Privacy Policy

Introduction

This privacy policy ("Privacy Policy") applies to all visitors and users of the Holy Grail web and mobile applications (collectively, "Holy Grail," "App," or "Apps"), which are offered by Holy Grail Team and/or any of its affiliates ("we," or "us"). This Privacy Policy describes how we process your personal information, collect information through the use of cookies and related technologies, and how you can access and update your personal information. It also describes the data protection rights that may be available under your country's or state's laws. Please read this Privacy Policy carefully. By accessing or using any part of the App, you acknowledge that you have been informed of and consent to our practices with regard to your personal information.

Applicability of this Privacy Policy

This Privacy Policy applies to any personal information collected through Holy Grail. It does not apply to personal information or other data that we process on behalf of our customers (collectively, "Customer Data") as a service provider. We will only use Customer Data (including any personal information) to provide services to customers, and our use of your Customer Data will be governed by the terms of service or customer agreement between us and the customer.

If you are using the App as an employee, contractor, or representative of a customer, please contact the customer directly for privacy-related questions.

Personal Information We Collect

You may choose to interact with our Apps in ways that provide us with your personal information. For example, when creating an account on Holy Grail, we collect your username, your email address, and the verification status of your email address. If you choose to sign in with Google or Apple instead, we receive your email address and basic profile information from that provider so we can create or link your account; we never receive your password from these providers. In each case, Holy Grail collects such personal information only in so far as is necessary or appropriate to fulfill the purpose of your interaction with or your request to Holy Grail. We will not disclose your personal information other than as described in this Privacy Policy.

If you use our practice tools, we store the practice papers and questions you generate and your generation history, together with usage counts, so we can show you your history and apply your weekly quota and any credits you hold.

If you purchase a Premium subscription, a pass, or practice credits, payment is handled by our payment processor, Stripe. Your card and bank details go directly to Stripe and are never stored on our servers. We keep records of your purchases, such as your subscription status, pass coverage dates, and credit balance, so we can provide the paid features you have bought.

Like most website operators, Holy Grail automatically collects technical information about your device, including your device's IP address, device type, language settings, and general location information. This information is collected using cookies, web beacons, and related technologies to help us understand how visitors use our Apps, improve user experience, and monitor security.

We may aggregate all information (including personal information) collected through our Apps for statistical purposes and share it with third parties in an anonymized form for our own promotional purposes.

Advertising and Analytics

We show ads through Google AdSense on some pages. Google and its partners use cookies and similar technologies to serve and measure ads, and may personalize ads based on your visits to this and other websites. You can manage ad personalization in Google's Ads Settings or opt out of personalized advertising from participating vendors at aboutads.info.

We also use Google Analytics to understand how visitors use our Apps, such as which pages are visited and for how long. We work with this information in aggregated form and use it to improve the Service.

Information Holy Grail Does Not Collect

Holy Grail does not intentionally collect sensitive personal information, such as genetic data, biometric data for uniquely identifying a person, health information, or religious beliefs.

Lawful Basis and Purposes for Processing Your Personal Information

If you are located in Singapore, we collect and process your personal information in accordance with the Personal Data Protection Act (PDPA). The legal bases depend on the services you use and how you use them. This means we collect and use your information only where it is necessary for legitimate business purposes or to fulfill legal obligations under the PDPA.

Legitimate Interests

We use your personal information for the following purposes, where such uses are necessary for our legitimate business operations:

• To improve and personalize your experience with Holy Grail and our Apps, and to tailor communications to you.
• To understand how you use our Apps and to develop new products, services, features, and functionality.
• To monitor and improve the performance of our products and services for administrative, security, and fraud prevention purposes.
• For internal functions, management and corporate reporting, and internal research and analytics.
• To enforce compliance with our terms of use and other policies, or otherwise in connection with legal claims, compliance, regulatory, and investigatory purposes.
• To fulfill payments and transactions.
• To provide information about our services.
• To respond to your requests, questions, and feedback.
• For marketing and advertising purposes, including sending direct marketing emails, as permitted by law.
• To comply with applicable laws, lawful requests, and legal processes.

Consent

We may rely on your consent in the following cases:

• Where you have expressly indicated your consent to the processing of your personal information (e.g., when you consent to receive marketing communications from us).
• Where we have obtained your consent to place cookies or similar technologies.
• On other occasions where we ask for your consent, for the purpose we explain at the time.

You may withdraw your consent at any time through the unsubscribe feature provided with the relevant marketing email or by contacting us using the details in the 'Contacting Holy Grail About Your Privacy' section of this Privacy Policy.

How Holy Grail Uses and Protects Your Personal Information

We may share your personal information with third parties in the following circumstances:

Employees, Contractors, and Affiliates

We share personal information with our employees, contractors, and affiliated organizations who need to know this information to process it on Holy Grail Team's behalf or to provide services on the App. These parties are bound by confidentiality agreements.

Service Providers and Partners

Holy Grail Team engages the following third-party service providers to manage certain aspects of our business operations:

• Amazon Web Services: cloud infrastructure and data hosting
• Stripe: payment processing for Premium subscriptions, passes, and practice credits
• Google: optional sign-in, Google Analytics, and Google AdSense advertising
• Apple: optional sign-in
• GitHub: open-source repositories and internal project management tools

Professional Advisors

We may disclose your personal information to professional advisors such as lawyers, bankers, auditors, and insurers, when necessary during the course of the professional services they provide.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to this Privacy Policy.

Legal Requirements

We may disclose your personal information to government authorities if required by law or in the good faith belief that such action is necessary to comply with legal obligations, protect the rights and property of Holy Grail Team, or protect the personal safety of users or the public.

We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure.

Holy Grail Team Communications With You

If you provide your email address during account registration, we may occasionally send you communications regarding security updates, new features, and special offers. You may unsubscribe from marketing emails by following the instructions in those emails.

Your Choices

Opt-out of Marketing Communications

You can opt out of marketing-related emails by following the unsubscribe instructions in the emails we send you.

Cookies

You can manage your cookie settings through your browser. Rejecting cookies may limit the functionality of the App.

Online Tracking Opt-out

You can opt out of tracking through browser settings or tools such as Privacy Badger or Ghostery. Some third-party ad networks allow you to opt out directly via their websites.

Global Privacy Practices and Your Rights

You may have rights such as:

• Right of Data Portability: Transfer your data to another service provider.
• Right to Withdraw Consent: If you have given consent for specific data processing activities, you may withdraw this consent at any time.
• Right of Erasure: Request the deletion of your personal data.
• Right to Object to Processing: Object to the processing of your personal data for certain purposes, including direct marketing.

Data Retention and Deletion

Holy Grail Team will retain your personal information as long as your account is active or as needed to comply with legal obligations and fulfill our contractual commitments. You can access, update, or delete your account information by logging into your account.

In some cases, we may retain certain personal information indefinitely to maintain transactional integrity, particularly in relation to community posts, feedback, or other contributions.

Privacy Policy Changes

Holy Grail Team may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the date of this policy. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

Contacting Holy Grail Team About Your Privacy

The relevant data controller for any personal information processed in connection with our Apps is Holy Grail Team.

If you have any questions about this Privacy Policy or our privacy and security practices, or you wish to make a complaint about our compliance with applicable privacy laws, please feel free to contact us at allthingsholygrail@gmail.com.

If you have questions or concerns about the way we are handling your personal information, or would like to exercise your privacy rights, please email us with the subject line 'Privacy Concern' at allthingsholygrail@gmail.com.

In most cases, we will respond within 30 days of receiving your message, but please note for the promptest response, we recommend emailing us.