Privacy Policy

Last updated: October 14, 2026

Gracias is published by mayonesso (Spain), who is responsible for your data. Contact: [email protected].

1. What we collect and why

• Email address — to sign you in with a magic link. It is kept by our authentication provider (Supabase), and the sign-in email is delivered through Resend.
• Nickname and avatar color — shown to you and to your Circle friends.
• Gratitude entries — up to 3 short items a day. They are stored on your device. If you sign in, they are also stored on our servers (Supabase) so you can share them with your friends.
• Friend connections and likes — who is in your Circle and which entries you liked.
• Reports — if you report a friend's entry, we store who reported it, which entry (including a copy of its text, so we can still review it if it is later edited), the reason and the date, only to review it.

We do not collect your location, contacts or photos, and there are no analytics, advertising or tracking tools in Gracias.

2. Who else handles your data

Supabase hosts our database and sign-in. Resend delivers the sign-in email, so it sees your email address and the sign-in link. We never sell your data and we do not share it with anyone else.

3. What your friends see

Your nickname, avatar color and entries are visible to the friends you add to your Circle. Entries are shared by default, and you can make any entry private so only you see it. Friends are added only by scanning a QR code, so both people agree. Either of you can remove the other at any time, and after that you no longer see each other's entries.

4. Voice input

Voice input is optional. Speech recognition runs on your device: the audio is not sent to us or to any server, and it is not stored. If your device or language does not support on-device recognition, voice input is simply not available and you can type instead.

5. Other device features

• Camera — only to scan a friend's QR code. Images are not stored or sent.
• Reminders — the daily reminder is a notification scheduled on your device. We do not store a push-notification token.
• Pausing other apps (optional) — the apps you choose and the moment you open one are handled on your device only, using Screen Time on iPhone and the Accessibility service on Android. On Android, Gracias uses the Accessibility service only to detect which app is in front. It does not read what is on your screen, and nothing about the apps you use is stored or sent anywhere.

6. Reports and moderation

You can report a friend's entry from your Circle feed. We review reports manually and may remove content or accounts that break the Terms. If either account is deleted, the related reports are deleted too.

7. Keeping and deleting your data

We keep your data while your account exists. You can delete your account at any time in the app (Settings → Delete Account), which immediately erases your account and everything linked to it from our servers, or by email as explained on the account deletion page.

8. Your rights

You can ask us to access, correct, delete, restrict or export your data, or object to how we use it, by writing to [email protected]. We use your data to provide the service you asked for, and for sharing with friends we rely on your choice to share. If you are in the European Union you can also complain to your data protection authority; in Spain that is the AEPD (aepd.es).

9. Children

Gracias is not meant for children under 14. If you believe a child under 14 has an account, tell us and we will delete it.

10. Changes

If we change this policy we will update the date above.