Privacy Policy

Last updated: April 8, 2026

Ask Grace ("we," "our," or "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our application at askgrace.org and app.askgrace.org.

1. Information We Collect

Account Information: When you create an account, we collect your email address, name (if provided), and password. If you sign in with Google, Apple, or Microsoft, we receive your name and email from those services.

Conversations: Messages you send to Grace are processed by our AI service to generate responses. For authenticated users, conversation history is stored securely in our database so you can access it across sessions.

Reminders & Settings: Information you save in the app (reminders, emergency contacts, font preferences) is stored in your account.

Usage Data: We collect anonymous usage analytics (features used, message count, session data) to improve the service. We do not track the content of your messages in analytics.

2. How We Use Your Information

• To provide and improve the Ask Grace service
• To process your messages through our AI assistant
• To store your preferences, reminders, and emergency contact information
• To enforce usage limits and prevent abuse
• To send you account-related communications (password resets, security alerts)

3. What We Never Do

• We never sell your personal information to third parties
• We never share the content of your conversations with advertisers
• We never use your health-related conversations to target you with ads
• We never store your passwords in plain text — they are encrypted

4. Data Security

Your data is protected using industry-standard security measures:

• All data is encrypted in transit (TLS/SSL)
• Database access is protected by Row-Level Security — only you can access your data
• API keys and secrets are stored server-side and never exposed to your browser
• Authentication is handled by Supabase, a trusted infrastructure provider

5. Data Retention

Your account data is retained as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us at privacy@askgrace.org.

Guest session data (for users who have not created an account) is retained for up to 90 days and then automatically deleted.

6. Third-Party Services

We use the following third-party services to operate Ask Grace:

• Anthropic (Claude AI) — processes your messages to generate responses. See Anthropic's Privacy Policy.
• Supabase — hosts our database and authentication. See Supabase's Privacy Policy.
• Vercel — hosts our website. See Vercel's Privacy Policy.
• Google Tag Manager — anonymous analytics. See Google's Privacy Policy.

7. Children's Privacy

Ask Grace is designed for adults aged 55 and older. We do not knowingly collect information from children under 13. If we learn that we have collected data from a child, we will delete it immediately.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Export your data in a portable format

To exercise any of these rights, contact us at privacy@askgrace.org.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice in the app or sending you an email. The "Last updated" date at the top indicates when this policy was last revised.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: privacy@askgrace.org
Website: askgrace.org