Privacy Policy
Last updated: September 21, 2026
ANA SOFTWARE LLC operates the GrindLevel website and application (the “Service”). This policy explains our actual information practices for the United States and Mexico. It is a privacy notice, not legal advice.
Who is responsible and how to contact us
The controller responsible for GrindLevel is ANA SOFTWARE LLC, 10711 Rangeview Pl, Tampa, FL 33625-4936, United States. Privacy, access, correction, deletion, consent, and child-safety requests may be sent to [email protected].
Information we collect
- Account and profile: email address, display name, internal account identifier, sign-in provider, and an optional profile photo you choose. Camera or photo-library access is used only when you choose a profile photo; GrindLevel does not collect your full photo library.
- Commission-tracking content: pay-plan details, employer or dealership label, deals, customer and stock or deal references, gross and commission amounts, income totals, goals, manual spiffs, feedback, and settings you enter.
- Purchases and access: store, product, subscription, entitlement, transaction, and expiration information needed to provide or restore Pro. Apple or Google processes your payment credentials; GrindLevel does not receive your payment-card number.
- Referrals and integrity: a one-time referral token, limited normalized transaction and reward records, and versioned keyed-HMAC installation or account signals used prospectively to preserve first-touch attribution and prevent duplicate or self-referrals. Unclaimed referral tokens expire after 30 days. GrindLevel does not use IDFA, GAID, hidden fingerprinting, aggressive email normalization, or stored IP addresses for referral decisions.
- Support and security: the information you choose to include in a support request and limited operational records needed to secure, troubleshoot, and protect the Service.
Limited product operations data
For signed-in accounts, GrindLevel records a small allowlist of operational events in Supabase: app opened, paywall viewed, purchase started or completed, and restore started or completed. Each event is aggregated by account and UTC day. Properties are limited to fixed categories such as iOS, Android or web; paywall entry point; monthly or annual; and a bounded store outcome.
These records are linked to your GrindLevel account so we can understand whether the Service is working and where signed-in users encounter access or purchase problems. They do not contain your name, email, phone number, RevenueCat identifier, referral code, customer name, deal or stock number, free text, gross, commission, pay-plan value, localized price, receipt, transaction identifier, full URL, precise location, device identifier, IDFA, GAID, or another advertising identifier. GrindLevel does not use autocapture, session replay, heatmaps, cross-app tracking or this data for advertising.
Why we use information
We use required information to create and secure your account, calculate the estimates you request, synchronize your entries, provide and restore Pro, operate referrals, answer support requests, prevent abuse, maintain transaction integrity, measure product reliability and access friction, improve GrindLevel, and comply with applicable obligations. We do not sell personal information or use it for targeted advertising.
Service providers and international processing
We provide data only as needed to service providers operating under our instructions or to platform providers you choose to use. Data may be processed in the United States or other countries where these providers operate:
- Supabase: authentication, database storage, private file storage, and server functions.
- RevenueCat: pseudonymous subscription and entitlement processing.
- Apple: Sign in with Apple and App Store purchases.
- Google: Google Sign-In and Google Play purchases on Android.
We may also disclose information when required by law or reasonably necessary to protect users, the Service, or our rights. We do not authorize a provider to use GrindLevel data for its own advertising.
Retention and account deletion
Active account and app content is kept while your account remains open. You can delete the account in Settings → Data → Delete account, or use our web account-deletion page without reinstalling the app. Confirmed deletion removes the authentication account, profile, pay plans, deals, goals, manual spiffs, feedback, preferences, live subscription and referral rows, and private profile photo. It also clears user-scoped data on the device after the server confirms completion.
We retain only records that are necessary for security, duplicate suppression, transaction or reward integrity, dispute handling, or legal obligations. For example, the server-side RevenueCat event mirror redacts new detailed payloads after no more than 90 days and retains only normalized causal fields needed for audit, idempotency, matching, and disputes. This prospective rule does not automatically transform, backfill, or delete historical payloads or unkeyed hashes. After account deletion, its GrindLevel user association is removed. Limited pseudonymous referral and store-transaction integrity records may remain so deletion cannot erase another participant’s earned reward or prevent a later refund or chargeback from being matched. RevenueCat and the stores may separately retain pseudonymous transaction records under their own obligations.
Account-linked product operations aggregates are retained for up to 180 days and are removed when the GrindLevel account is deleted. They are not retained as a separate advertising or device profile.
Limited copies may remain temporarily in security logs or provider backups, or longer when a legal obligation requires it. They are isolated from active accounts and kept only for the applicable security, backup, transaction-integrity, dispute, or legal purpose.
We limit access to people and providers who need information for these purposes, use authenticated services and encrypted network connections, and keep profile files in private storage. No security safeguard eliminates every risk.
Your choices and privacy rights
You can update profile information, remove your optional photo, export your deals, and delete the account from the app. You can also ask us to provide access to, correct, delete, or restrict our use of personal information, or withdraw consent, by emailing [email protected]. Depending on where you live and the circumstances, some rights or exceptions may differ. We will verify that a requester controls the relevant account without asking for a password. Mexico residents should review the detailed ARCO procedure in the Mexico privacy notice.
Deleting your GrindLevel account does not cancel an App Store or Google Play subscription. Cancel it separately in the subscription settings of the store that processed the purchase; details and official store links are on the account-deletion page.
Children
GrindLevel is designed for adult sales professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child may have created an account or provided personal information, email [email protected] so we can investigate and delete it when appropriate.
Website information
This website does not use GrindLevel product analytics and does not contain a waitlist. On the referral page, the visible referral code is sent to Supabase only to request a short-lived opaque installation handoff; the handoff contains no email or GrindLevel user ID. If you email us, we receive the information you choose to provide. Clicking a store link takes you to Apple or Google, whose privacy practices apply there.
Changes to this policy
We may update this policy when the Service or our practices change. We will post the revised notice here with a new “Last updated” date. If a change materially affects how we use personal information, we will also provide a reasonable additional notice in the app or by email when appropriate.