Privacy Policy
This Privacy Policy explains what data GrinderMind collects, why it collects it and how it is used to provide the service.
Last updated: July 2026
1.Data Controller
During Early Access, GrinderMind is operated by Salvatore Patti. For privacy-related requests, you can contact us at support@grindermind.com.
2.Data we collect
- Account data: email, authentication identifiers, profile data
- Player profile data: language, nickname, poker format, goals, leaks, study focus
- Session data: planned sessions, start/end session data, break check-ins, mental state/process notes
- Study data: study sessions, topics, notes, connected leaks
- AI report data: generated Session, Study and Weekly Reports and summaries
- Billing data: subscription status, Stripe customer id, subscription id, billing status, current period dates
- Technical data: logs, device/browser information, security events, usage information
GrinderMind does not intentionally collect poker room login credentials, screen data, live table data, card data from poker clients or hand decisions from live play.
3.How we use data
- Create and manage user accounts
- Provide the GrinderMind app
- Generate AI reports from user-provided data
- Save report history
- Personalize reports and dashboard experience
- Manage subscriptions and access
- Protect the service from abuse
- Improve product quality
- Provide customer support
4.AI processing
User-provided data may be sent to server-side AI providers to generate reports and summaries. API keys and prompts remain server-side. GrinderMind does not use AI to provide live poker advice or real-time hand decision assistance.
5.Legal basis
- Contract and service delivery
- Legitimate interest for security and product improvement
- Consent, where required
- Legal obligations for billing/accounting where applicable
6.Third-party services
- Supabase for authentication, database and backend
- Stripe for payments, subscriptions and billing portal
- AI providers (e.g. OpenAI) for AI report generation
- Hosting infrastructure (e.g. Lovable / Vercel / Cloudflare)
- Email providers, if added later
We do not share secret keys or internal credentials.
7.Data retention
We retain data for as long as needed to provide the service, keep the report history requested by the user, comply with legal obligations and protect the service. Users can request deletion or export of their data by contacting support@grindermind.com.
8.User rights
- Access
- Correction
- Deletion
- Restriction
- Portability
- Objection
- Withdrawal of consent where applicable
- Complaint to the competent data protection authority
9.Security
- Server-side secrets
- Authenticated access
- Row-level security / user separation
- Payments handled by Stripe
- No card data stored directly by GrinderMind
10.Minors
GrinderMind is not intended for minors.
11.Changes to this Privacy Policy
This Privacy Policy may be updated over time. The last-updated date at the top of the document will be changed accordingly.
12.Contact
For any request write to support@grindermind.com.