GritXP Privacy Policy

Last updated: May 13, 2026
Effective date: May 13, 2026

Who we are
 
GritXP is owned and operated by Envaden LLC (“we”, “us”, “our”, “GritXP”), a limited liability company registered in Delaware, United States. You can reach us at info@envaden.com.

Who GritXP is for
 
GritXP is designed for users ages 13 and older. We do not direct GritXP at children under 13 and we do not knowingly collect information from anyone under 13. If you are a parent and believe your under-13 child has used GritXP, please email info@envaden.com and we will help you remove any associated data.

Where GritXP is available
 
At launch, GritXP is offered in the United States only. We do not currently make the app available in the European Union, the United Kingdom, or other regions outside the US. If we expand to other regions, we will update this policy.

What stays on your device (and never reaches us)
 
Almost everything you do in GritXP is stored locally on your phone using your operating system’s secure on-device storage. We do not have a copy. This includes:
 

• Your chosen avatar, callsign, and profile setup answers (school context, class selection)

• Your XP, level, streak, and badges

• Every mission and quest you complete, skip, or recycle

• Your written mission submissions and journal entries

• Any photos you take as mission proof

• Any voice notes you record

• Your Coach Intel notes and XP transaction history

• Your in-app reward redemptions and streak-freeze inventory

If you delete the GritXP app, this data is permanently erased — there is no server copy to recover.

What data leaves your device
 
A small amount of information is sent to our servers (hosted on Cloudflare) so that certain features can work. Below is the complete list of what we send, when, and why.
 
From all users (free and Plus)
 
1. Callsign and game stats — for Squad and League leaderboards. When you join a Squad or are placed in a weekly League cohort, we send your callsign, level, XP, weekly XP, streak length, tier, and squad name to our server so other players in your cohort can see you on the board. We also send a randomly-generated device install ID so we can update your own row over time. We do not send your real name, email address, age, exact location, contact list, or any advertising identifier.
2. Anonymous gameplay events — for understanding usage at the cohort level. We log basic events such as “a mission was completed,” “an arcade game ended at round 3,” or “the app was opened.” Each event includes your device’s operating system, OS version, a screen-size category, the app version, the day of week, and a coarse time bucket. Events do not include your callsign, mission text, photos, voice notes, or any personal identifier.
3. Daily content-pool telemetry — for knowing when to ship new quests. Once per day at most, the app sends the count of remaining quests in your pool along with a device install ID. This lets us see when our active player base is approaching the end of the current content library so we can ship new missions in time.
4. Subscription receipts — handled by Apple and RevenueCat. When you start a GritXP Plus subscription or free trial, Apple sends your purchase receipt to RevenueCat (our subscription management service) to confirm your entitlement. Apple shares an opaque, Apple-controlled user identifier with RevenueCat — not your Apple ID, email, or name. We use this only to know whether your device should have access to Plus features.

Only from GritXP Plus subscribers

Plus features require an active paid subscription, started through Apple’s in-app purchase flow (which on devices used by minors is gated by the device’s payment authorization — typically a parent’s Face ID, Touch ID, password, or Apple Family Sharing approval).

5. Mission submission text — for personalized AI coaching. When a Plus subscriber submits a written mission response, that text is sent to our processor (Cloudflare Workers, US data centers) and then to our AI model provider (Anthropic, makers of Claude) to generate a feedback response. The text is processed in transit, used to produce the response, and is not retained by Anthropic beyond the duration of the request under their API terms. Anthropic does not use submissions to train its models. We do not store the text on our servers either; only the resulting coach note is saved back to your device.
6. In-app AI chat conversations (for TOOL MASTERY and AI COLLAB missions only). On these two Plus-only chat experiences, each message you send is processed through the same Cloudflare → Anthropic path described above, with the same retention and training rules.
7. Parent Mission Report inputs — when you open the Parent Zone report. Aggregated, non-identifying summaries of your recent mission activity (counts, skills, levels) are sent to generate the 3-sentence performance summary shown to parents. The same retention rules apply.
8. Recycled-quest variation — for fresh scenarios on repeated missions. When a previously-completed quest re-enters your daily pool, the original task description (no user submission text) is sent to generate a fresh scenario with different characters and setting. Same retention rules.

Camera, microphone, and photo library
 
GritXP may ask for permission to use your camera to take photos as mission proof, your microphone for voice notes, and your photo library to set an avatar. Photos and voice notes are stored on your device only and never uploaded to our servers, even on Plus. If you deny these permissions, the corresponding features simply won’t be available and the rest of the app works normally.

Push notifications
 
GritXP may send push notifications to remind you of your daily missions and streak. You can disable them anytime in your device Settings → Notifications → GritXP.

Cookies, ads, and third-party tracking
 
GritXP does not display advertisements, integrate any ad networks, use any third-party analytics SDKs (no Google Analytics, no Facebook SDK, no Mixpanel), or use cookies for tracking. We do not sell or share any user data with data brokers.

Service providers we use
 
We rely on a small number of service providers to make the app work. Each is described below, along with what they do for us and what data they receive.
 

• Apple App Store — Distributes the app and handles payments and subscription billing. Apple receives standard purchase data in accordance with its own terms.

• RevenueCat — Confirms which subscriptions are currently active so we know whether your device should have access to Plus features. RevenueCat receives an opaque, Apple-controlled purchase identifier; it does not receive your name or email.

• Cloudflare — Hosts our request proxy and our gameplay and leaderboard database in the United States. Cloudflare receives Squad and League data, anonymous gameplay events, and the bodies of AI requests in transit.

• Anthropic (Claude API) — Generates AI coaching and chat responses for Plus subscribers. Anthropic receives the mission text submitted by Plus subscribers, processed in transit only. The text is not retained beyond the duration of the request and is not used to train Anthropic’s models.
   

We do not authorize any of these providers to use your data for purposes outside of providing the services to us.

Data retention
 

• On-device data: kept until you delete the app or clear it from in-app Settings.

• Squad/League records: retained while you participate; an inactive install ID is purged from our server within 90 days of last activity.

• Anonymous gameplay events: retained for up to 12 months for trend analysis, then deleted.

• Subscription records: retained as long as Apple and tax law require.

• AI request bodies (Plus only): not retained — discarded after the response is returned.

Your choices
 

• Stop all server contact: uninstall the app, or disable Squad/League features in the app’s Settings.

• Erase your data: delete the app from your device. To also remove your row from the Squad/League server, email info@envaden.com with the callsign you used and the rough date you last played; we will locate and delete the corresponding install record.

• Cancel a subscription: manage subscriptions in iOS Settings → [your name] → Subscriptions → GritXP Plus.

• California residents: under the California Consumer Privacy Act (CCPA/CPRA) you have the right to know what categories of personal information we hold about you, to request deletion, and to not be discriminated against for exercising those rights. To exercise these rights, email info@envaden.com. Because we collect so little to begin with, most requests resolve quickly.

Children under 13
 
GritXP is not intended for use by children under the age of 13, and the in-app onboarding screens reflect this. We do not knowingly collect any information from users under 13. If you believe a user under 13 has used GritXP, please email info@envaden.com and we will promptly delete any associated data.

Changes to this policy
 
If we make material changes, we will update the “Last updated” date above and post a notice in the app the next time you open it. Continued use after the effective date constitutes acceptance of the updated policy.


Contact
 
Envaden LLC
Email: info@envaden.com