Privacy Policy
Last updated: August 22, 2026
ANA SOFTWARE LLC operates the GrindLevel website and application (the “Service”). This policy explains our actual information practices for the United States and Mexico. It is a privacy notice, not legal advice.
Who is responsible and how to contact us
The controller responsible for GrindLevel is ANA SOFTWARE LLC, 10711 Rangeview Pl, Tampa, FL 33625-4936, United States. Privacy, access, correction, deletion, consent, and child-safety requests may be sent to [email protected].
Information we collect
- Account and profile: email address, display name, internal account identifier, sign-in provider, and an optional profile photo you choose. Camera or photo-library access is used only when you choose a profile photo; GrindLevel does not collect your full photo library.
- Commission-tracking content: pay-plan details, employer or dealership label, deals, customer and stock or deal references, gross and commission amounts, income totals, goals, manual spiffs, feedback, and settings you enter.
- Purchases and access: store, product, subscription, entitlement, transaction, and expiration information needed to provide or restore Pro. Apple or Google processes your payment credentials; GrindLevel does not receive your payment-card number.
- Referrals and integrity: a one-time referral token, limited normalized transaction and reward records, and versioned keyed-HMAC installation or account signals used prospectively to preserve first-touch attribution and prevent duplicate or self-referrals. Unclaimed referral tokens expire after 30 days. GrindLevel does not use IDFA, GAID, hidden fingerprinting, aggressive email normalization, or stored IP addresses for referral decisions.
- Support and security: the information you choose to include in a support request and limited operational records needed to secure, troubleshoot, and protect the Service.
Optional product analytics
The in-app control labeled “Share anonymous product analytics” is off by default. No analytics identifier is created and no analytics event is sent unless you opt in under Settings → Data. If you opt in, PostHog US Cloud receives a random installation UUID and a small allowlist of events for app opens and sessions, onboarding and first-deal milestones, paywall and purchase or restore outcomes, observed Pro-access state, referral-screen and share outcomes, and CSV export use. The UUID distinguishes one installation but is not linked to your GrindLevel account. Properties are limited to fixed categories such as platform, plan period, entry point, entitlement source, share method, or whether a deal was the first.
These events do not contain your name, email, phone number, account or Supabase identifier, RevenueCat identifier, referral code, customer name, deal or stock number, free text, gross, commission, pay-plan value, localized price, receipt, transaction identifier, full URL, location, IDFA, or another advertising identifier. The client does not include the PostHog SDK and does not use autocapture, session replay, heatmaps, surveys, error autocapture, or person profiles. Every event disables GeoIP enrichment; the project discards the transport IP. We do not use PostHog for advertising or to track you across apps or websites.
Why we use information
We use required information to create and secure your account, calculate the estimates you request, synchronize your entries, provide and restore Pro, operate referrals, answer support requests, prevent abuse, maintain transaction integrity, and comply with applicable obligations. If you separately opt in, we use the limited anonymous events above only to measure product health and improve GrindLevel. We do not sell personal information or use it for targeted advertising.
Service providers and international processing
We provide data only as needed to service providers operating under our instructions or to platform providers you choose to use. Data may be processed in the United States or other countries where these providers operate:
- Supabase: authentication, database storage, private file storage, and server functions.
- RevenueCat: pseudonymous subscription and entitlement processing.
- Apple: Sign in with Apple and App Store purchases.
- Google: Google Sign-In and Google Play purchases on Android.
- PostHog US Cloud: optional product analytics only after opt-in.
We may also disclose information when required by law or reasonably necessary to protect users, the Service, or our rights. We do not authorize a provider to use GrindLevel data for its own advertising.
Retention and account deletion
Active account and app content is kept while your account remains open. You can delete the account in Settings → Data → Delete account, or use our web account-deletion page without reinstalling the app. Confirmed deletion removes the authentication account, profile, pay plans, deals, goals, manual spiffs, feedback, preferences, live subscription and referral rows, and private profile photo. It also clears user-scoped data on the device after the server confirms completion.
We retain only records that are necessary for security, duplicate suppression, transaction or reward integrity, dispute handling, or legal obligations. For example, the server-side RevenueCat event mirror redacts new detailed payloads after no more than 90 days and retains only normalized causal fields needed for audit, idempotency, matching, and disputes. This prospective rule does not automatically transform, backfill, or delete historical payloads or unkeyed hashes. After account deletion, its GrindLevel user association is removed. Limited pseudonymous referral and store-transaction integrity records may remain so deletion cannot erase another participant’s earned reward or prevent a later refund or chargeback from being matched. RevenueCat and the stores may separately retain pseudonymous transaction records under their own obligations.
Consented PostHog product-analytics events have an effective retention period of 12 months under the active PostHog plan, unless they are deleted sooner. Because the random analytics UUID is not linked to your account, account deletion cannot locate those events by email. Before disabling analytics, copy the Analytics deletion request ID under Settings → Data and email only that ID to [email protected]. We will confirm when PostHog reports that its asynchronous deletion is complete. Disabling analytics immediately stops future events and removes the UUID from that device.
Limited copies may remain temporarily in security logs or provider backups, or longer when a legal obligation requires it. They are isolated from active accounts and kept only for the applicable security, backup, transaction-integrity, dispute, or legal purpose.
We limit access to people and providers who need information for these purposes, use authenticated services and encrypted network connections, and keep profile files in private storage. No security safeguard eliminates every risk.
Your choices and privacy rights
You can update profile information, remove your optional photo, disable analytics, export your deals, and delete the account from the app. You can also ask us to provide access to, correct, delete, or restrict our use of personal information, or withdraw consent, by emailing [email protected]. Depending on where you live and the circumstances, some rights or exceptions may differ. We will verify that a requester controls the relevant account without asking for a password. Mexico residents should review the detailed ARCO procedure in the Mexico privacy notice.
Deleting your GrindLevel account does not cancel an App Store or Google Play subscription. Cancel it separately in the subscription settings of the store that processed the purchase; details and official store links are on the account-deletion page.
Children
GrindLevel is designed for adult sales professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child may have created an account or provided personal information, email [email protected] so we can investigate and delete it when appropriate.
Website information
This website does not use GrindLevel product analytics and does not contain a waitlist. On the referral page, the visible referral code is sent to Supabase only to request a short-lived opaque installation handoff; the handoff contains no email or GrindLevel user ID. If you email us, we receive the information you choose to provide. Clicking a store link takes you to Apple or Google, whose privacy practices apply there.
Changes to this policy
We may update this policy when the Service or our practices change. We will post the revised notice here with a new “Last updated” date. If a change materially affects how we use personal information, we will also provide a reasonable additional notice in the app or by email when appropriate.