Privacy Policy

Effective date: October 4, 2026

This Privacy Policy explains how PixieForge ("PixieForge," "we," "us," or "our") collects, uses, discloses, and protects information when you use the Holy Grail Product Tracker mobile application, its websites, and related services (collectively, the "Service").

By using the Service, you acknowledge the practices described in this Privacy Policy. This policy does not replace our Terms of Service, which govern use of the Service, Smart Import Tokens, purchases, and limitations concerning product and restaurant information.

1. Information We Collect

Information you provide

• Account information: email address, optional name, optional age, optional gender, display name, authentication provider, account identifier, and information needed to manage your account.
• Saved content: product and restaurant records, brands, product names, barcodes, ingredients, prices, store links, restaurant addresses and hours, categories, ratings, favorites, notes, tasks, and similar information you choose to save.
• Photos and images: photos you choose from your device, capture with the camera, select from search results, or optionally attach to feedback. Locally selected photos may remain on your device; external image links and information needed to display a saved image may be associated with your saved record. Feedback screenshots are compressed before upload and stored with the related support submission.
• Community and support content: recommendations, availability reports, written feedback, optional feedback screenshots, recall submissions, support messages, and other content you submit.
• Smart Import requests: product or restaurant names, brands, barcodes, search terms, shared links, Google Maps links, and the results you select.

Please do not place highly sensitive personal information in free-form fields such as notes. You control what you enter into those fields.

Information collected automatically

• Device and app information: a pseudonymous installation identifier, device type, operating system, app version, language, and similar technical information.
• Usage and diagnostic information: feature interactions, import attempts and outcomes, app-share events and the destination category reported by your device (when available), timestamps, error and diagnostic logs, performance data, ad interactions, and information used to detect service problems.
• Security and abuse-prevention information: Firebase App Check attestations and salted or hashed versions of device identifiers, IP addresses, and deleted-account identifiers used for authentication, fraud prevention, rate limits, repeat-deletion detection, and service security. PixieForge does not use these hashes to build advertising profiles.
• Advertising information: Google Mobile Ads and its advertising partners may process advertising identifiers, IP address, approximate location derived from IP, device information, consent choices, and ad-view or interaction data. The exact data depends on your device settings, region, and advertising choices.

Purchases, tokens, and rewards

We maintain records such as your Smart Import Token balance, token grants and uses, Supporter status, purchase product, transaction identifier, rewarded-ad grant, and related ledger entries. App-store and payment providers process payment credentials; PixieForge does not receive or store your full payment-card number. Smart Import Token availability and expiration are governed by the Terms of Service and the disclosures shown when tokens are offered.

Device permissions

Depending on the features you use, the app may request permission to access the camera for barcode scanning and taking photos, the photo library for selecting images, and notifications for reminders. We access these features only after permission is granted. You may change permissions in your device settings. Holy Grail does not intentionally record or retain audio.

2. How We Use Information

We use information to:

• create and secure accounts, authenticate users, and synchronize saved content;
• provide product, barcode, image, web-link, restaurant, and Google Maps import features;
• maintain Smart Import Token balances, verify purchases and rewarded-ad grants, and prevent duplicate or fraudulent tokens;
• personalize and organize the Service according to your saved products, restaurants, categories, ratings, and preferences;
• provide customer support and respond to privacy or account requests;
• operate, troubleshoot, secure, measure, and improve the Service;
• show advertising, measure advertising performance, and honor consent or opt-out choices;
• develop aggregated or de-identified product and service analytics as described below; and
• comply with law, enforce our agreements, and protect users, PixieForge, and others.

3. How We Disclose Information

We may disclose information in the following circumstances:

Service providers

Vendors process information for us to provide hosting, databases, authentication, security, app integrity, customer support, purchases, advertising, and related infrastructure. These providers include Google services such as Firebase, Google Sign-In, App Check, Google Play, Google Maps, and AdMob, as well as RevenueCat when in-app purchases are enabled.

Search, import, and data providers

When you request a Smart Import or image search, the search terms, barcode, product or restaurant name, brand, or URL needed for the request may be sent to the relevant source website or data provider. Providers may include SerpAPI, Apify, Barcode Lookup, UPCitemdb, INCI-related services, Open Food Facts, Open Beauty Facts, Open Pet Food Facts, Jina AI, Google Maps, and other product, retailer, manufacturer, restaurant, or public-information sources. Those parties may receive technical request information such as an IP address. We do not intentionally send your account email, private notes, or full saved history with a routine import query.

Advertising and measurement partners

Google Mobile Ads and participating advertising partners may collect or receive the advertising and device information described above to deliver, limit, personalize, secure, and measure ads. Rewarded ads are optional. Depending on your region and choices, ads may be personalized, non-personalized, or limited.

Legal, safety, and business reasons

We may disclose information when reasonably necessary to comply with law or legal process, investigate fraud or abuse, enforce our agreements, protect safety or rights, or respond to an emergency.

If PixieForge or the Service is involved in a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, sale of company assets, or transfer of all or part of the Service, information may be disclosed to professional advisers and prospective transaction parties under appropriate confidentiality protections. If the transaction is completed, account records, saved content, Smart Import balances and transaction records, and other information associated with operating the Service may transfer to the acquiring or successor entity as business assets.

Any acquiring or successor entity must handle transferred personal information consistently with the Privacy Policy applicable when the information was collected, unless users receive notice and any choice or consent required by applicable law for a materially different use. Personal information will not be sold as a standalone asset unrelated to a transfer of the Service, except where permitted by applicable law and consistent with the privacy commitments made to users.

4. Product Analytics and De-identified Information

PixieForge may use information about products, brands, ingredients, categories, prices, retailers, availability, restaurants, and feature usage to create aggregated statistics and de-identified insights. Examples include product popularity, category trends, commonly saved ingredients, general price trends, retailer availability patterns, and overall feature performance.

We may use, publish, license, or sell these aggregated or de-identified analytics to business partners, researchers, retailers, brands, or other organizations. We do not provide those partners with your email address, account identifier, private notes, an identifiable user profile, or a product history tied to you.

We use reasonable technical and organizational measures intended to prevent this analytics information from being linked back to an individual. To the extent required by applicable law, PixieForge will maintain de-identified information in de-identified form, will not attempt to re-identify it, and will require recipients not to attempt re-identification. We may retain and use information that is no longer personal information because it cannot reasonably identify or be linked to a person.

5. Sale, Sharing, and Targeted Advertising

PixieForge does not sell personal information for money and does not sell or license identifiable user data as product analytics. Our licensing or sale of aggregated or de-identified product analytics is not a sale of personal information when that information cannot reasonably identify or be linked to a person.

Some privacy laws define "sale," "sharing," or "targeted advertising" broadly enough to include certain disclosures by advertising technology. Google Mobile Ads and participating advertising partners may process identifiers and activity data for advertising as described in this policy. Where applicable, you may use the privacy choices presented in the app or by the advertising provider, adjust your mobile advertising settings, or contact us to exercise an available opt-out right.

6. Legal Bases for Processing

If laws in the European Economic Area, United Kingdom, or Switzerland apply, we process personal data as necessary to perform our contract with you, pursue legitimate interests such as operating and securing the Service, comply with legal obligations, and obtain consent where required, including for certain advertising technologies. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.

7. Data Retention

We retain account information and saved content while your account is active and as needed to provide the Service. Retention periods vary based on the type of information, the reason we use it, legal and accounting requirements, dispute resolution, fraud prevention, and technical backup schedules.

• When you delete your account, we delete or de-identify account data as described in the account-deletion process, subject to limited legal, security, fraud-prevention, and backup exceptions.
• Pseudonymous device and IP rate-limit records and salted one-way deleted-account identity hashes may be retained to detect abuse, repeated account creation/deletion, and enforce rolling limits. These hashes cannot be used to recover the original email address or user ID.
• Transaction, purchase, and token-ledger records may be retained as required for accounting, fraud prevention, disputes, or legal compliance.
• Aggregated or de-identified information that can no longer reasonably identify you may be retained for a longer period.

8. Your Choices and Privacy Rights

You may update much of your saved information directly in the app. Depending on where you live, you may also have rights to request access, correction, deletion, or a portable copy of personal information; to object to or restrict certain processing; to opt out of certain sales, sharing, or targeted advertising; to withdraw consent; and to appeal a denied request.

To submit a request, email pixieforge.support@gmail.com. Describe the request and use the email address associated with your account. We may need to verify your identity before acting. Authorized agents may submit requests where permitted by law, subject to verification of their authority. We will not discriminate against you for exercising an applicable privacy right.

You may control camera, photo-library, notification, and advertising settings through your device. Advertising consent and privacy choices may also be available in the app or through Google’s ad controls.

9. Account Deletion

You can request permanent account deletion in Holy Grail by opening the gear icon, choosing User Settings, and selecting Delete account. If you cannot access the app, use our account-deletion page or email support from the address associated with your account.

Deleting an account removes the account and associated saved content from active systems, including products, restaurants, categories, ratings, notes, tasks, community contributions tied to the account, and the Smart Import balance. Some limited information may remain temporarily in backups or be retained when reasonably necessary for security, fraud prevention, transaction records, disputes, or legal compliance. Information already converted into aggregated or de-identified form is not associated with the deleted account.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated access, Firebase security controls, app attestation, encryption in transit, and restricted administrative access. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.

11. International Processing

PixieForge and its providers may process information in the United States and other countries where privacy laws may differ from those in your location. Where required, we rely on legally recognized transfer mechanisms and provider contractual protections.

12. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it. Additional age or parental-consent requirements may apply depending on the user’s location.

13. Third-party Content and Links

The Service may display information or links from retailers, manufacturers, restaurants, public databases, search providers, or other third parties. Their privacy practices are governed by their own policies. This Privacy Policy covers PixieForge’s practices and does not control how an unaffiliated third party handles information when you visit its site, app, or service.

14. Changes to This Policy

We may update this Privacy Policy as the Service, our partners, or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required by law. Material changes will apply prospectively unless otherwise permitted by law.

15. Contact Us