Privacy Policy
This Privacy Policy (“Policy”) explains how Incubator Labs LLC, a limited liability company doing business as GripCue, organized under the laws of the Commonwealth of Virginia (“GripCue,” “we,” “us,” or “our”) collects, uses, and shares information when you use the GripCue mobile application (the “Service”). This Policy is written for users located in the United States. By using the Service, you agree to the practices described here. If you do not agree to the practices described in this Privacy Policy, please do not access or use the Service.
1. Information We Collect
Information you provide directly: account information such as your first name, last name, email address, age range, interests, and, optionally, your profession, when you sign up, including through Google sign-in; any material you upload, submit, or otherwise provide to the Service, including but not limited to documents, images, text, links, and messages you send to other users ("Your Content"); and any information you provide when contacting support.
Information generated through your use of the Service: your quiz responses and performance, review history, streaks, badges, and other usage and progress data; your subscription and plan status, though payment card details are handled directly by Google, not by us; and device and push-notification identifiers needed to deliver notifications you have enabled.
Information collected automatically: technical and usage data related to your interaction with the Service, including device type, mobile operating system and version, the screens and features of the Service you access, and the time and date of your activity, which we and our service providers may collect to operate, secure, and improve the Service. We may retain technical logs generated by our infrastructure providers for debugging and security purposes.
2. How We Use Your Information
We use the information described above to:
- provide the Service, including generating quiz questions, summaries, and other learning aids from Your Content;
- operate spaced-repetition scheduling, streaks, badges, and other progress features;
- process your subscription and manage your account;
- send you Service-related communications, such as account, security, or subscription notices, and, where you have opted in, reminders and other notifications;
- maintain the security and integrity of the Service; and
- improve and develop the Service, including by reviewing account and usage data, in aggregate or for a specific account, such as quiz history, streaks, and subscription status, to understand behavior and identify improvements, without accessing the substance of Your Content.
3. Artificial Intelligence Processing
The Service uses artificial intelligence technology to generate quiz questions, summaries, and other learning aids, including source titles, from Your Content. This processing may be performed by us directly or by one or more third-party artificial intelligence service providers that we engage for this purpose.
We do not use Your Content to train our AI models, and we require that any third-party AI provider we use not use Your Content to train their own AI models either. Our AI processing provider's infrastructure operates globally, so your content may be processed on servers located outside the United States.
The specific third-party providers we use to power this feature may change over time as we adopt new technology or switch providers, without changing the commitments described in this section.
For the list of subprocessors, visit gripcue.com/subprocessors
Only the content necessary to generate the requested output, such as the text of a document you upload, is sent to an AI processing provider for this purpose. We do not send your account credentials, and do not send your name or email address, to these providers.
4. How We Share Your Information
We do not sell or share your personal information for cross-context behavioral advertising, and the Service does not currently display third-party advertisements.
We share information with the following categories of service providers, solely as necessary to operate the Service:
- cloud hosting and database providers, to store your account information and Your Content;
- email service providers, to send account verification and password-reset emails;
- artificial intelligence processing providers, as described in Section 3;
- Google, through Google Play's billing system, to process your purchases, and RevenueCat, our subscription-management platform, which receives your purchase and subscription data from Google Play to track your subscription status and history. If we add another app store, a different subscription-management platform, or a web-based payment option such as RevenueCat's Web Billing (which uses Stripe), we will update this Policy to name the new providers; and
- notification delivery providers, to send push notifications you have enabled.
The specific providers within each category may change over time as our technology evolves. We remain responsible for ensuring that any provider we share your information with is bound by obligations to protect it consistent with this Policy.
Information you choose to share. If you share content or send a message to another user, they can see it along with your name. Your content is private unless you choose to share it.
We may also disclose information if required by law, to respond to legal process, to protect the rights, property, or safety of GripCue, our users, or the public, or in connection with a merger, acquisition, financing, or sale of some or all of our assets, in which case this Policy would continue to apply to your information unless you are notified otherwise.
5. Data Retention and Deletion
We retain your information for as long as your account remains active, or as needed to provide the Service to you. You can delete your account at any time from within the app. If you have an active paid subscription, you must first cancel it through the app store you subscribed through before you can delete your account.
When you delete your account, we delete your personal information and Your Content from our active systems, except for limited data we may be required to retain for legal, security, or fraud-prevention purposes. This includes a record that you consented to our use of artificial intelligence to process your content, including the date of that consent and the version of the disclosure you agreed to, which we retain as evidence of that consent even after your account is deleted. Residual copies may persist for a limited additional period in backups or logs before they are automatically removed. In rare cases, such as a network failure during deletion, a copy of an uploaded file may briefly persist in our storage systems after your account record has otherwise been deleted; we take reasonable steps to identify and remove such residual copies.
Inactive accounts. If your account has had no sign-in for twelve (12) months and you have no active paid subscription, we may delete your account and Your Content. We will make reasonable efforts to notify you at your account email first. We may retain limited records as described in this Policy.
6. Your Choices and Rights
You can access, update, or delete the information in your account, and download a copy of your data, directly within the app.
You can also contact us at hello@gripcue.com to make a request regarding your information including a request to delete your account or data if you are unable to do so within the app. Depending on your state of residence, you may have additional rights under applicable state privacy law, such as the right to know, correct, or delete personal information, or to opt out of certain processing; we will honor valid requests consistent with applicable law. If we send you promotional or marketing communications, you can opt out at any time using the unsubscribe link in the email or your account settings.
7. Data Security
We use reasonable technical and organizational measures designed to protect your information, including encryption of data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security breach affecting your personal information, we will notify you as required by applicable law.
8. Children's Privacy
The Service is intended for users who are 18 years of age or older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from someone under 18, we will take steps to delete it.
9. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, our technology and service providers, or applicable law. We will post the updated Policy with a new “Last Updated” date, and for material changes we will make reasonable efforts to notify you. For material changes, we may ask you to accept the revised Policy before you continue to use the Service. See our Terms of Service, Section 12, for what happens if you do not.
10. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at hello@gripcue.com.