Privacy Policy

This policy explains what Grymo collects, how it is stored and protected, and how you can remove it. It covers the Grymo web app at mygrymo.com.

What we collect

• Account details — the email address you sign up with. Your password is handled by our authentication provider and stored hashed; we never see it. You can also sign in with Google, in which case Google verifies your identity for us.
• The financial information you enter — accounts and balances, transactions, budgets, categories, goals and tags. You type this in yourself: Grymo does not connect to your bank and does not import anything automatically.
• A sign-in cookie — a single essential cookie that keeps you logged in. Nothing else is stored in your browser for tracking.

How your data is stored and protected

Your data lives in a managed PostgreSQL database (Supabase), hosted in the United States (Ohio). Access is isolated per account by row-level security enforced by the database itself, not just the app — another user cannot read your rows even if they try. Every change is written to an append-only history, so nothing is altered without a record.

Because the data is stored in the United States, it is subject to United States law and may be accessible to US authorities under it, wherever you live.

Cookies and tracking

We use only the essential sign-in cookie described above. There are no advertising cookies, no tracking pixels and no third-party analytics on the site.

Service providers

We rely on a small number of providers to run the service:

• Supabase — database and authentication.
• Vercel — application hosting.
• Google — only if you choose to sign in with Google.
• Frankfurter — public exchange rates for showing balances in one currency. We request rates only; no personal data is sent.

Keeping and deleting your data

Your data is managed by you, in the app: everything you’ve entered can be edited or deleted there, and anything you delete is removed for good within a few days. We never edit your data ourselves.

The one request we handle on our side is deleting your entire account: email support@mygrymo.com and we permanently delete it together with all of its data.

Children

Grymo is not directed to children and is not intended for use by anyone under 16.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected in the “Last updated” date above.

Contact

Questions about your privacy? Email support@mygrymo.com.