Your trust matters. Here is exactly what GROUNDED stores, where it lives, and what gets sent off-device.
Your name, the money worry you shared during onboarding, your weekly intention, your daily feeling check-ins, your anxiety score history, and your local AI quota counter are stored only on your device using your operating system's local storage. Sensitive items like your weekly intention are stored in the iOS encrypted keychain. We do not have a server-side copy of any of this.
On first launch GROUNDED generates a random anonymous identifier and stores it on your device. This ID is sent with each AI request so we can apply per-device rate limits and prevent abuse. It is not linked to your name, email, or any account.
When you talk to GROUNDED — through Today's check-in, a Plan Card question, the Calm chat, or a Community share — the message you wrote, your conversation history for that session, the type of prompt, and your anonymous device ID are sent to our backend proxy. The proxy forwards your message to Anthropic for the response. We do not retain prompts or responses beyond what is required for short-lived operational logs.
If you subscribe to GROUNDED Pro, RevenueCat receives your anonymous device ID, your purchase receipt, and platform metadata so it can verify and manage your subscription. We do not receive your name, email, or payment method. See revenuecat.com/privacy for details.
GROUNDED has no third-party advertising, no analytics SDKs, no behavioural tracking, and no social-media trackers. We do not sell, rent, or share your data with advertisers or data brokers.
You can clear everything at any time using Settings → Start fresh. This deletes your profile, your worry, your intention, your score history, and your AI quota counter from your device. Cancelling your subscription is handled in your device's subscription settings.
Privacy questions: privacy@grounded.app