Privacy policy

This policy covers this website and the GripFit app. They collect different information, so each section below says which one it applies to.

On this website

If you enter your email address to receive a Super Early Bird discount code or campaign updates, we store that address together with the code we issued you, the discount percentage, the date you signed up, the random visitor identifier described below, the Kickstarter price you were shown, and the campaign link (if any) that brought you to the site.

If you use the contact form, we collect your name, email address, and your message.

Like any website, our hosting provider processes the requests your browser makes, including your IP address, in its server logs. We also use your IP address briefly to limit how often our forms can be submitted, which protects them from abuse.

Cookies and price testing

Ahead of the Kickstarter campaign we test which pledge price to launch at. When you first visit, our server generates a random visitor identifier and assigns you a Kickstarter price from a fixed range. Both are stored in a first-party cookie named gf_exp (expires after 180 days) so that you see the same price on every visit. The identifier is random and is not derived from your name, email, device, or IP address. The Kickstarter price shown here is for research; the price that applies is the one published on Kickstarter when the campaign opens.

If you arrive from an advert or a campaign link, we store the campaign, ad set, ad, and UTM parameters from that link in a second first-party cookie, gf_attr (180 days), so we can tell which campaigns lead to signups.

We use the Meta Pixel and Meta's Conversions API to measure how our adverts perform. The Pixel sets Meta's own cookies (_fbp, _fbc) and reports page views and signups to Meta together with the assigned price. When you sign up we also send Meta a one-way hash of your email address so it can match the signup to its advert without receiving your email address in readable form. We never send your email address, name, or message to Meta as plain text. You can opt out of Meta's use of this data in your Meta ad settings, and block the Pixel with a content blocker; the site works fully without it.

A few preferences, such as whether you have dismissed the discount pop-up or the cookie notice, are kept in your browser's local storage on your own device and are never sent to us.

In the GripFit app

GripFit collects grip strength measurement data, device connection information, and basic account details (email, display name) to provide and improve our services. You may optionally share your age and gender. We also collect usage events generated as you use the app, including app opens, session length, recording timestamps, and which hand you used; you can turn this off at any time with the Share Data switch in Settings. We collect data you provide directly when creating an account and data generated automatically through your use of the app, including grip force readings, session timestamps, and device identifiers.

If the app crashes, a crash report is sent to us so we can fix the problem. It contains technical details about the crash and your device (model, operating system version, app version) together with your account identifier, and no other personal information. If you choose to send us feedback from Settings, we receive your message, its category, and your device model and operating system version so we can reproduce the issue. If you subscribe to GripFit Pro, we store the status of your subscription (plan, expiry, renewal) alongside your account; payment details are handled entirely by Apple and never reach us.

Email addresses submitted on this website are used to send you your discount code and occasional updates about the Kickstarter campaign. Every message includes an unsubscribe link. Contact form submissions are used to reply to you. Visitor identifiers, assigned prices, and campaign parameters are used only in aggregate to understand demand at different prices and which adverts work.

App data is used to display your grip strength history, track progress over time, and sync your recordings across devices. Optional age and gender, together with usage events, help us understand retention and how people use GripFit. Aggregated, anonymized data may be used to improve the app experience and develop new features.

We do not sell your personal data to third parties.

Email addresses and contact form messages submitted on this website are delivered through Brevo, our email provider, and stored in our own database on Google Firebase (Cloud Firestore) alongside the visitor identifier, assigned price, and campaign parameters. The website itself is hosted by Vercel.

App data is stored using Google Firebase infrastructure with encryption in transit and at rest. Authentication is handled through Firebase Authentication.

We implement industry-standard security measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Email addresses and messages submitted on this website are kept for as long as they are needed for the Kickstarter campaign or to answer your enquiry. Price-test records are deleted or anonymised within 12 months of the campaign closing. You can ask us to delete your data at any time by emailing avdevdesk@gmail.com.

You may delete your app account and associated data at any time from Settings. Account deletion removes your profile, every recording, your usage analytics, and your subscription history from our servers immediately. Crash reports and feedback you have already sent are retained for up to 90 days for diagnostics and are not linked back to a deleted account.

This website uses Brevo to store contacts and send email, and Vercel for hosting, Google Firebase for our database, and Meta for advert measurement (Pixel and Conversions API). Pledges are placed through Kickstarter; if you back the campaign, Kickstarter collects your pledge and payment details under its own privacy policy.

The GripFit app uses Google Firebase for authentication, data storage, and crash reporting (Firebase Crashlytics). You may sign in with an email address and password, with Google Sign-In, or with Sign in with Apple. Subscriptions are processed by Apple through the App Store.

These services have their own privacy policies that govern their handling of your data. Beyond the Meta measurement described above, GripFit does not use advertising networks and does not track you across other companies' apps or websites. The GripFit app contains no advertising trackers.

GripFit is not directed to children under 13. We may update this policy from time to time; the date at the bottom of this page shows when it was last revised.

If you have questions about this privacy policy, please contact us at avdevdesk@gmail.com.