grapevinee
Nurture your network.
Privacy Policy
Last updated September 21, 2026 · Draft pending legal review
Grapevinee helps you remember and nurture your relationships. That means you trust us with information about you and about the people you know. This policy explains what we collect, why, who can see it, and the choices you have. The short version: your notes and relationships are private to you, we never sell personal information, and you can export or delete your data at any time.
1. Who we are
Grapevinee (“we”, “us”) is the controller of the personal information described here. Contact: privacy@grapevinee.app.
2. What we collect
- Account information: your name, email address and a securely hashed password.
- Information you add about people: names, contact details, where you met, notes, promises (commitments), clusters and the history of your interactions. This is stored privately for you.
- Voice notes and card photos you choose to capture: processed to fill in contact details. Recordings and photos are processed in memory and are not stored after the details are extracted.
- Technical information: device and browser type, IP address and security logs, used to keep the service secure and working.
3. How we use it
- To provide Grapevinee: show your vine, remind you who needs attention, and keep your relationship history (performance of our contract with you).
- To keep your account secure and prevent abuse (legitimate interests).
- To improve the service using aggregated, de-identified usage information (legitimate interests).
We do not sell or “share” personal information for cross-context behavioral advertising, and we do not use your content to train AI models.
4. Information about people who are not Grapevinee users
When you add someone, their details are visible only to you. We never contact them on your behalf without your action, and we never merge your contacts with anyone else’s. Contact details used to recognize people who later join are compared using one-way hashes. If you believe your information was added by a user and want it removed, contact privacy@grapevinee.app.
5. AI processing
When you use voice or card capture, the content is sent to Google Cloud Vertex AI to extract details, under terms that prohibit using it to train models. Suggestions from AI are always shown to you for review; nothing is saved until you confirm.
6. Who we share with
- Service providers that host and operate Grapevinee for us (Google Cloud for hosting, database and AI), bound by data-processing agreements.
- Legal requirements: if required by law, and only to the extent required.
Other Grapevinee users cannot see your notes, your relationship strength ratings, or your contact list.
7. Retention
We keep your data while your account is active. When you delete your account, we delete your data from our live systems within 30 days and from backups within 35 days after that.
8. Security
Data is encrypted in transit and at rest. Passwords are hashed with Argon2id. Sessions use short-lived tokens with automatic theft detection. Access to production systems is restricted and logged.
9. Your rights
Depending on where you live (including the EU/UK under the GDPR, California under the CCPA/CPRA, India under the DPDP Act, and the UAE under the PDPL), you can:
- access and receive a copy of your data (export);
- correct inaccurate data;
- delete your account and data;
- object to or restrict certain processing, and withdraw consent;
- not be discriminated against for exercising these rights.
To exercise these rights, use the in-app settings or email privacy@grapevinee.app. We respond within 30 days (or as required by local law). You may also complain to your local data protection authority.
10. Grievance officer (India)
Grievances under the Digital Personal Data Protection Act may be sent to our grievance officer at grievance@grapevinee.app.
11. International transfers
We host data in the United States. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
12. Children
Grapevinee is for people aged 18 and over. We do not knowingly collect information from children.
13. Changes
We will notify you in the app before material changes take effect.