Legal Information

Welcome to Gror. In this policy, 'we', 'us', and 'our' refer to Gror ApS, the provider of this app. We are deeply committed to your privacy and want to be upfront right from the start: we never sell your data, and we use secure, industry-standard infrastructure to keep it protected. This policy outlines exactly how we collect, use, and safeguard your information. By using our app, you agree to these practices. We've written this to be as clear and transparent as possible, in line with strict regulations like the GDPR.

What Data We Collect

To provide and improve our service, we collect the following information:

• Account Information: Your email address. We do not store passwords. Authentication is handled securely through magic links sent to your email or via your Google Account.
• Profile Information: Your anonymous username, the answers to your profile questions, selected tags, spoken languages, and your selected location (country and municipality).
• Connection Data: Information about the connection requests you send and receive, and the status of those connections.
• Chat Data: The content of messages you send and receive in your chats.
• Usage Data: We automatically collect technical information such as your IP address, browser type, device information, and timestamps of your logins and key activities.

Why We Use Your Data

We use your data for specific purposes:

• To Operate the Service: Your profile information is used to facilitate connections with other users. Your email is used for authentication and account management.
• To Suggest Connections: To enhance your experience, our service uses your profile information to power an algorithm that suggests other users you might find interesting. This matching process is based on shared tags, location proximity, profile answers, recent user activity, and profile creation date.
• To Provide Chat: To enable one-to-one conversations, we use user and connection data to correctly route messages between you and your connected users.
• To Ensure Community Safety and Investigate Reports: We do not actively monitor private conversations. However, if a user is reported for violating our guidelines (e.g., harassment, abuse), we may access the chat history between the involved users to investigate the claim and take appropriate action, including banning the user. This is critical for maintaining a safe and respectful platform.
• For Transparency and User Experience: To help you make meaningful connections, we display an indicator of when a user was last active. This lets you know if a user is engaged with the app before you decide to spend a token on a connection request, and it helps you direct your attention on frequently visiting users.
• To Keep the App Safe and Reliable: We use technical data (like IP addresses and login times) to guard against spam, abuse, and other security risks. This data also help us fix technical problems so the app runs smoothly for everyone.
• To Improve the App: We might analyze aggregated and anonymized data to understand how our service is used and how to make it better.

Data Processing & Third Parties

We do not sell your data. We use trusted third-party services to operate our app. These services are our 'data sub-processors' and have their own strict privacy policies. They include:

• Google Firebase: Used for database hosting (Firestore), authentication, and cloud functions. Your data is stored and processed on servers located within the European Economic Area (EEA) to comply with GDPR standards.
• Typesense: Used to provide fast and relevant search results for user profiles. Your profile data is indexed in Typesense.
• Stripe: Used to process payments for tokens. We do not store your credit card details; they are handled directly and securely by Stripe.

Data Retention & Deletion

We retain your data as long as your account is active. If you choose to delete your account, we will permanently delete your personal data from our primary databases and search indexes through our automated deletion process. To prevent spam and abuse of the platform, your email address will be kept in a separate, isolated list for a cooldown period of 3 months, after which it is also permanently deleted. During this period, the email cannot be used to create a new account.

Your Rights Over Your Data

Under laws like GDPR, you have rights over your data.

• Right to Access & Correct: You can review and edit most of your profile information directly on the 'Profile' page.
• Right to Deletion ('Right to be Forgotten'): You can permanently delete your account and all associated data at any time. To do this, go to the 'Other' menu, select 'Delete your account', and follow the instructions. This action is irreversible.
• Right to Object: You have the right to object to our processing of your data, though this may require you to stop using the service.
• Right to Data Portability: You have the right to request an export of your personal data in a structured, machine-readable format (like JSON). We have made it possible for you to download all the data we have about you. To do so, click here.

Cookies & Browser Storage

Our app is a Progressive Web App (PWA) and uses browser storage (like Local Storage) and cookies to function. This is for essential purposes, such as keeping you logged in and maintaining your session. We do not use third-party tracking or advertising cookies. By using our app, you consent to the use of this essential storage.

Anonymity and Its Limits

While we designed the app around anonymity, it is not absolute. Your username is anonymous to other users, but your account is linked to your email address in our secure database. We will not share this link publicly, but we must clarify that we may be legally required to disclose data to law enforcement if presented with a valid warrant or court order.