Privacy Policy

Last updated — July 8, 2026

1. Who we are

Gravity is a personalized Japanese language-learning app that helps you learn from real Japanese across podcasts, videos, songs, and text you capture. Gravity turns what you watch, listen to, or read into tailored study material, contextual flashcards, learning plans, and review exercises around the language you actually encounter.

Gravity and this website (learngravity.com) are operated by Heimdall Space Inc., a company registered in Canada. In this policy, "Gravity" refers to the product; "Heimdall Space", "we", "us" and "our" refer to the operating company. This policy explains what information we collect, why we collect it, how we use it, and what choices you have. If you do not agree with our practices, please do not use Gravity. Questions or concerns? Email support@learngravity.com.

2. What we collect

We try to collect as little as possible. Specifically:

Visiting the website. Anonymous usage analytics — pages viewed, time on page, referring site or ad, UTM parameters, country (derived from IP), browser type, device type, and screen size. We do not collect your name, email, or any identifier you don't deliberately provide.
Session replay (mobile app). Our analytics provider (PostHog) may record an anonymized replay of your in-app session — taps, navigation, screen transitions, feature usage, and basic device and OS information — so we can understand how the app is used and fix usability issues. Text inputs and password fields are masked, payment and billing screens are never recorded, and sensitive screens are excluded from capture. Replays are tied to an internal user identifier, not to your name or email.
Account information. If you create an account, the email address and password you provide (or, if you sign in with Google, the profile information Google shares with us such as your name, email address, and profile picture).
Content you study or capture. Videos you import or study, photos, screenshots, audio, and notes you add to Gravity. With your permission, the app may access your device's camera and photo gallery to import the material you want to study. You can revoke these permissions at any time in your device settings.
Third-party video content you study. When you study or import third-party video content (for example, a YouTube video), we may store the video URL or identifier and related metadata (such as the title), together with the learning materials generated from it, saved words, exercises, notes, and your learning progress, so we can provide, personalize, and improve the service. Gravity does not download, host, or store the underlying video or audio itself — playback is provided by the third-party platform through an embedded player, and that platform's own privacy policy governs its processing of your data.
Mobile device data. When you use the app, we automatically collect device information such as device ID, model and manufacturer, operating system and version, language and country settings, mobile carrier, IP address, and identifiers tied to features of the app you use. This is used to run the app, prevent crashes, and keep your account secure.
Usage and diagnostic data. Anonymous events about which features you use, study session length, and error/crash reports.
Payment data. If you purchase a subscription, your payment is processed by Apple, Google, RevenueCat, or Stripe — we do not store full payment card details ourselves. We do receive subscription status, purchase metadata, and the country associated with your store account.
Push notifications. If you opt in, we may send notifications about your account or features of the app. You can turn these off in your device settings at any time.
Contacting us. Your email address and the contents of your message.

We do not knowingly collect or process special-category sensitive personal information (race, religion, sexual orientation, biometrics, etc.). Account login credentials are treated as sensitive and used only to authenticate you.

App Store privacy disclosure. The list above is the authoritative description of what we collect and why. For convenience and to match the categories used on the Gravity App Store listing, the same data — limited to what the mobile app may collect — is mapped to Apple's App Store privacy categories below:

Contact Info — Name, Email Address.
User Content — Photos or Videos you capture or upload; Other User Content, including OCR text extracted from images, third-party video identifiers you choose to study, generated learning materials, saved words, and captured sentence and context data.
Usage Data — Product Interaction and Other Usage Data describing how you use the app.
Identifiers — User ID used to associate your data with your account.
Purchases — Purchase History for subscriptions and any other in-app purchases.
Diagnostics — Crash Data, Performance Data, and Other Diagnostic Data, collected through observability tools (for example, Sentry) to keep the app stable and debug issues.
Other Data — Other Data Types you provide during setup or in your settings, including age, learning preferences, motivations, reminder time, and notification preferences.

3. Why we collect it

To run the service, improve it, keep it safe, and understand how people find us. Specifically:

Account creation & authentication — so you can sign in and your study data stays with you.
Delivering Gravity's features — generating flashcards, lessons, and reviews from the material you capture.
Performance & debugging — fixing crashes, improving slow pages.
Product analytics — understanding which features help people learn.
Marketing attribution — knowing which posts, ads, or referrals send curious people to us, so we can do more of what works.
Administrative communication — sending you service updates, policy changes, and responses to your questions.
Security & fraud prevention — protecting your account and our service.
Legal compliance — meeting our obligations under applicable law.

For visitors in the EEA, UK, Switzerland, or other jurisdictions requiring it, we rely on your consent for analytics cookies (collected via our consent banner), on performance of a contract to deliver Gravity once you create an account, on legitimate interest to understand site performance and improve the product, and on legal obligation where the law requires it. You can withdraw consent at any time.

4. AI-powered features

Gravity uses artificial intelligence and machine learning to turn the material you capture or choose to study into personalized study content — analyzing images, text, and language-learning context, generating explanations, and producing review exercises. To provide these features, the content you submit or study is sent to and processed by our AI service providers, currently OpenAI and Google Cloud AI, under contracts that limit how they may use your data.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use AI to make decisions that produce legal or similarly significant effects about you without human review.

5. Third-party services we use

We use a small number of trusted providers to operate Gravity. They act as data processors on our behalf and are bound by data-processing agreements:

Supabase — database, authentication, and storage for your account and study content.
Amazon Web Services (AWS) and Google Cloud Platform — cloud infrastructure that hosts our backend.
OpenAI and Google Cloud AI — AI models that power Gravity's image, text, and language analysis features.
Google OAuth 2.0 — optional "Sign in with Google" authentication.
RevenueCat, Apple App Store, Google Play / Google Payments, and Stripe — subscription billing and payment processing. RevenueCat, Apple, Google.
PostHog — product and website analytics, hosted in the United States. In the mobile app, PostHog also provides session replay, capturing anonymized interactions (taps, navigation, screen transitions, device and OS info); text inputs and password fields are masked, payment and billing screens are never recorded, and sensitive screens are excluded. PostHog privacy policy; see also PostHog's session replay privacy controls.
Sentry — error and performance monitoring.
Cloudflare — serves and protects this website from a global CDN, plus website testing.
TestFlight — distributes beta builds of the mobile app to invited testers.
Loops — handles optional product update emails. Stores only your email address. Loops privacy policy.
Apple App Store and Google Play — distribute the Gravity mobile app and provide store-level analytics independent of us.

We may also share information when required to comply with law, respond to lawful requests from public authorities, protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify users beforehand).

We do not sell your personal information, and we have not sold or "shared" personal information for cross-context behavioral advertising in the preceding twelve months.

6. Social logins

If you choose to register or sign in using a third-party account (such as Google), that provider may share certain profile information with us — typically your name, email address, and profile picture. We use this information only for the purposes described in this policy. We do not control how the third-party social provider uses your information; we recommend reviewing their privacy notice.

7. How long we keep your data

Anonymous website analytics: up to 12 months in PostHog.
Account information (mobile app): retained while your account is active. Deleted or anonymized within 30 days of account deletion.
User-generated content (captures, notes): retained while your account is active.
Support emails: up to 24 months after the last reply, for reference.
Backups and logs: retained for a limited operational window and then deleted or anonymized.

When we no longer have a legitimate business need to process your personal information, we will delete or anonymize it. If that's not immediately possible (for example, because it's in a backup), we securely store it and isolate it from further processing until deletion is possible.

8. Cookies and local storage

Our website uses a small number of cookies and localStorage entries:

gravity.theme — remembers your light/dark mode preference (strictly necessary).
gravity.consent.v1 — remembers your tracking preference (strictly necessary).
__ph_opt_in_out_* and related PostHog cookies — only set after you accept analytics. Used to recognize returning visitors anonymously.

You can change your choice at any time using the Privacy preferences link in the footer or here. Most browsers also let you block or delete cookies; doing so may affect some site features.

Because no consistent technical standard for Do-Not-Track signals has been finalized, we do not currently respond to DNT browser signals.

9. Your rights

Depending on where you live, you have rights regarding your personal data. Residents of the EEA, UK, Switzerland, Canada, and US states with comprehensive privacy laws (including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) may request to:

Know whether we are processing your personal data, and access a copy.
Correct inaccurate data.
Delete your data ("right to erasure").
Restrict or object to certain processing, including profiling that produces legal or similarly significant effects.
Receive your data in a portable format.
Opt out of targeted advertising, the sale of personal data, or profiling — we do not sell personal data, but you may exercise this right at any time.
Withdraw consent for analytics or other consent-based processing at any time, without affecting the lawfulness of prior processing.
Not be discriminated against for exercising your rights.
Limit the use and disclosure of sensitive personal information.
Lodge a complaint with your local data protection authority — for example, your EU Member State authority, the UK ICO, or the Swiss FDPIC.

To exercise any of these rights, email support@learngravity.com. We will verify your identity using information already on file and respond within the time required by applicable law (generally 30 days). You can also designate an authorized agent to make a request on your behalf with written permission.

To request deletion of your account and associated data specifically, you can use our dedicated data deletion request page.

If we decline to act on your request, you may appeal by replying to our response or emailing support@learngravity.com with "Appeal" in the subject line. If your appeal is denied, you may contact your state attorney general.

California "Shine the Light" law. California residents may request, once per year, information about personal information (if any) we disclosed to third parties for their direct marketing purposes in the prior calendar year. Email us at the address above to make such a request.

10. International data transfers

Some of our service providers (notably PostHog, OpenAI, and our cloud hosts) are based in the United States. When data from EEA/UK/Swiss visitors is transferred to the US or other countries, we rely on appropriate safeguards under GDPR, including the EU–US Data Privacy Framework and/or Standard Contractual Clauses, as applicable to each provider.

11. Children

Gravity is intended for users 13 and older. We do not knowingly collect personal information from children under 13. In jurisdictions where the minimum age for digital consent is higher (for example 16 in parts of the EU), the higher age applies. If you believe a child has provided us with personal information without parental consent, please contact support@learngravity.com and we will delete it.

12. Security

We use appropriate technical and organizational measures — encryption in transit (HTTPS), access controls on production data, and vendor due diligence — to protect your information. No electronic transmission or storage is perfectly secure, so we cannot guarantee absolute security. We will notify affected users if a breach materially affects their data, as required by law.

13. Changes to this policy

We may update this policy as Gravity grows. When we make material changes, we'll update the "Last updated" date at the top and, for significant changes, notify users by email or an in-app/website notice. Continued use of Gravity after changes take effect means you accept the updated policy.

14. Contact

Questions, requests, or want your data deleted? Email support@learngravity.com, or write to us at:

Heimdall Space Inc.
108 Citadel Manor
Calgary, Alberta T3G 3Y4
Canada