Privacy Policy

Effective: June 2026 (Beta)

Full legal review in progress — this policy will be updated before public launch.

Beta version notice

Grace45 is currently in private beta. Access is by invitation only. This Privacy Policy describes our current data practices accurately, and will be reviewed by legal counsel before public launch.

Who we are

Grace45 is a wellness companion app designed for women navigating perimenopause, menopause, and postmenopause. We are operated by Aware Work Life LLC. Questions about this policy: privacy@grace45.ai

What we collect

Account information

Your email address (used to create and access your account). We use magic-link login — we never store your password.

Profile information

Your display name, age range (e.g., "45–49"), and menopausal status. We do not collect your date of birth.

Health data you enter

Symptom logs (type, severity, date)
Journal entries (text notes, mood score)
Cycle and period logs
Medications and supplements
Health metrics (weight, sleep, exercise, etc.)
Doctor questions you prepare in the app

AI conversations

Messages you send to Grace AI and the responses you receive. These are stored so you can review past conversations.

Community content

Posts and replies you publish in the community forum, including any anonymous posts (which hide your name but are still associated with your account internally).

Technical data

Device type, operating system, app version, and usage logs. We collect this to keep the app working correctly.

How we use your data

To provide Grace AI responses personalized to your health context
To show you your own symptom trends, journal history, and health logs
To send notification reminders you configure (medication, check-ins)
To operate the community forum
To allow you to export or delete your data
To keep the app secure and diagnose technical issues

We do not sell your data. We do not use your data for advertising. We do not share your identifiable health data with third parties except the processors listed below.

Third-party processors

We use the following companies to operate Grace45. Each processes your data only as necessary to provide their service.

SupabaseDatabase and authentication. Your health data is stored in Supabase's US-hosted PostgreSQL database. Sensitive health fields are encrypted at rest using AES-256-GCM before storage.

GroqAI inference for Grace AI chat. Your conversation messages are sent to Groq to generate responses. Groq does not retain your messages for training.

VercelWeb app hosting and serverless API. US-hosted.

ExpoMobile push notifications for the iOS/Android app.

OpenAIWill be used for community content embeddings (a feature that helps Grace AI surface relevant community posts). This feature is not yet active. When enabled, only posts from users who explicitly opt in will be processed.

Sensitive health data

Grace45 collects reproductive and menstrual health data, which is subject to heightened protection under laws including the Washington My Health MY Data Act and California CPRA.

We do not share this data with third parties for advertising or data brokering
We do not voluntarily disclose this data to law enforcement without a valid legal process
Sensitive fields (journal notes, cycle data, medications) are encrypted before storage
You can export all your data or delete your account at any time in Settings

Full state-specific rights disclosures (Washington, California) will be added before public launch.

Your rights

ExportDownload a copy of all your data from Settings → Data & privacy → Download my data.

DeletePermanently delete your account and all associated data from Settings → Delete account. Deletion is immediate and irreversible.

CorrectUpdate your profile and health information directly in the app at any time.

Withdraw consentYou may withdraw your community AI opt-in at any time by contacting privacy@grace45.ai.

Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days. Aggregate, non-identifiable analytics may be retained longer.

Age requirement

Grace45 is intended for adults 18 years of age and older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us at privacy@grace45.ai and we will delete the account.

Contact us

Privacy questions or requests: privacy@grace45.ai