Privacy Policy

Grape is built with privacy in mind. Your notes are stored locally on your device by default. We do not collect, process, or sell your personal data.

When you create an account for the Sync, Plus, Pro or Lifetime plans, we collect your email address and payment information (processed securely by our payment provider). On the Plus and Pro plans we also record usage metadata for every Grape AI request: which feature was used, which model answered it, how many tokens it consumed and when. We use that to pay our AI providers, to enforce the limits in our Terms and to catch abuse. It records that a request happened, never what the request said. If you allow notifications in the phone app, we also store the notification token your phone gives us, with the language and version of the app, so we can tell you when an AI job you started has finished. While such a job runs, we keep a record of which phone to tell, deleted once it has been told or within 48 hours. The token is used for nothing else, and it is deleted when you sign out, switch off AI tool notifications in the app or delete your account, or when Apple or Google report that it no longer works. We do not collect product analytics and we do not access the content of your notes.

By default, all your notes, drawings, flashcards, quizzes, mind maps, and attachments are stored locally in a SQLite database on your device. We have no access to this data.

If you enable cross-device sync on the Sync, Plus or Pro plan, your data is stored securely in the cloud. We do not read, process, or analyze your synced data in any way. It exists solely to provide the sync service and is never shared with third parties. On the Lifetime plan, sync runs through your own Dropbox or Google Drive account instead. Your devices send your notes and files straight to a folder Grape keeps there, the folder Dropbox sets aside for Grape in your Dropbox or the Grape Notes folder Grape makes in your Google Drive, and read them back from there, so that data never passes through our servers and we never receive it. The key that connects Grape to your Dropbox or Google Drive stays on your device and never reaches us either. What is stored there is handled under Dropbox's or Google's own terms and privacy policy, and deleting your Grape account does not remove it.

If you connect Google Drive on the Lifetime plan, Grape asks Google only for access to the files Grape itself creates in your Google Drive, and reads your Google account's name, email address and storage use to show them in Cloud Sync. Grape uses that access for one thing, keeping your own notes in step between your devices. The files, the name, the email address and the storage figure travel only between your devices and Google: they are never sent to our servers or to anyone else, never used for advertising, and never read by a person. Grape's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Grape's access at any time in your Google account settings.

On the Pro plan you can connect an AI app such as ChatGPT or Claude to your account through our MCP server. A connection exists only after you approve it on our consent page, and it lets that app list, read, create, edit and delete the notes and folders in your account on your behalf. The notes it asks for are sent to that app and handled under its own privacy policy. We store the connection tokens so the app can keep working and record when each connection was last used. You can end a connection from the AI app at any time, and a connection that goes unused for 90 days expires on its own. We do not read what passes through a connection.

When you use AI features, your input is sent to third-party AI providers (OpenAI, Anthropic, Google, Groq, xAI, DeepSeek or OpenRouter, depending on the model handling the request) for processing. We do not store or log AI conversations on our servers, and your content is never used to train models. If you use your own API keys, data is sent directly to the provider under their privacy policy.

We use trusted third-party services for payments, AI processing and notifications. Notifications to the phone app are delivered through Apple Push Notification service on iPhone and Firebase Cloud Messaging on Android, which receive the notification token and a short line saying which job finished, never the content of your notes. These services have their own privacy policies and are bound by data processing agreements.

You can delete your account and everything we hold for it at any time, either from Settings, then Data, then Delete Account inside the app, or from the account deletion page on this site, which does not require installing the app. Deletion removes your account, your synced notes and files, and your settings, and it cancels any active subscription. It cannot be undone.

We keep your account data for as long as your account exists. When you delete your account, your data is removed from our live systems immediately and rolls out of our encrypted database backups within 30 days. Billing records held by Apple, Google and Stripe are retained by those companies for as long as tax and accounting law requires. Support emails are kept for up to 24 months so we can follow up on an earlier conversation. Notes you never synced live only on your device and are removed when you delete the app.

Grape is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete the account and its data. Because Grape sends note content to third-party AI providers, we recommend it for users aged 13 and over, and in the EU and UK for users old enough to consent to data processing under local law.

Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to or restrict its processing. You can export your notes from inside the app on any paid plan, the local database stays on your device on every plan, and you can delete everything from the account deletion page. For anything else, contact us and we will respond within 30 days.

We may update this privacy policy from time to time. We will notify users of significant changes through the app or website. Continued use of Grape after changes constitutes acceptance.

If you have questions about this privacy policy, please contact us.