Privacy Policy

1. Introduction

Drop It (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we handle your information when you use the Drop It mobile application (“App”).

GRIM WORKS SL complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and all applicable Spanish and international privacy laws.

2. Information We Collect

We handle your data with care and transparency. The App processes the following types of information:

A. Data stored locally on your device or via Apple services:

• Workout Data: Exercises performed, sets, reps, weights, and training history.
• Menstrual Cycle Data: Information you choose to provide about your cycle, such as start dates and duration.
• App Usage Data: Anonymous in-app events used strictly to improve app functionality (e.g., screen flow or usage patterns).
• Subscription Status: Managed securely via RevenueCat, which tracks your active subscription through your Apple ID.

B. Data used for marketing analytics:

To understand how users interact with our advertising and improve our campaigns, we collect a minimal set of events:

Events we track:

• Installation of the app
• Completion of initial setup steps (personal info, menstrual setup, full onboarding)
• Subscription purchases

Technical data collected:

• Device type (iPhone or iPad)
• Country or region
• Language of your device
• Timestamps of these events
• Advertising campaign (if you came from an ad on Meta or TikTok)

Advertising Identifier (IDFA):

We may use your device’s advertising identifier (IDFA) for attribution and campaign performance analysis, only if you grant explicit permission when prompted by the system. If you deny permission, no tracking is performed.

3. How We Use Your Information

We use the information listed above to:

• Provide personalized training recommendations based on your data
• Adapt your training dynamically according to your performance and menstrual phase
• Sync your preferences and settings via iCloud, if enabled
• Validate and manage your subscription using RevenueCat
• Understand and improve the onboarding experience through anonymous analytics
• Measure the effectiveness of our ad campaigns through attribution tools (Meta, Apple SKAdNetwork, etc.). Some data may be used for tracking if you grant consent, in compliance with Apple’s App Tracking Transparency (ATT) framework.

We do not use your data for profiling, third-party marketing, or personalized in-app advertising.

4. Data Storage and Sync

• Local Storage: All workout and cycle data remains on your device. We do not upload this data to our servers.
• iCloud: If enabled, your preferences are synced through your personal iCloud account. You can disable this at any time in your iOS settings.
• RevenueCat: Subscription status is securely managed via RevenueCat and your Apple ID. We do not have access to your billing information.
• No Data Selling: We never sell or share your personal data with third parties outside those listed in this policy.

5. Payments and Subscriptions

All purchases and subscriptions are handled exclusively through Apple’s App Store.

We do not process, store, or access your payment information.

Your subscription is linked to your Apple ID and can be managed at any time via: iOS Settings > Apple ID > Subscriptions

6. Advertising and Analytics

If you consent to tracking when installing the app, we collect limited, non-identifiable data to analyze our marketing performance.

We may share this data only with:

• Meta (Facebook/Instagram): To measure ad campaign performance
• TikTok (if used in future campaigns): For attribution purposes
• Apple (SKAdNetwork): For anonymous, aggregated attribution

This information is used strictly to optimize our advertising and reach the right audience.

We do not show ads inside the app. We do not sell or monetize your data in any way.

7. App Tracking Transparency (ATT)

In accordance with Apple’s ATT framework, Drop It asks for your permission to track your activity across other apps and websites. This allows us to understand which advertising campaigns helped you find our app. You are free to allow or deny tracking — either choice will not affect your experience within the app.

You can manage your preferences at any time in: iOS Settings > Privacy & Security > Tracking

8. Your Rights

Even though we do not collect or store personal data externally (outside attribution analytics), you are always in control:

To delete your app data (training, cycle, preferences):

Go to Settings > Delete All Data. This will permanently remove all data from your device and iCloud.

To manage your advertising data:

• Meta deletes analytics events automatically after 12 months
• You can request early deletion at: administracion@grimworks.es
• Apple handles SKAdNetwork data per its privacy policy

You are never required to log in or create an account.

We do not use external servers or custom backends.

9. Security

We design Drop It with privacy and security in mind:

• All personal data is stored locally or via your iCloud account
• No external databases are used
• We recommend enabling Face ID, Touch ID, or passcodes to secure access to your device

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated “Last Updated” date.

We encourage you to review this policy periodically.

11. Contact

If you have any questions, concerns, or feedback about this Privacy Policy, please contact us at:

📧 administracion@grimworks.es