Privacy policy

Last updated: October 28, 2026

Who we are

Griterra is a group space app: rooms with chat, calls and files, plus optional modules such as games and education plans. It is run by the Griterra team ("we", "us"). Questions about this policy or your data: burritostand@gmail.com.

What we collect

• Account information. If you sign in with Google: your Google account ID, email address, name and profile picture. If you create a Griterra account: your email, display name and a hashed version of your password (we never store the password itself). If you join as a guest: the display name you enter. Every account is also asked for its year of birth (never the full date), which we use only to check your age; it is never shown to anyone.
• Sign-in security records. The IP address and the device or browser name your app reports when you sign in, verify a code or trust a device. We use these to protect your account and to show you where you are signed in. We do not use them to work out your location.
• What you share in rooms. Messages, reactions, photos, videos, GIFs, PDFs and other files, room pictures, and previews of links you post.
• Calls. Voice and video pass through our own call servers to the other people in the call. They are stored only if a room owner records the call. If a room owner turns on live captions, call audio is sent to Google Cloud Speech-to-Text to be turned into text; caption text is kept as a transcript only while the room is being recorded.
• Device information. Push notification tokens (Firebase Cloud Messaging and Apple), an ID created for each install, and your platform and app version, so we can deliver notifications, ring calls and tell you about updates.
• Reports and blocks. When you report a message, file, room or person, we store your report, the reason and any words you add, and a copy of what you reported (for a message, its text and attachment links) so it can still be reviewed if it is later deleted. The Griterra team reviews every report and may remove content or people; the person you report is not told who reported them. When you block someone, we store who you blocked so we can hide their messages and stop their calls and notifications reaching you; they are not told.
• Education plans. If your room uses the IEP module: a student's name, the plan's content and a record of who changed what. Plans can be sent for electronic signature through DocuSign.

We do not use advertising, advertising IDs, analytics or crash-reporting services. We do not use your device's location, we do not read your contacts, calendar or text messages, and we do not sell your information.

How we use it

Only to run Griterra: signing you in and keeping your account secure, delivering what you share to the people you share it with, notifications and call ringing, recordings and captions, reviewing reports of objectionable content, and letting you know about app updates.

Where it is stored and who processes it

Our servers and database run on Google Cloud in the United States, and files are kept in Google Cloud Storage. These providers process data on our behalf to run the service:

• Google: cloud hosting and storage, Firebase Cloud Messaging, Google Sign-In, Speech-to-Text for captions, and Gmail for sending sign-in codes.
• Apple: push notifications on iPhone.
• DocuSign: signatures for education plans.
• Giphy: GIF search, which our server requests without your IP address.

When you post a link, our server visits that page to build a preview.

Who can see your content

The members of a room see what is shared in it. Photos and videos in chat and profile pictures are stored at long, hard-to-guess web addresses: anyone who has the exact link can open them.

Children

Griterra is intended for adults (18 and over). The IEP module lets parents and educators work on a student's education plan, so it can hold information about a child that those adults enter. We do not knowingly let children create accounts. If you believe a child has signed up, contact us and we will delete the account.

How long we keep data

We keep account data and content until you or a room owner deletes it, or until your account is deleted. QR sign-in records are deleted after 30 days; sessions and trusted devices expire after 30 days; uploads that fail virus scanning are deleted. Some deletions are partial today:

• A chat message you delete on its own is hidden from everyone but kept in our database.
• Deleting a single room removes its records, but its photos, videos and recordings stay in storage until we remove them.

Deleting your account is not partial. When you delete it in the app, your messages are removed from our database completely (not just hidden), and the stored photos, videos, files and recordings that go with your account are removed from storage straight away; if our storage provider cannot be reached at that moment, we keep retrying automatically until they are gone. Reports of objectionable content are the exception: they are kept for moderation, without the link to your account, as described there. If you ask us by email instead, we do the same within 30 days. What is deleted and what is kept is described on Delete your Griterra account.

Your choices and deleting your data

You can delete your own messages, files and photos in the app, remove your profile picture, sign out other sessions and revoke trusted devices. You can turn off camera, microphone and notification access in your phone's settings at any time.

To delete your account and the data tied to it, open Settings in the app and choose Delete account at the bottom, or see Delete your Griterra account for the details and for how to ask us by email. You can also ask us for a copy of your data, or to correct it, at burritostand@gmail.com.

Security

All traffic between the app and our servers is encrypted with HTTPS/TLS, and calls are encrypted in transit (WebRTC DTLS-SRTP). Calls are not end-to-end encrypted: our call server can process the audio, which is how recording and captions work. Passwords are hashed, sign-in codes and device tokens are stored as hashes, and files uploaded to a room are scanned for malware. No system is perfectly secure.

Changes

We will post changes to this policy here with a new date, and tell you in the app if a change is significant.