Join the app waitlist

Privacy policy

1. Who is responsible for your information

Grano Inc is the controller of the personal information described here. Our address is 1111B S Governors Ave STE 26095, Dover, DE 19904, United States. For privacy requests, support or moderation, email support@granoapp.io.

2. Information you provide

Account and profile: your email address, account identifier, display name and handle, plus a profile photo, biography or city if you add them. Email-and-password authentication is handled through Firebase Authentication. If you choose Apple or Google sign-in, we receive the identifiers and profile information that provider makes available, which may include a private relay email address.

Your Passport and lists: the cafés you save or record visiting, visit dates, ratings, notes, uploaded photos where supported, list names and notes, and passport progress. Account content is stored in our cloud services to provide the app across sessions and devices; it is not stored only on your phone.

Messages and contributions: we collect the contact details and information you submit in café nominations, corrections, reports, curator applications and correspondence. Nominations include café details, your relationship to the café and your reason for recommending it. Website curator applications include your name, email and city, one to three café recommendations with a reason for each, and an optional introduction. In-app curator applications continue to require three café recommendations and an introduction. Framer processes website forms and delivers submissions to our team; we use Firebase review queues and team email to manage operational intake. Contact messages are handled as email correspondence. These submissions do not subscribe you to marketing. Do not include sensitive personal information or unnecessary personal details about others.

Waitlist and email subscriptions: when you sign up, we send your email address, selected email language and, if provided, first name and city interest to Loops, together with the form source and the lists you choose. The waitlist is for availability and launch updates. Joining this waitlist does not subscribe you to a guide or other editorial emails. Any additional email subscription requires a separate choice. You can unsubscribe or manage list preferences through the links in our marketing emails. To correct your email language or other subscription details, contact support@granoapp.io. Opening a form or email link alone does not send a submission or subscribe you.

3. Location, voice search and photos

Location is optional. With your device permission, Grano uses your location while you use the app to position the map and show distances to cafés. Device settings determine the precision available. You can browse by city and search without granting location access. Grano does not use this feature to build a stored history of your movements.

Voice search is optional and uses Apple’s speech recognition services after you allow microphone and speech access. Audio is used to transcribe your query; depending on the device and service availability, Apple may process it on its servers. Grano does not save voice recordings to your account. You can type instead and change permissions in iOS Settings.

Photos you choose to upload are stored to provide the feature you selected. Using the photo picker does not give Grano unrestricted access to your photo library. Your device permissions can be changed in iOS Settings.

3a. Optional city arrivals

City arrivals is a separate choice, off by default. If you enable it in Grano Settings and grant location and notification permissions, your iPhone can show an in-app greeting or a local notification when you enter a city we cover. iOS can deliver the notification while Grano is closed. Grano requests location access while using the app, not Always access; iOS handles the notification’s location trigger.

Arrival checks run on your device. This feature does not send your coordinates, detected city or arrival events to Grano’s servers or analytics, create a Passport visit, or share your arrival with other members or cafés. It uses local notifications, not server-sent push messages, and creates no push token. Apple’s Location Services and notification settings also apply; this statement does not describe all processing by Apple or other services you choose to use.

Your device stores the choice, the last greeted city, recent greeting times and notification scheduling information to avoid repeated messages. These records are separate from your account and are not synced by Grano. Old per-city greeting times are pruned when the feature next runs after 90 days; other local preferences can remain until app data is removed. Turning the feature off stops future use for city arrivals but does not erase all local preferences or your Passport.

We rely on your consent for this optional purpose where data-protection law applies. Accepting the Terms, allowing map location, or joining the email waitlist does not turn it on. Turn City arrivals off in Grano Settings on this device to stop both in-app greetings and future arrival notifications and remove outstanding arrival notifications. You can also change location and notification permissions in iOS Settings. Withdrawal does not affect earlier lawful processing. You can continue browsing and choosing a city manually. Notifications may be delayed or unavailable, and their city name may be visible on the lock screen according to your iOS preview settings.

4. What is private and what can be shared

Your recorded visits are personal and are not visible to other members. Your profile and taste information are also private. With your separate, optional permission, authorized Grano team members may read eligible visit notes for the café-insights purpose described below. Private means access is restricted; it does not mean end-to-end encryption or that our service providers cannot process the data needed to operate Grano.

Circle and public taste matching are not available. This policy does not opt you into a future social feature.

Lists start private. If you choose to share one, its approved content can be opened by anyone who has the link, including people without a Grano account. Shared lists are not limited to named recipients. Turning sharing off restricts subsequent access through the service but cannot recall screenshots or copies someone already kept.

4a. Optional café insights

You can choose whether Grano’s authorized team may read your visit notes to identify café trends, such as drinks people recommend, and inform our café guidance. This is human editorial research, separate from shared-content safety screening, product analytics and marketing subscriptions. We rely on your consent for this optional use. Accepting the Terms or this Policy does not enable it.

The choice is off by default and available to adults aged 18 or older. In the app, open Settings and choose Café insights. Before enabling it, we show: “Allow Grano’s authorized team to read your visit notes and identify café trends, such as drinks people recommend. Your notes will not be published. You can turn this off at any time.” Declining does not affect access to Grano.

Permission applies only to notes on new visits first saved to Grano after you enable the choice, while permission remains active. Earlier visits are excluded, including when you later edit their notes. The authorized research view contains the café reference and note text, not your profile, email, photos or other account history. Note text itself can identify you or someone else; do not include sensitive information or other people’s personal details in participating notes.

We do not publish your notes, quotes from them or attributable summaries under this permission. We may use combined, genuinely anonymous café trends to inform our guidance. Removing a name alone does not make a note or trend anonymous. This permission does not authorize AI training or sending private notes to an external text-analysis service.

Turn Café insights off in Settings to stop future access for this purpose once the change is saved. Your choice applies across your account’s devices. If the app cannot confirm the change, reconnect and retry or contact support@granoapp.io. Withdrawal does not delete your notes or affect the lawfulness of earlier processing. Trends already made genuinely anonymous may remain. If you enable the choice again, only visits newly saved after that later permission become eligible; earlier notes do not become available again.

We record your choice, its wording version, scope, confirmation that you are 18 or older, and the time of each change. We also keep restricted records of research access, including the reviewer, content reference, research reference, consent version through its recorded revision, and time. Those audit records do not copy your note text. Access is limited to specifically authorized team members and checked against your current permission.

5. Screening, reports and safety

Shared lists and list notes are screened before becoming visible to others. We use Google Cloud Natural Language to assess shared text for potentially harmful content. Private visits and private lists are excluded from this automated screening.

Flagged submissions and screening failures go to human review. Moderators may access the relevant reported or shared content, account references and decision history. Screening records include content references, status, reasons and timestamps. Automated screening can be wrong; you can ask for human reconsideration at support@granoapp.io.

Report content using the report action where available or email support@granoapp.io with the relevant link or details. We aim to review reports within 24 hours. This is a response target, not an emergency service or a guarantee that every case will be resolved within that time.

6. Technical information and service providers

Our services and providers process technical information such as IP addresses, device and operating-system details, app version, installation identifiers, usage events and diagnostic records. Optional app usage analytics is off by default. If a signed-in member enables “Share optional usage analytics” in Settings, Grano may count café and guide views, direction taps, visits, list actions and Passport completions through its own service. These usage events are linked to that member’s account. This setting does not collect note text, searches, contact details or precise location. Firebase Crashlytics separately helps diagnose crashes and errors. Installation identifiers are not the same as anonymous data, even when we do not attach your account name.

Google Firebase and Google Cloud provide authentication, databases, file storage, hosting, security checks, service configuration, diagnostics and shared-content screening, and store the optional app usage data described above. Google Maps provides maps and café information. Apple provides sign-in and speech services when you choose them. Framer hosts the marketing website and processes its native forms. Loops (Astrodon Corporation, United States) stores email subscriptions and sends our confirmation and launch emails. Google Workspace/Gmail handles team correspondence and operational alerts. Providers receive the information necessary for their services and may also process service or device data under their own applicable terms.

The website uses Google Maps for city and café search. When you use this search, your typed queries and the technical information needed to process them are sent to Google before you submit an application. Selecting a result retrieves current place details. You can enter your city and cafés manually instead. Google’s Privacy Policy applies to its processing.

Provider information: Google Privacy Policy (https://policies.google.com/privacy), Firebase privacy and security (https://firebase.google.com/support/privacy), Apple Privacy Policy (https://www.apple.com/legal/privacy/), and Framer Privacy Statement (https://www.framer.com/legal/privacy-statement/). Loops Privacy Policy

Grano does not sell personal information or share it for cross-context behavioral advertising. Optional app usage measurement uses Grano’s own service rather than Firebase Analytics. Security incidents. We protect your information with access controls and the security measures of our service providers. If a security incident affects your personal information, we will investigate it, act to limit the harm, and notify the relevant data-protection authority and you when the law requires.

7. Why we process information

We process account information and the content you save to provide the service you request: account access, saved lists, visit history, passport progress and sharing. We also process messages to respond to requests and assess nominations or curator introductions.

Where European data-protection law applies, our legal bases are performance of our agreement with you for the requested account features; legitimate interests in keeping the service secure, preventing abuse, managing editorial submissions and responding to support requests; compliance with legal obligations; and consent where required for optional processing. We weigh those interests against your rights. Device permission alone is not consent to unrelated processing.

Optional app usage analytics helps us understand and improve Grano through combined usage counts. It is separate from the information needed to provide your account, café-insights research and promotional communications. It requires a separate opt-in, stays off by default and does not affect access to the app. You can turn it on or off in Settings → Share optional usage analytics. Where consent is legally required for promotional communications, we obtain it before that processing. You may withdraw consent or object to processing by contacting support@granoapp.io. Withdrawing consent does not affect processing already lawfully performed. An early-access request is not permission for unrelated marketing.

Café-insights research uses the separate consent described in section 4a. It is not a condition of your account, and a general service-improvement or security purpose does not substitute for this permission.

8. Website storage and external links

The marketing website uses Framer’s built-in, cookie-free traffic analytics to understand page visits. The website and shared-list viewer also process connection data to deliver pages, secure the service and display requested content. Browser storage may be used for necessary service functions. If we introduce optional cookies or other tracking, we will explain them at the point of use and obtain consent where required. Browser settings let you manage stored website data, although blocking necessary storage can affect functionality.

The curator application can save a draft in this browser for up to 7 days after its last update. It contains your name, email, the text you enter and selected Google place IDs. Returned Google names, addresses and coordinates are not saved in the draft. The draft is cleared after successful submission; an expired draft is removed the next time it is checked. You can also remove it through your browser’s website-data settings. If browser storage is unavailable, you can still complete the form.

Our marketing emails use Loops to measure email opens and link clicks associated with your subscription, helping us understand which messages are useful. These measurements can be affected by email privacy features and automated security checks. Loops also processes delivery, bounce and unsubscribe information to operate email sending and respect your preferences. You can unsubscribe using the link in an email or contact us about this processing.

Opening a café website, directions provider or other external link takes you to a separate service with its own privacy practices. Sharing a link through another application also involves that application’s handling of the information.

9. Retention and account deletion

We keep account content while needed to provide your account, unless you delete it sooner. We retain email subscription details to deliver the lists you request and manage your preferences. For unconfirmed signups, we consider whether confirmation is still reasonably expected; for correspondence and applications, whether review, follow-up or an active engagement remains open. Nomination records may retain useful café facts after review. Personal contact details are retained only while needed for follow-up, security, disputes or legal obligations. We may keep limited unsubscribe or suppression records to respect your choice not to receive further marketing. We do not promise an automatic fixed deletion period for every record.

You can request account deletion in the app’s Settings. We may ask you to sign in again to protect your account. Once authentication deletion succeeds, backend cleanup removes owned profiles, visits, lists and items, handles, associated user records and uploaded account files. Cleanup can take time and is retried if it fails; signing out or uninstalling the app does not delete your account.

When an app account is deleted, operational nominations, reports and curator applications may retain editorial content after structured account references and applicable contact fields are removed or replaced. Website submissions are treated as guest correspondence; matching an email address does not automatically link them to an app account. Submission text, legacy record identifiers and previously sent emails can still contain personal information. Account deletion therefore does not establish complete anonymization or automatically erase independent website correspondence or your Loops subscription. Contact us about those records or use the unsubscribe link for email subscriptions. A restricted deletion record retains the account identifier and cleanup status to track completion and prevent stale credentials recreating data.

Provider logs, backups, diagnostic records and email copies may follow separate retention cycles or legal obligations. Account deletion does not immediately remove every copy from provider systems or backups. Ask support@granoapp.io for help with a specific record or deletion request.

For optional app usage analytics, account-linked daily usage counters are scheduled to expire 35 days after the day measured, and records of recent account activity 35 days after the last measured activity. Aggregate daily counts are scheduled for deletion 90 days after the day measured; aggregate weekly counts, 90 days after the reporting week ends. Scheduled cleanup may take additional time. These periods do not govern Crashlytics diagnostics or the website analytics described in section 8.

Confirming withdrawal stops new usage collection for your account and deletes its current account-linked usage counters. Older expired usage counters are removed by scheduled cleanup. We keep your analytics consent-choice history while your account exists to respect and demonstrate your choice; account-deletion cleanup removes that history. Aggregate counts already produced cannot be undone.

For café insights, the original notes remain part of your visit history until you delete them or your account. Withdrawing research permission stops new research access; it does not itself erase the notes. We keep the consent-change history and research-access records while your account exists to honor and demonstrate your choice; account-deletion cleanup removes these account-linked records. The research access feature does not create a separate copy of note text. Genuinely anonymous combined trends are not linked to your account and may remain.

10. International processing

Grano is based in the United States, and our providers may process information there and in other countries. Those countries may have different data-protection laws. Transfers subject to European law require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses where relevant. Use of Grano alone is not consent to an otherwise unlawful transfer. Contact support@granoapp.io for information about the arrangements applicable to your data and how to obtain a copy of relevant safeguards.

11. Your choices and rights

You can browse public café information without an account, edit supported profile fields, manage your lists and sharing, change device permissions and request account deletion. To request a copy of your data or exercise another privacy right, email support@granoapp.io. We may need proportionate information to verify your identity; do not send identity documents unless we request them securely.

Depending on the law that applies, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent and complain to a data-protection authority. In the EEA, you may complain to the authority where you live or work or where an alleged infringement occurred; in Spain this is the AEPD. Mexican users may request access, rectification, cancellation and opposition (ARCO), and seek to revoke consent or limit use or disclosure where applicable. California residents may have rights to know, correct and delete information and to opt out of sale or sharing where that law applies. We do not discriminate against you for exercising an applicable privacy right.

Tell us the right you want to exercise and the information concerned. We will respond within the time required by the applicable law and explain any permitted limitation or extension.

You can enable or withdraw optional café-insights permission in Settings → Café insights. You can also contact support@granoapp.io for help with that choice.

You can manage the separate optional app usage analytics choice in Settings → Share optional usage analytics. If the app cannot confirm withdrawal, collection stops on that device while you reconnect and retry or contact support@granoapp.io; the account-wide withdrawal takes effect once Grano confirms it.

12. Children

Grano is not directed to children under 14. You must also meet any higher minimum age that applies to your use or have any legally required parental authorization. We do not knowingly collect personal information from children under 14. If you believe a child has provided information, contact support@granoapp.io so we can investigate and take appropriate action.

The optional café-insights research feature is restricted to people aged 18 or older. This does not change the minimum age for other Grano features.

13. Changes and contact

We will update this policy as our practices change and provide notice of material changes through an appropriate channel. Where a change requires consent, publishing a new policy does not replace obtaining that consent. The effective date at the top identifies this version.

Privacy, support and moderation: support@granoapp.io. Grano Inc, 1111B S Governors Ave STE 26095, Dover, DE 19904, United States.