Legal

Privacy Policy

Effective October 5, 2026 · BuildingRome Studio LLC

Short version: Grit-Lock has no account and runs the same way on iPhone and Android. Your health data, the apps you block, your screen time and your accountability contact never leave your device. We use PostHog for anonymous in-app analytics, which you can turn off in Settings. The only personal data we ever receive is an email address, and only if you choose to share it.

Who we are

Grit-Lock is developed and published by BuildingRome Studio LLC. Questions about this policy can be sent to privacy@buildingrome.dev.

Data that stays on your device

The following data is stored locally on your device only. It is never transmitted to us or any third party:

Health and workout data. Grit-Lock reads workout data from Apple Health (iPhone) or Health Connect (Android) to check whether your unlock condition is met. We read it on-device and never copy, transmit, or store it outside your device.
Blocked apps and sites. The apps and websites you choose to block are stored locally. On iPhone they are held by Apple Screen Time (FamilyControls) as private tokens that Grit-Lock itself cannot read by name. On Android the list is stored in the app's private storage.
Usage insights. Pro users can see how much time they spend in their blocked apps. On iPhone, Apple's Screen Time report shows these numbers to you inside an Apple extension, and the Grit-Lock app never receives them. On Android, Grit-Lock measures this through Usage Access and keeps the history in an on-device database.
Accountability contact. If you turn on Battle Buddy, you pick one contact from your phone's contact picker. Grit-Lock stores only that contact's name and phone number, on your device. It never gets access to the rest of your contacts and needs no Contacts permission. When a message is due, Grit-Lock opens your own messaging app with a pre-written text. You decide whether to send it, and we never see the message or whether it was sent.
Breaking fee. If you set a breaking fee, Grit-Lock stores the amount, the payment app you chose and your buddy's handle on that app, plus a list of fees you still owe, all on your device. When you choose to pay, Grit-Lock opens Venmo, Cash App or PayPal with the amount filled in. The payment happens entirely in that app. Grit-Lock never processes, holds or transfers money and never learns whether a payment was made.
Shield schedules, streak history, rest days, and settings. All stored locally. Deleting the app deletes all of this data.

Data we may receive

Waitlist email (optional, website only). If you join the waitlist at gritlock.buildingrome.dev, your email address is stored in a Supabase database hosted in the US. We use it only to notify you when Grit-Lock launches. You can request deletion at any time by emailing privacy@buildingrome.dev.

Product update email (optional, in-app only). After upgrading to Grit-Lock Pro, the app may display a one-time prompt to join our product update list. Free and Pro users can also open this signup from Settings. Joining requires an active opt-in and is never required for app access. If you choose to submit your email, it is sent to a Resend audience and used only for product updates, new feature announcements, and early access. You can unsubscribe through the link in every update or by emailing privacy@buildingrome.dev.

Feedback and support messages (optional). If you use "Send feedback" in the app or on our support page, we receive your message, the type you picked (idea, bug, question, other), your email address if you choose to give one, and your app version, operating system version, device model, and whether you are on Free or Pro. It is delivered to our support inbox by Resend, our email provider. If you email us directly, we receive what you send. We keep these messages only as long as we need them to help you and improve Grit-Lock, and we delete them on request.

Anonymous analytics. See "In-app analytics" below. Not linked to your name, email, or any account.

Apple Health and Health Connect

Grit-Lock requests read-only access to the following data types:

iPhone (Apple Health): workout sessions, active energy burned, and Apple Exercise Time.
Android (Health Connect): exercise sessions and active calories burned.

This data is used only to decide whether your workout goal has been met so a shield can clear. We do not write health data. We do not share health data with any third party. Health data is never used for advertising or analytics.

App blocking permissions

iPhone: Grit-Lock uses Apple's Screen Time framework (FamilyControls, approved by Apple) to block the apps and sites you select. Your selections are stored on-device and are not accessible to us.

Android: Grit-Lock uses Usage Access to see which app is in front, and a screen overlay to cover a blocked app. It does not use an Accessibility service. This information is used on-device only to enforce your shields and is never transmitted.

In-app purchases

Purchases are processed entirely by Apple (App Store) or Google (Google Play). BuildingRome Studio LLC does not receive or store your payment information. Entitlements are managed by the store and by RevenueCat, which receives an anonymous app user ID and your purchase record so your Pro access can be verified and restored. You can restore purchases at any time without contacting us.

In-app analytics

Grit-Lock uses PostHog to understand which features get used so we can decide what to build next. Analytics are anonymous: they are tied to a random ID created when the app is installed, never to your name, email, or any account. PostHog receives:

Event names and timestamps for actions in the app (for example "shield cleared", "bypass started", "paywall viewed")
Simple details about those actions, such as shield type, snooze length, whether you are on Free or Pro, and which screen opened the paywall
App opens, installs, and backgrounding
App version, operating system, and device model
The random install ID

PostHog does not receive your health data, the apps or sites you block, your screen time, your accountability contact's name or number, your email, payment information, or any other identifying personal information. We do not use analytics for advertising and do not track you across other apps or websites. Analytics data is processed by PostHog in the US and is subject to their privacy policy.

Turning it off: open Settings in Grit-Lock and switch off "Share anonymous usage data" under Privacy. Collection stops immediately and anything not yet sent is discarded. You can also email privacy@buildingrome.dev.

Sponsor banner

Free users may see a single sponsor line on the home screen. To show it, the app downloads a small configuration file from our website. That request carries no identifier and no personal data, beyond the network information any web request includes. Tapping the sponsor opens their site in your browser. Pro removes the banner.

Advertising

Grit-Lock contains no advertising networks and no data brokers. We do not sell or share your data.

Children

Grit-Lock is not directed at children under 13. We do not knowingly collect data from children.

Data retention and deletion

All on-device data is deleted when you delete the app. To delete your waitlist or Pro email, or a feedback message you sent, contact privacy@buildingrome.dev and we will remove it within 30 days. Anonymous analytics are kept by PostHog under their retention settings. Because they are not linked to you, we cannot look them up by name or email; turning off the Settings switch stops any further collection.

Changes to this policy

If we make material changes to this policy, we will update the effective date above and, where appropriate, notify users via in-app notification or email. Continued use of Grit-Lock after changes constitutes acceptance of the updated policy.

Contact

BuildingRome Studio LLC
privacy@buildingrome.dev