Privacy Policy
How we collect, use, and protect data.
Privacy Policy
Last updated: 11 November 2026
This policy applies to the Graphia apps for iOS and Android and to the website getgraphia.app.
1. Contacting Us
Data Controller:
Dev Cells di Alberto Paladino
Via XXV Aprile 23, 42010 Rio Saliceto (RE), Italy
VAT (P.IVA): IT03146150358
For questions or privacy requests: [email protected]
2. What Data We Collect
- Handwriting images: the photos you upload, including the second sample in Handwriting Comparison and Love Compatibility. An image can show whatever is written on the page, so please avoid uploading text you do not want processed.
- Details you provide: age or age range, gender, handedness, mood and the analysis options you choose.
- Chat messages: the questions you ask about an analysis and the generated answers.
- Analysis results: AI-generated outputs, including a transcription of the handwritten text.
- Identifiers: an anonymous account ID created automatically when you open the app (no name or email is needed). On Android, the device identifier (Android ID) is sent with analyses. On iOS, our purchase and analytics software uses the identifier for vendor.
- App and device information: platform, app version, operating system version, device model and language.
- Purchase information: subscription and credit status and purchase events. We never receive your card details. On iOS, an Apple attribution token can show whether the app was installed from an Apple search ad.
- Diagnostics and usage: crash logs, performance data and usage statistics.
We do not ask about your health. Older versions of the app had an optional question on this topic, so older records may contain that answer.
If you email us, we receive your email address and your message.
3. How We Use Your Data and Why
- To provide the app (analyses, chat, purchases and credits): necessary to perform our contract with you (GDPR Art. 6(1)(b)).
- To keep the service reliable and secure (detecting crashes, errors and abuse): our legitimate interests (Art. 6(1)(f)).
- To check and improve quality, including reviewing submissions and results to test how the analysis works, and to understand how the apps are used: our legitimate interests (Art. 6(1)(f)).
- To keep this website secure and to count visits, tool use and taps on store links in server logs: our legitimate interests (Art. 6(1)(f)).
- To meet legal obligations, such as accounting rules (Art. 6(1)(c)).
We do not use your data to train AI models. We do not show advertising in the app, and we do not sell your data or share it with third parties for their own independent use. On Android, the analytics software may access the device's advertising ID, depending on your device settings.
4. Third-Party AI Processing
When you start an analysis or ask a question in the chat, your handwriting images, the details you provided, your chat messages and, for the chat, the related analysis are sent from our servers to a third-party AI service provider. The provider processes this data solely on our behalf and according to our instructions. We do not send your account ID to it.
The results are automated assessments of personal traits, created because you ask for them and intended for entertainment and self-discovery. They are not used for advertising or to make decisions with legal or similarly significant effects on you.
5. Your Agreement
In the iOS app, this information is shown once, before your first analysis of any kind, and the app asks for your agreement. If you decline, no data is sent for analysis. In the Android app, an analysis starts only when you choose to submit a sample. In both apps, you can decide not to proceed at any time before submitting.
6. Who Receives Your Data
- AI service provider: as described in section 4.
- Hosting providers: our app backend, which stores images and results, runs on servers located in the European Union. We manage our error-tracking system ourselves.
- Google Firebase: anonymous sign-in and usage analytics; on Android, also crash reporting and remote app settings.
- RevenueCat: subscription and purchase management, using your anonymous ID, purchase information and device identifiers.
- Apple and Google: app distribution and payments, under their own privacy policies.
Some of these providers may process data outside the European Union, including in the United States. Where required, these transfers rely on safeguards such as adequacy decisions or Standard Contractual Clauses.
7. How Long We Keep Data and How to Delete It
- Images, details, results and chat: kept on our servers to provide the service and support, until you ask us to delete them or we no longer need them. There is currently no fixed automatic deletion period. For the chat, we keep the most recent messages and a summary.
- Diagnostics: kept for as long as needed to investigate and fix problems.
- Purchase records: kept for as long as the law requires.
Deleting in the app: deleting an analysis in the app removes it from your device only. To delete the copies on our servers, write to [email protected]. Because Graphia has no login, we may ask for details that help us find your data, such as the approximate date of an analysis and your device or purchase.
8. Security
We use encrypted connections (HTTPS) between the apps and our servers and restrict administrative access to our systems. No system is completely secure, so we cannot guarantee absolute security.
9. Your Rights
Under the GDPR you can ask to access, correct or delete your data, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw it at any time; this does not affect earlier processing. Write to [email protected]; we will reply within one month. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it) or to the authority in your country.
10. Other People and Minors
Upload someone else's handwriting only if you have the right to do so, for example with their permission. You must be at least 14 to use Graphia. If you believe a child under 14 has submitted data, contact us and we will delete it.
11. This Website
This website uses no analytics service and sets no cookies. The signature tool works in your browser: your drawing is not uploaded. Our hosting and network providers process IP addresses and browser details in server logs, which we also use for security and to count visits, tool use and taps on store links.
12. Changes to This Policy
We may update this policy. The date at the top shows the latest version.