Privacy Policy
Effective Date: July 1, 2026
Last Updated: July 1, 2026
1. Introduction
Welcome to Gravy ("Gravy," "we," "us," or "our"), available through gravynotes.com, the Gravy web application, and the Gravy iOS application (collectively, the "Services").
This Privacy Policy explains how we collect, use, disclose, process, store, and protect information when you access or use our Services.
By using the Services, you acknowledge that you have read and understood this Privacy Policy.
If you do not agree with this Privacy Policy, you should not use the Services.
2. Who We Are
At the time of publication of this Privacy Policy, Gravy is operated through gravynotes.com.
Future legal ownership may be transferred to a successor entity, including a limited liability company or other legal entity.
Business Address:
600 N Broad Street
Suite 5 #3550
Middletown, DE 19709
United States
Privacy and Support Contact:
3. Information We Collect
Account Information
When you create an account, we may collect:
- Name
- Email address
- Authentication provider information
- Account credentials
- Subscription status
- Account settings
- User preferences
Sign-In Information
If you sign in using Google or Apple, we may receive certain information associated with your account, such as:
- Name
- Email address
- Account identifier
- Profile information provided through the authentication provider
The exact information received depends on the permissions granted and authentication provider settings.
User Content
We collect and store content you submit to the Services, including:
- Chat conversations
- Smart Notes
- Smart Blocks
- Bookmarks
- References
- About You information
- AI-generated outputs
- Audio Note transcripts
- Summaries
- Analyses
- Metadata associated with your content
Uploaded Content
Users may submit:
- Audio files
- Video files
- Images
- PDF documents
- Other supported documents
- YouTube links
Uploaded content may be processed to generate transcripts, summaries, analyses, notes, and other AI-generated outputs.
Payment Information
Subscription purchases are processed by third-party payment providers.
Depending on the platform used, payment information may be processed by:
- Apple
- Stripe
- RevenueCat
Gravy does not store full payment card information.
Support Communications
If you contact support, we may collect:
- Email correspondence
- Support requests
- Troubleshooting information
- Account-related communications
Technical Information
We may automatically collect technical information including:
- Device information
- Browser information
- Operating system information
- IP address
- Usage information
- Diagnostic information
- Error reports
- Crash reports
Analytics Information
We may collect analytics information through services such as:
- Google Analytics
- Meta Pixel
These services may use cookies and similar technologies to measure usage and marketing performance.
4. How We Use Information
We use information to:
- Provide the Services
- Authenticate users
- Process subscriptions
- Deliver AI-generated responses
- Generate Smart Notes
- Create transcripts and summaries
- Enable bookmarks and references
- Personalize user experiences
- Maintain user settings
- Improve reliability
- Diagnose technical issues
- Monitor performance
- Prevent abuse and fraud
- Comply with legal obligations
- Respond to support requests
5. AI Processing
Gravy uses artificial intelligence services to provide core functionality.
Content submitted through the Services may be processed by third-party AI providers through the Vercel AI Gateway and related infrastructure.
AI-generated outputs may be inaccurate, incomplete, misleading, or outdated.
Users should not rely on AI-generated content as legal, financial, medical, investment, tax, accounting, mental health, or other professional advice.
AI providers
These providers may include:
- OpenAI
- Anthropic
- Other AI providers integrated into the Services
Processing purposes
User content may be transmitted to these providers for purposes such as:
- Chat generation
- Summarization
- Analysis
- Note creation
- Transcription processing
- AI-assisted workflows
6. Personalization
Gravy personalizes certain experiences using information stored within your account.
Personalization may be based on:
- Chat history
- Smart Notes
- Bookmarks
- References
- About You information
- User settings
- User preferences
Gravy does not maintain a separate hidden memory system outside of user-controlled account data.
7. Incognito Mode
Incognito Mode allows users to ask questions that are separate from normal conversation history.
Incognito Mode conversations:
- Are not saved to chat history
- Are not saved to Smart Notes
- Are not saved to bookmarks
- Are not saved to references
- Are not reused as future context
- Are not stored in the Gravy database
Content submitted through Incognito Mode may still be processed temporarily in order to generate responses and operate the Service.
8. Cookies and Similar Technologies
The Services may use cookies, pixels, and similar technologies for:
- Authentication
- Security
- Session management
- Analytics
- Performance monitoring
- Marketing measurement
Third-party providers may also use cookies and similar technologies.
Users may control cookies through browser settings, subject to limitations affecting functionality.
9. Third-Party Services
We may use third-party service providers including:
- Supabase
- Vercel AI Gateway
- OpenAI
- Anthropic
- Google Gemini
- RevenueCat
- Stripe
- Apple Subscription Services
- Google Analytics
- Meta Pixel
- Sentry
- Google Docs
These providers may process information as necessary to provide their services.
Their handling of information is governed by their own privacy policies and practices.
10. Google Docs Exports
Gravy may allow users to export notes to:
- Google Docs
Exports are initiated by users and are not ongoing synchronizations.
Once content is exported, it becomes subject to the privacy practices of the destination service.
11. Data Retention
Active Accounts
We retain information while accounts remain active and while necessary to provide the Services.
Subscription Expiration
If a subscription expires or is canceled, account data may remain stored for up to sixteen (16) days.
If the subscription is not restored during that period, account data may be permanently deleted.
Account Deletion
Users may delete their accounts through account settings.
Upon account deletion, associated account data is permanently removed from the Gravy database.
12. User Rights and Controls
Users may:
- Access account information
- Update account information
- Change name
- Change email address
- Change password
- Edit chats
- Delete chats
- Edit notes
- Delete notes
- Edit About You information
- Delete About You information
- Delete uploaded content
- Delete bookmarks
- Delete their account
Users may also contact support@gravynotes.com regarding privacy-related requests.
13. Data Access Requests
Users may contact support@gravynotes.com to request information regarding personal information associated with their account.
Requests may be subject to identity verification and applicable legal requirements.
14. Children's Privacy
The Services are not intended for individuals who do not meet the minimum age required to use digital services under applicable law.
We do not knowingly collect personal information from children in violation of applicable law.
If we become aware that information has been collected in violation of applicable law, we may take steps to delete such information.
15. Sensitive Information
Users should not submit highly sensitive personal information through the Services.
Examples include:
- Social Security numbers
- Government identification numbers
- Passport information
- Driver's license information
- Banking credentials
- Medical records
- Health information
- Biometric identifiers
- Other highly sensitive information
Submission of such information is at the user's own discretion and risk.
16. Security
We implement reasonable administrative, technical, and organizational measures designed to protect information.
However, no method of transmission, storage, or processing is completely secure.
We cannot guarantee absolute security.
17. International Users
The Services may be accessed by users located outside the United States.
By using the Services, users understand that information may be processed and stored in jurisdictions that may differ from their own.
18. Business Transfers
If Gravy undergoes a merger, acquisition, restructuring, sale of assets, financing transaction, or other business transfer, information may be transferred as part of that transaction.
19. Changes to This Privacy Policy
We may modify this Privacy Policy from time to time.
Changes will be reflected by updating the Last Updated date.
Continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.
20. Contact Information
If you have questions regarding this Privacy Policy, please contact:
Business Address:
600 N Broad Street
Suite 5 #3550
Middletown, DE 19709
United States