Privacy Policy

1. Who We Are

Grimoire is made by Waygate Technologies LLC, a California limited liability company. When this policy says "we," "us," or "our," it means Waygate Technologies LLC.

2. What Grimoire Does With Your Notes

Grimoire is a local-first application. Your notes are stored as plain Markdown files on your own device. We have no access to your note content under any circumstances unless you choose to enable Sync.

If you enable Grimoire Sync, your vault files are transmitted to and stored on our servers solely for the purpose of syncing them to your other devices. We do not read, analyze, index, or share your note content.

3. Information We Collect

If you use Grimoire Sync (optional):

• Your email address and a hashed password, used to authenticate your account
• Your vault files, stored to enable sync across devices
• Basic account metadata (vault name, creation date, subscription status)

Anonymous usage analytics (optional, opt-out available):

By default, Grimoire sends anonymous usage events to help us understand how the app is used. This data includes:

• Which features are used (search, graph view, split panes, etc.)
• Error and crash reports
• Session length
• Whether sync was configured

This data is tied to a randomly generated device ID — not your name, email, or any other identifying information. It never includes note content, file names, or vault structure. You can disable this at any time in Settings → Privacy.

Payment information: If you subscribe to Grimoire Pro, payments are processed by Stripe. We do not store your credit card information. Stripe's privacy policy applies to payment data.

4. How We Use Information

• To provide and operate the Grimoire Sync service
• To process subscription payments via Stripe
• To send transactional emails (account creation, billing receipts)
• To improve the app based on anonymous usage patterns
• To respond to support requests

We do not use your information for advertising. We do not sell or rent your data to third parties.

5. Third-Party Services

Grimoire uses the following third-party services:

• Stripe — payment processing. Stripe Privacy Policy
• PostHog — anonymous usage analytics (if not opted out). PostHog Privacy Policy
• Buttondown — email newsletter (only if you sign up). Buttondown Privacy Policy

6. Data Retention

If you delete your Grimoire Sync account, your vault files and account data are deleted from our servers within 30 days.

Anonymous analytics data is retained by PostHog per their data retention policy. Because it contains no personally identifying information, it cannot be attributed to you and cannot be deleted on request.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@grimoirehq.com. We will respond within 45 days.

8. Colorado Privacy Rights (CPA)

If you are a Colorado resident, you have the right to access, correct, delete, and obtain a copy of your personal data, and to opt out of certain processing. To make a request, contact support@grimoirehq.com.

9. Security

Sync data is transmitted over HTTPS. We take reasonable technical measures to protect account data. However, no system is completely secure, and we cannot guarantee absolute security.

10. Children

Grimoire is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email (if you have a Sync account) or via an in-app notice. The effective date at the top of this page reflects when the policy was last updated.

12. Contact

For privacy questions, requests, or concerns:

Waygate Technologies LLC
support@grimoirehq.com