Privacy Policy Last updated: 11 October 2025 This Privacy Policy explains how GrappleX (“we”, “our”, “us”) collects, uses, and protects your personal information when you use our website and application (collectively, the “Service”). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By creating an account or using GrappleX, you agree to the practices described in this Privacy Policy. 1. Who We Are GrappleX is an online grappling study platform that helps users analyse and learn techniques through linked videos and educational tools. For any privacy-related questions, you can contact us at: 📧 support@grapplexapp.com 🌐 www.grapplexapp.com 2. Information We Collect We collect information in the following ways: a. Information You Provide When you create an account or subscribe, we may collect: Name and email address Password (securely hashed) Subscription and billing details (handled by our payment provider) Any optional profile details you choose to share b. Information Collected Automatically When you use GrappleX, we may automatically collect: Device type and browser information IP address and general location (country/region) Usage data (pages visited, features used, time spent) Cookies or similar tracking technologies for analytics c. Payment Information All payments are processed securely through a third-party provider (such as Stripe). We do not store or have access to your full card details. 3. How We Use Your Information We use your data to: Provide and maintain your account Deliver the features and functionality of GrappleX Process payments and manage subscriptions Improve our services through analytics Communicate updates, service changes, or offers (only with your consent) Ensure security, detect fraud, and enforce our Terms 4. Legal Basis for Processing Under UK GDPR, we process your personal data based on one or more of the following lawful bases: Contractual necessity – to deliver the Service you have signed up for Legitimate interest – to improve and maintain our platform Consent – where you have opted in (e.g., marketing emails) Legal obligation – where required by law or regulation 5. Cookies and Tracking We use cookies and similar technologies to: Enable essential website functionality Analyse usage patterns and performance Improve user experience You can control or disable cookies in your browser settings, though some features may not function properly if you do. 6. How We Share Information We do not sell or rent personal data. We may share limited data with: Service providers (e.g., hosting, analytics, email services, payment processors) Legal authorities, if required to comply with law or prevent fraud All third-party providers are carefully selected and bound by confidentiality and data protection agreements. 7. Data Storage and Retention Your personal data is stored securely in data centres that comply with GDPR standards. We retain data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. If you close your account, we will delete or anonymise your data within a reasonable timeframe (typically within 30 days), unless legal obligations require otherwise. 8. Data Security We take appropriate technical and organisational measures to safeguard your data, including: Encrypted connections (HTTPS) Secure password hashing Limited internal access to personal information However, no online system is completely secure, and you acknowledge that you use GrappleX at your own risk. 9. Your Rights (UK GDPR) You have the right to: Access your personal data Correct inaccurate or incomplete information Request deletion of your data (“right to be forgotten”) Restrict or object to processing in certain cases Data portability – request a copy of your data in a portable format Withdraw consent at any time (for example, to stop marketing emails) To exercise any of these rights, contact us at support@grapplexapp.com. We will respond within one month as required by UK GDPR. 10. External Links GrappleX contains links to third-party content, such as YouTube videos. We are not responsible for the privacy practices or content of those external websites. We encourage you to review their respective privacy policies. 11. Children’s Privacy GrappleX is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we discover that a minor’s data has been collected, we will delete it promptly. 12. Updates to This Policy We may update this Privacy Policy periodically. The updated version will be posted on this page with a new “Last updated” date. We encourage you to review it regularly. 13. Contact Us If you have any questions about this Privacy Policy or your data rights, please contact: 📧 support@grapplexapp.com 🌐 www.grapplexapp.com