Buffgrade is a gamified task and personal-development app published by INTWISCHA Technologies LLC ("INTWISCHA", "we", "us", "our"). This Privacy Policy explains what information the Buffgrade mobile app and related services (together, the "App") collect, how we use it, who we share it with, and the choices you have.
Effective date: October 16, 2026
INTWISCHA Technologies LLC is the data controller for personal information processed through the App. By using the App you acknowledge this Privacy Policy. If you do not agree with it, please do not use the App.
Most of what you put into Buffgrade stays in a database on your device. You can use the core App without an account. Information leaves your device only in the cases listed below.
What it includes: Tasks ("missions"), descriptions, due dates, schedules, skills, attributes, ranks, XP, rewards, reflections, workouts, exercises, sets, rest days, saved locations and settings
When it is collected: Whenever you use the App
Where it goes: Stored only on your device, unless you turn on Cloud Backup or Live Sync
What it includes: Email address and password, or your name, email address and Google account identifier if you sign in with Google
When it is collected: Only if you create an account or sign in
Where it goes: Our cloud provider (Supabase). Passwords are stored as one-way hashes
What it includes: A copy of your App content, a device identifier we generate, and timestamps
When it is collected: Only if you buy and turn on Cloud Backup or Live Sync
Where it goes: Our cloud provider (Supabase), linked to your account
What it includes: Products bought, transaction and receipt identifiers, purchase dates, subscription status, and the account ID linked to cloud purchases
When it is collected: When you buy something in the App
Where it goes: Apple or Google process the payment. RevenueCat and our servers receive purchase status. We never receive your card or bank details
What it includes: Your device's GPS location, and the addresses you type for saved places
When it is collected: Only if you use location-based tasks and grant location permission
Where it goes: Processed on your device to detect arrival at saved places. Addresses you search are sent to OpenStreetMap's Nominatim service to find coordinates
What it includes: Task names, descriptions, due dates and repeat settings
When it is collected: Only if you connect Google Calendar
Where it goes: Written as events to your own Google Calendar
What it includes: Automatically collected app events (app opens, sessions, screens viewed), the sign-in method you use, and device and app-instance information. Never the content of your tasks, skills or notes
When it is collected: Only if you turn on analytics in Settings. It is off by default
Where it goes: Google (Firebase Analytics)
What it includes: Error reports, stack traces, device model, operating system, app version and approximate timestamps. We configure this not to send personal identifiers
When it is collected: When the App crashes or hits an error
Where it goes: Sentry
What it includes: Device advertising identifier (Android Advertising ID or Apple IDFA where permitted), IP address, device and app information, and ad interactions
When it is collected: When ads are shown in the free version
Where it goes: Google AdMob
What it includes: Your IP address and the map area being viewed
When it is collected: When you open the map on the Locations screen
Where it goes: OpenStreetMap tile servers
We do not collect your contacts, photos, camera, microphone, health records from other apps, or browsing history. Reminders and home-screen widgets are generated on your device; we do not run a push-notification server.
We use information only to run the App, keep it working, and support the features you choose. We do not sell your personal information, and we do not use your App content to build advertising profiles.
For each purpose below, we list the information used and, for users in the EEA and UK, the legal basis.
Provide core features (tasks, XP, skills, reminders, widgets, workouts). Information used: App content, settings. Legal basis: performance of our contract with you.
Create and secure your account; sign you in. Information used: account information. Legal basis: performance of contract.
Back up, restore and sync your data across devices. Information used: Cloud Backup and Live Sync data, account information. Legal basis: performance of contract.
Process purchases, restore them and unlock paid features. Information used: purchase information, account ID. Legal basis: performance of contract; legal obligations (tax, accounting).
Arrival alerts for location-based tasks. Information used: precise location, saved locations. Legal basis: your consent, given through the device permission.
Add tasks to your Google Calendar. Information used: Google Calendar data. Legal basis: your consent.
Understand how features are used and improve the App. Information used: usage analytics. Legal basis: your consent (analytics is off unless you turn it on).
Find and fix crashes and bugs. Information used: crash and diagnostic data. Legal basis: our legitimate interest in a stable, secure App.
Show ads in the free version. Information used: advertising data. Legal basis: your consent where required by law; otherwise our legitimate interest in funding the free version.
Respond to support requests and legal requests; prevent fraud and abuse. Information used: information you send us; relevant account and purchase records. Legal basis: legitimate interests; legal obligations.
If you withdraw consent (for example, by turning off analytics or revoking location permission), processing based on that consent stops. This does not affect processing that already took place.
We share information only with the service providers below, only as needed for the purpose listed. Each one handles data under its own privacy policy and, where it acts for us, under contract terms that limit its use of the data.
Supabase, Inc. Account sign-in, Cloud Backup storage and the Live Sync database. Receives account information and Cloud Backup and Live Sync data. Privacy policy
RevenueCat, Inc. Manages Cloud Backup and Live Sync purchases and subscription status. Receives purchase information and your account ID. Privacy policy
Apple and Google app stores. Process payments and refunds. Receive payment and purchase details, under your store account. Privacy policies: Apple, Google
Google AdMob. Serves banner ads in the free version. Receives advertising data. How Google uses data from apps
Google Firebase Analytics. Usage analytics, only if you opt in. Receives usage analytics. Firebase privacy
Google Sign-In and Google Calendar. Optional sign-in and calendar sync. Receives account information and Google Calendar data. Google Privacy Policy
Functional Software, Inc. (Sentry). Crash and error reporting. Receives crash and diagnostic data. Privacy policy
OpenStreetMap Foundation. Map tiles and address search (Nominatim). Receives your IP address, the map area viewed and addresses you search. OSMF Privacy Policy
Google user data. Buffgrade's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google Calendar access only to create, update and delete the events for your own tasks. We do not read your other calendar events, transfer that data to others, or use it for advertising.
We may also disclose information if required by law, to protect the rights, safety or property of our users or the public, or as part of a merger, acquisition or sale of assets. In a sale, we will require the buyer to honor this Privacy Policy or give you notice of any change.
The App asks for a permission only when you use the feature that needs it. You can change any permission at any time in your device settings.
Precise location (while in use). Used to set saved places and complete location-based tasks. If you decline, location-based tasks are unavailable; everything else works.
Location monitoring service. Alerts you when you arrive at a saved place while you have open location-based tasks. On Android it runs as a foreground service with a visible notification, using the while-in-use permission above. The App does not ask for "Allow all the time" access. If you decline, you get no arrival alerts.
Notifications. Task reminders, pre-decay warnings, weekly recaps and arrival alerts. If you decline, no reminders or alerts are shown.
Exact alarms and start at boot. Deliver reminders at the time you set, including after a restart. If you decline, reminders may arrive late or not after a restart.
Internet and network state. Sign-in, backup, sync, purchases, ads, maps and crash reports. If you decline, the App works offline; online features are unavailable.
In-app billing. Buy and restore purchases through Google Play or the App Store. If you decline, you cannot buy paid features.
How location is handled. Location is checked on your device against the places you saved. Your location history is not uploaded to us or stored on our servers. Saved places are part of your App content, so they are included in Cloud Backup and Live Sync if you turn those on.
Files. When you export or import a backup file, you pick the file location through your device's system file picker. The App does not scan your files.
We keep personal information only as long as needed for the purposes in this policy. When you delete your account, we delete your account, Cloud Backups and Live Sync data within 30 days.
App content on your device: until you delete it, clear the App's data or uninstall the App. We cannot access or recover it.
Account information: until you delete your account.
Cloud Backups: the 7 most recent backups for your account. Older ones are deleted automatically. All are deleted with your account.
Live Sync data: until you delete your account. Turning sync off on a device does not delete the cloud copy.
Purchase records: as long as required for tax, accounting and legal purposes.
Crash and diagnostic data: up to 90 days at Sentry.
Usage analytics and advertising data: under Google's retention settings and policies.
How to delete your account and data:
In the App, go to Settings → Integrations → Cloud → Delete account, or
Email us at support@buffgrade.com from the address linked to your account. Use this if you no longer have the App installed.
Deleting your account removes your account information, all Cloud Backups and all Live Sync data from our servers. It does not delete App content stored on your devices; uninstall the App or clear its data to remove that. App store subscriptions must be cancelled separately in your Apple or Google account settings, or you may still be charged.
You can control most data collection from inside the App and your device settings:
Analytics: off by default; turn it on or off in Settings.
Ads: reset or delete your advertising ID, or opt out of personalized ads, in your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Tracking). Where the law requires it, the App asks for your consent before showing ads, and you can change your choice later in Settings → Data & About → Ad privacy choices. You can also turn ads off entirely with the Show ads switch in the same place.
Location, notifications and calendar: revoke permission in device settings, or disconnect Google Calendar in the App.
Cloud features: turn off Live Sync, sign out, or delete your account at any time.
Your data: export your App content to a file from Settings at any time.
Rights under privacy laws. Depending on where you live, including the European Economic Area, the United Kingdom, Switzerland, California and other US states with privacy laws, you may have the right to:
know what personal information we hold about you and get a copy of it;
correct inaccurate information;
delete your information;
receive your information in a portable format;
object to or restrict certain processing, and withdraw consent;
opt out of the "sale" or "sharing" of personal information, or its use for targeted advertising;
not be discriminated against for using these rights.
To use any of these rights, email support@buffgrade.com. We will verify your request using the email address on your account and respond within 30 days, or sooner if the law requires. You may use an authorized agent where the law allows. If we deny a request, you can appeal by replying to our decision. EEA and UK users can also complain to their local data protection authority.
California notice. We do not sell personal information for money. Showing ads through Google AdMob may count as "sharing" for cross-context behavioral advertising under California law. You can opt out by limiting ad tracking in your device settings, as described above. In the past 12 months we collected the categories listed in Section 2 (identifiers, commercial information, geolocation, internet or network activity, and user-provided content) for the purposes in Section 3.
Children. The App is not directed to children under 13, and we do not knowingly collect personal information from them. In the EEA and UK, users under 16 (or the lower age set by local law) need a parent's consent to create an account. If you believe a child has given us personal information, email support@buffgrade.com and we will delete it.
Security. Data sent between the App and our servers is encrypted in transit with TLS. Server access is restricted so each account can read and write only its own backups and sync data. Passwords are stored as one-way hashes by our authentication provider. No system is completely secure, so we cannot guarantee absolute security. Protect your device with a passcode, because App content on it is not separately encrypted by us.
International transfers. INTWISCHA Technologies LLC is based in the United States, and our service providers may process data in the United States and other countries. When we transfer personal information from the EEA, UK or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework.
We may update this Privacy Policy as the App changes or the law requires. We will post the new version at https://www.buffgrade.com/privacy and update the effective date. If a change materially affects how we use your personal information, we will notify you in the App or by email before it takes effect.
Questions, requests or complaints:
INTWISCHA Technologies LLC
200 E Verona Ave Unit #9027
Verona, WI 53593, United States
Email: support@buffgrade.com
Website: https://www.buffgrade.com