1. Who is responsible
Gravity App B.V., Amsterdam, Netherlands ("we", "us") is the controller of the personal data described in this policy. This policy covers the website iamgravity.eu and the Gravity desktop app's connection to our servers (sign-in and license checks).
Questions or requests:[email protected].
2. What we collect, why, and for how long
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Account: e-mail address and a salted password hash | Create and secure your account, let you sign in and download | Contract (Art. 6(1)(b)) | Until you delete the account |
| Licenses: plan, dates, a one-way hash of the license key, machine identifier, machine name and app version of each activated computer | Issue and check licenses, limit the number of activations | Contract (Art. 6(1)(b)) | Until you delete the account |
| Desktop sessions: IP address, user agent, machine identifier, issue and expiry time | Keep the app signed in securely, detect misuse | Legitimate interest: security (Art. 6(1)(f)) | Deleted 90 days after the session expires or is revoked |
| Download records: time, IP address, user agent | Prove delivery, prevent abuse of the download | Legitimate interest (Art. 6(1)(f)) | Deleted after 12 months |
| Payments: amount, date, status and the payment provider's session reference (never your card number) | Process Pro orders, keep accounting records | Contract and legal obligation (Art. 6(1)(b) and (c)) | As long as accounting law requires, up to 10 years. After you delete your account the records stay but are no longer linked to you. |
| Gravity 2 updates: e-mail address, language, where you signed up, time of consent | Send you news about Gravity 2 and its release, nothing else | Consent (Art. 6(1)(a)) | Until you unsubscribe. The entry is deleted 12 months after you unsubscribe. |
| Messages you send us: your e-mail address and the content | Answer support and sales questions | Legitimate interest and pre-contract steps (Art. 6(1)(f), (b)) | As long as needed to handle the request |
| Technical logs of our servers and network provider: IP address, requested page, browser | Operate the site, protect it against attacks | Legitimate interest: security (Art. 6(1)(f)) | Short rotation periods set by the provider |
We do not use analytics or advertising trackers on this website, and we do not sell personal data.
3. Your code and the desktop app
Gravity runs on your computer. We do not receive your source code, your workspace files or your prompts. The app talks to our servers only to sign you in and to check your license.
The AI model you connect is your choice. With a local model such as Ollama or LM Studio your prompts stay on your machine. With a cloud provider your prompts go to that provider under its own terms and privacy policy, and we are not involved. The app has an optional, opt-in setting for anonymous usage statistics, which is off unless you turn it on.
4. Who receives data
- Stripe and PayPal:process card and PayPal payments. They receive the data needed to pay and act as independent controllers for their own compliance duties. Their scripts load only on the payment page.
- Our e-mail delivery provider:sends the messages we send you (for example password resets and Gravity 2 news).
- Cloudflare and our hosting provider:deliver the website and protect it against attacks.
- GitHub:only if you choose to report a bug in our public issue tracker. That is your own interaction with GitHub.
These providers may process data outside the European Economic Area. Where that happens we rely on an adequacy decision or on standard contractual clauses.
5. Cookies
We use only the cookies needed to run the site and the one that remembers your language. They are listed in ourPolítica de cookies. Because none of them track you, there is no cookie banner.
6. Your rights
Under the GDPR you have the right to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format and withdraw consent at any time.
- Signed in users can download a copy of their data and delete their account on theTus datospage, without contacting us.
- Every Gravity 2 e-mail contains a one-click unsubscribe link.
- For anything else write to[email protected]. We answer within one month.
You also have the right to complain to a data protection authority, for example the Dutch Autoriteit Persoonsgegevens or the authority in your own country.
7. Providing data and automated decisions
An e-mail address and password are required to create an account and download Gravity. Without them we cannot offer the account. We do not take decisions about you based solely on automated processing.
8. Security
We use encrypted connections, salted one-way hashing for passwords, license keys and session tokens, and access limited to the people who need it. No system is perfectly secure. If a breach puts your rights at risk we will notify you and the authority as the law requires.
9. Children
Gravity is a professional tool and is not directed at children under 16. If you believe a child has given us personal data, write to us and we will delete it.
10. Changes
If we change this policy in a material way we will tell you by e-mail or with a notice on the site. The date at the top shows the latest revision.
11. Contact
Gravity App B.V.Amsterdam, Netherlands
Email:[email protected]