Privacy notice

Last updated: 5 July 2026

This notice describes the processing of personal data relating to the grain app, the get-grain.app website and the grain+ waitlist, pursuant to Article 13 of Regulation (EU) 2016/679 (the "GDPR"). As of today, grain works entirely on your device: there is no account, no synchronisation whatsoever, and no server receives your content. The only processing of personal data we carry out concerns, optionally, the email address you choose to leave on the waitlist.

Data controller

The data controller is Tommaso De Angelis (a natural person), Italy. For any matter concerning your personal data you can write to ciao@get-grain.app.

The app processes no personal data

The grain app collects no personal data, requires no account and connects to no server in order to work. Your grains (notes), tags and settings are stored solely on your device. We carry out no analytics, advertising tracking or profiling, and use no third-party analytics tools.

Any backup is your explicit choice: you can export your grains to a file that stays on your device or in the destination you choose. No backup is ever transmitted to us or to third parties, whether automatically or manually.

grain+ (sync) — not yet available

Cross-device synchronisation ("grain+") is not present in this version of the app and is still in development. When available it will be optional, and content will be end-to-end encrypted on the device before it ever leaves local storage: neither we nor the infrastructure provider will be able to read it. When grain+ is activated, this notice will be updated to describe the related processing (in particular the account email and the encrypted sync data) before you can enable it.

grain+ waitlist

From the website, or via a link in the app, you can optionally join the waitlist to be notified when grain+ becomes available. This is the only processing of personal data we carry out, on the following terms:

Website

The get-grain.app website is a static site. The hosting provider may process technical logs (including the IP address) for the security and proper operation of the service, on the basis of legitimate interest (Art. 6(1)(f) GDPR). The site uses Google web fonts (Google Fonts): rendering them may involve transmitting your IP address to Google's servers. The site uses no profiling cookies.

Your rights

As a data subject you have the right, within the limits set by Articles 15-22 of the GDPR, to obtain access to your data, its rectification or erasure, restriction of or objection to processing and portability, as well as to withdraw at any time the consent given for the waitlist. Since the app collects no data, in practice these rights concern only the waitlist email: to exercise them, write to ciao@get-grain.app. You also have the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali).

Minors

The website and the waitlist are not directed to children under 14, and we do not knowingly collect their data. If you believe a minor has provided us with an email address, contact us and we will delete it.

Changes to this notice

We may update this notice, for example when grain+ is introduced. The current version is always published at this address, with the last-updated date shown at the top. In case of material changes affecting you, we will inform you by appropriate means.

Contact

For any question about this notice or the processing of your data: ciao@get-grain.app.