Privacy Policy Last updated: 27 July 2026 This Privacy Policy explains how GrappleX (“we”, “our”, “us”) collects, uses, and protects your personal information when you use our website and application (collectively, the “Service”). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 1. Who We Are GrappleX is an online grappling study platform that helps users analyse and learn techniques through linked videos and educational tools. For any privacy-related questions, you can contact us at: 📧 support@grapplexapp.com 🌐 www.grapplexapp.com 2. Information We Collect We collect information in the following ways: a. Information You Provide When you create an account or subscribe, we may collect: Name and email address Password (securely hashed) Subscription and billing details (handled by our payment provider) Any optional profile details you choose to share b. Information Collected Automatically When you use GrappleX, we may automatically collect: Device type and browser information IP address and general location (country/region) Usage data (pages visited, features used, time spent) Cookies or similar tracking technologies for analytics (only where you have consented) c. Payment Information All payments are processed securely through a third-party provider (such as Stripe). We do not store or have access to your full card details. 3. How We Use Your Information We use your data to: Provide and maintain your account Deliver the features and functionality of GrappleX Process payments and manage subscriptions Improve our services through analytics (where you have consented) Communicate updates, service changes, or offers (only with your consent) Ensure security, detect fraud, and enforce our Terms 4. Legal Basis for Processing Under UK GDPR, we process your personal data based on one or more of the following lawful bases: Contractual necessity – to deliver the Service you have signed up for Legitimate interest – to improve and maintain our platform (excluding non-essential analytics cookies) Consent – where you have opted in (e.g., analytics cookies, marketing emails) Legal obligation – where required by law or regulation 5. Cookies and Tracking We use cookies and similar technologies as follows: a. Essential cookies These are required for the Service to work. For example, we set a currency preference cookie (grapplex.currency) so pricing can be shown in a suitable currency. Essential cookies do not require consent. b. If you accept analytics cookies, we may use: Google Analytics – to measure website traffic and usage. Google may process data outside the UK (including the United States). See Google's privacy policy for more information. Vercel Analytics and Vercel Speed Insights – to measure performance and aggregated usage of our website hosted on Vercel. PostHog – to understand how users interact with GrappleX, including feature usage, funnels, and product improvement analysis. Where session recording is enabled, PostHog may capture anonymised or masked recordings of on-screen activity to help us identify usability issues; sensitive fields such as passwords and payment details are excluded or masked from any recordings. These tools only load after you click "Accept" on our cookie banner. If you click "Reject", we will not load them. You can change your choice later by clearing site data for grapplexapp.com in your browser, which will show the banner again. 6. How We Share Information We do not sell or rent personal data. We may share limited data with: Service providers (e.g., hosting, analytics providers such as Google and Vercel, email services, payment processors) Legal authorities, if required to comply with law or prevent fraud All third-party providers are carefully selected and bound by confidentiality and data protection agreements where applicable. 7. International Transfers Some of our providers (including Google and Vercel) may process data outside the United Kingdom, including in the United States. PostHog is hosted in the European Economic Area (EU Cloud), so data processed by PostHog remains within the EEA. Where data is transferred outside the UK, we rely on appropriate safeguards required under UK GDPR, such as the UK International Data Transfer Agreement or adequacy decisions where available. 8. Data Storage and Retention Your personal data is stored securely in data centres that comply with GDPR standards. We retain data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. If you close your account, we will delete or anonymise your data within a reasonable timeframe (typically within 30 days), unless legal obligations require otherwise. 9. Data Security We take appropriate technical and organisational measures to safeguard your data, including: Encrypted connections (HTTPS) Secure password hashing Limited internal access to personal information However, no online system is completely secure, and you acknowledge that you use GrappleX at your own risk. 10. Your Rights (UK GDPR) You have the right to: Access your personal data Correct inaccurate or incomplete information Request deletion of your data (“right to be forgotten”) Restrict or object to processing in certain cases Data portability – request a copy of your data in a portable format Withdraw consent at any time (for example, analytics cookies or marketing emails) To exercise any of these rights, contact us at support@grapplexapp.com. We will respond within one month as required by UK GDPR. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at https://ico.org.uk/. 11. External Links GrappleX contains links to third-party content, such as YouTube videos. We are not responsible for the privacy practices or content of those external websites. We encourage you to review their respective privacy policies. 12. Children’s Privacy GrappleX is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we discover that a minor’s data has been collected, we will delete it promptly. 13. Updates to This Policy We may update this Privacy Policy periodically. The updated version will be posted on this page with a new “Last updated” date. We encourage you to review it regularly. 14. Contact Us If you have any questions about this Privacy Policy or your data rights, please contact: 📧 support@grapplexapp.com 🌐 www.grapplexapp.com