodge a complaint with a competent supervisory authority where applicable

12. Data Export

You can export all your data directly in the app:

  1. Open the Settings menu
  2. Navigate to "Privacy & Security"
  3. Select "Export My Data"
  4. You will receive a JSON file containing all your data

13. Account Deletion

You can delete your account at any time:

  1. Open the Settings menu
  2. Navigate to "Account"
  3. Select "Delete Account"
  4. Confirm the deletion

Note: Account deletion is irreversible. All your data will be permanently deleted within 30 days.

14. Children's Privacy

Granny-AI is designed for users aged 50 and above. We do not knowingly collect data from children under 16 (GDPR) or under 13 (COPPA). If you believe we have inadvertently collected such data, please contact us immediately.

15. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of significant changes through in-app notification and/or email.

16. Contact

For questions about your privacy or to exercise your rights:

Email: privacy@granny-ai.com

We endeavor to respond to all requests within 30 days.

Summary of Our Privacy Commitments

  • ✓ We only collect data necessary for app functionality
  • ✓ Your data is stored securely and encrypted
  • ✓ You have full control over your data
  • ✓ You can export or delete your data at any time
  • ✓ We never sell your personal data to third parties
  • ✓ We follow international privacy and GDPR requirements where applicable