1. Introduction
GraceOS (“we”, “our”, “us”) is a personal Life Operating System mobile application. We are committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information.
2. Data We Collect
Local Data (stored only on your device):
- Personal profile (name, goals, values)
- Journal entries and mood logs
- Habits, tasks, and focus sessions
- Finance records and health vitals
- Notes, documents, and game progress
- Vault entries (encrypted with biometric lock)
Data sent when you use AI features:
- The message you type, plus relevant context from your own data (such as mood, goals or habits) so the reply is specific to you
- Images you choose to send for AI analysis
That goes from this device straight to the AI provider you connected, under your own account with them. GraceOS runs no AI service of its own, so it never passes through us. With no provider connected, nothing is sent at all.
Before your message leaves the device, email addresses, phone numbers, card numbers and street addresses found in it are swapped for stand-in labels, and the real values are put back in the reply you see — so the AI provider does not receive them.
Your profile name is included in the context sent with a request, so that Grace can address you by it.
Advertising (free plan only):
- The free plan shows ads: a full-screen ad when you open a module from Explore, and optional rewarded ads in the games that you choose to watch in exchange for a hint or another attempt.
- These are served by Google AdMob. To request an ad, the Google Mobile Ads SDK on your device sends Google your device's advertising ID, IP address, and general device and app information. Google may use these to select ads, measure performance and limit how often you see the same ad.
- Because an IP address indicates roughly where a device is, ad requests carry an approximate location even though GraceOS never asks for or reads your device's location.
- None of your GraceOS content is sent with an ad request. Your journal, mood, finances, health data, notes, vault and AI conversations are never used to target ads and are never shared with Google for advertising.
- Ads are switched off entirely on the paid plan. Buying Pro is the way to stop all of the above.
- You can reset or delete your advertising ID at any time in Android Settings > Privacy > Ads, which is outside this app and applies to every app on the device.
We do NOT collect:
- Your device's location. GraceOS requests no location permission and reads no GPS. Ad requests do carry an IP address, as described above
- Contact lists
- Call logs or SMS
- Data from other apps
- Anything in your Secrets Vault — it is never included in an AI request, and never in an ad request
- Your AI provider key, which stays in encrypted storage on this device
3. Health Data & Medical Disclaimer
Health features are optional. What you log — vitals, sleep, water, workouts, steps, weight, meals, medications and menstrual cycle dates — is stored in the app database on your own device, on the same terms as everything else in this policy. It is not uploaded to us, and we run no health server.
Two things can put health data elsewhere, and you choose both:
- Exporting. A CSV or PDF you generate is written where you send it, and what happens to that file afterwards is outside the App
- The AI food scanner. A photo of a meal goes to the AI provider you connected, under your own account with them and subject to their privacy policy. With no provider connected, no photo is sent anywhere
GraceOS is not a medical device and does not provide medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for medical advice, diagnosis, or treatment, and never delay seeking it because of anything shown in this app. Vitals, health scores, trends, calorie estimates and cycle predictions all derive from the data you entered and from phone sensors, and none of it is clinically validated. Section 3 of the Terms & Conditions sets this out per feature.
4. How We Use Your Data
- Your personal entries stay on your device and power your dashboard, analytics, and insights
- If you connect your own AI provider key, requests go directly from this device to that provider. They do not pass through our servers, and we never see your key
- With no provider connected, Grace answers from text written on the device and nothing is sent anywhere
- Email addresses, phone numbers, card numbers and street addresses in your message are swapped for stand-in labels before it leaves the device, and restored in the reply you see. Your profile name is sent, so Grace can address you by it
- We do not sell, share, or monetize your personal data
- Anonymized usage analytics (crash reports, feature usage counts) may be collected to improve the app
5. Data Storage & Security
- All personal data is stored locally in an encrypted SQLite database on your device
- App Lock and the Secrets Vault use your device authentication (fingerprint, face, or screen lock)
- Vault entries require device authentication to access
- Your AI provider key is held in the operating system's encrypted key store, separately from ordinary app settings, and is only ever sent to the provider it belongs to
- All AI requests use HTTPS encryption in transit
- A request carries your key and your message. It does not carry any device or installation identifier, so the provider cannot tie it to this phone
6. Third-Party Services
We use three third-party services:
- Google Play Billing — processes subscriptions and purchases
- Google AdMob — serves the ads shown on the free plan, as described in section 2. AdMob receives your advertising ID, IP address and device information, and is governed by Google's privacy policy. It receives none of your GraceOS content. Not used at all on the paid plan.
- RevenueCat — checks whether your subscription is valid, so the app knows which plan you are on. It receives purchase receipts from Google Play, and a record of ads shown so ad revenue can be reported. It identifies your install by an anonymous ID that its own software generates — we do not send it your name, email or any account of ours, because GraceOS has no accounts. It receives none of your GraceOS content.
The AI provider you connect is a service YOU chose and hold an account with — not one we engage on your behalf. We do not receive, proxy or log those requests, and their privacy policy governs what happens to them. It is worth reading before connecting a key, particularly on a free tier, where some providers reserve the right to train on submitted data.
7. Data Retention & Deletion
- Your personal data stays on your device until you delete the app or clear app data
- A full JSON backup of everything is available from Settings > Export & Import on any plan — free after a short ad, with no ad on Pro
- Health data exports free on every plan, as CSV or PDF, from the Health screen
- Spreadsheet, PDF and plain-text exports of the other modules, and restoring from a backup, are Pro features
- Uninstalling the app permanently deletes all data stored on your device, including any AI provider key you saved
- We hold nothing to delete. There are no accounts and no servers of ours, so there is no copy of your data anywhere but this device
- Requests you send with your own provider key are retained according to that provider's policy. Deleting this app does not delete anything they may already hold — to remove that, use the controls in your account with them
8. Children's Privacy
GraceOS is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us for deletion.
9. Your Rights
- Access: Everything you record is stored on this device and readable in the app. A full JSON backup is available from Settings > Export & Import on any plan — free after a short ad, with no ad on Pro
- Deletion: Uninstall the app or clear data to remove everything
- Portability: A full JSON backup of every module, free on any plan after a short ad. Health data exports free with no ad. Spreadsheet, PDF and plain-text exports of the other modules are a Pro convenience and contain nothing the backup does not
- Control: Your entries stay on your device. Nothing is sent anywhere unless you actively use an AI feature
- Choice: You decide which AI answers you. Connect your own provider key and requests go straight from this device to them, never through us
10. AI-Generated Content
Certain content within the GraceOS AI Academy — including course lesson text, chapter infographics, and course icon images — was created in part using AI tools (AI language models and AI image generation tools). This content has been reviewed by the developer before inclusion in the app.
- AI-generated images and infographics are used solely for educational illustration purposes
- No personally identifiable data belonging to users was used to generate this content
- The app displays a disclosure notice within the Academy acknowledging AI-assisted content creation
- AI-generated text content does not constitute professional medical, legal, financial, or psychological advice
11. Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected in the app and on our website with an updated date.
12. Governing Law
This privacy policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Davanagere, Karnataka, India.
13. Contact Us
If you have questions about this privacy policy, contact us at:
Developer: Cholaraja R P
Email: team@graceosapp.me