Privacy Policy

When you use Grimbang, we collect information necessary to provide and improve our service:

• Account Information: Name, email address, and profile picture from your Google account when you sign in.
• Usage Data: Prompts you submit, thumbnails you generate, and interaction history within the dashboard.
• Payment Information: Subscription plan, transaction history, and billing details processed securely through our payment provider (Polar).
• Device Information: Browser type, operating system, and IP address for security and analytics purposes.

• To generate AI-powered thumbnails based on your prompts
• To manage your account, subscription, and credit balance
• To improve the quality of our AI generation models and service
• To communicate service updates, billing notices, and support responses
• To detect and prevent fraud, abuse, or unauthorized access

Your data is stored securely using Supabase infrastructure with encryption at rest and in transit. Generated thumbnails are stored in secure cloud storage and are accessible only to your account.

We implement industry-standard security measures including SSL/TLS encryption, Row Level Security (RLS) policies, and secure authentication via OAuth 2.0.

We use the following third-party services to operate Grimbang:

• Google (Gemini API): For AI-powered thumbnail generation. Prompts and attached images are sent to Google's API for processing.
• Supabase: For authentication, database, and file storage.
• Polar: For payment processing and subscription management.

Each third-party provider operates under their own privacy policy. We recommend reviewing their policies for details on how they handle data.

You have the right to:

• Access the personal information we hold about you
• Request correction or deletion of your data
• Export your generated thumbnails at any time
• Cancel your subscription and delete your account

To exercise any of these rights, please contact us at the email address provided below.

We use essential cookies to maintain your authentication session and preferences. We do not use third-party tracking or advertising cookies.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.