Last updated: March 26, 2026 · Effective: March 26, 2026
This Privacy Policy explains how DR GRASS ("we", "us", or "our") collects, uses, and protects your information when you use our mobile application and related services. By using DR GRASS, you agree to the practices described in this policy.
If you have any questions or requests regarding your privacy, contact us at:
We collect only what is necessary to provide the service:
| Data Type | Examples | Source |
|---|---|---|
| Account information | Email address, display name | You (sign-up / Google Sign-In) |
| Unique user ID | Firebase UID | Generated automatically on account creation |
| Productivity data | Focus sessions, task history, coins earned | Your activity in the app |
| Device identifiers | Device attestation data | Google Play Integrity (for security) |
| Payment information | Billing name, email, country (for tax) | Paddle.com (if you purchase a paid plan) |
We do not collect location data, camera input, microphone input, contacts, or photos.
We do not use your data for advertising, profiling, or sell it to any third party.
We use Firebase for authentication, cloud storage, and app security.
We do not use Firebase Analytics or Firebase Crashlytics.
Firebase privacy policy: firebase.google.com/support/privacy
We use the Play Integrity API to verify that the app has not been tampered with. This sends device attestation data to Google. We do not receive personally identifiable device information from this process.
Google Play terms: developer.android.com/google/play/integrity/terms
We use Paddle to process payments for Premium and Lifetime subscriptions. Paddle acts as the Merchant of Record for your purchase, meaning Paddle collects and processes your billing information and payment card data directly — we never see or store your full payment details.
Paddle may collect your name, email address, billing address, and payment information to process transactions and comply with financial regulations (including anti-money laundering and tax obligations).
Paddle privacy policy: paddle.com/legal/privacy
We do not sell, rent, or trade your personal data. Data is shared only with the service providers listed above (Firebase, Google Play Integrity) strictly to operate the app. We may disclose data if required by law or to protect the safety of our users.
Your data is retained for as long as your account is active. When you delete your account:
Regardless of where you live, you have the right to:
To exercise any of these rights, email us at support@dr-grass.com. We will respond within 30 days (45 days for California residents).
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
DR GRASS is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.
If you are located in the European Economic Area (EEA), we process your data under the following legal bases:
You have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
We do not sell personal information. To submit a request, email support@dr-grass.com. We will respond within 45 days.
The DR GRASS app uses authentication tokens and device identifiers managed by Firebase and Google Play services. These are used solely for authentication and security — not for advertising or tracking. We do not use advertising cookies or cross-app tracking.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For significant changes, we will notify you via email or an in-app notification. Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.
For any privacy-related questions or requests: