Privacy Policy

Last updated: May 08, 2026

This Privacy Policy for QuantFight, doing business as Grapli, explains how we collect, use, store, disclose, and otherwise process personal information when you use our website, mobile application, and related services.

Grapli is a Brazilian Jiu-Jitsu training app that provides AI-powered coaching feedback, session tracking, and performance analysis for athletes and gyms.

Who we are

The service is operated by QuantFight, doing business as Grapli.

Contact: hello@grapli.app

Postal address:
QuantFight
9 rue des colonnes
75002 Paris
France

Information we collect

Depending on how you use Grapli, we may collect:

• Account information, such as name, email address, phone number, username, password, authentication data, and login information.
• Profile information, such as age, belt level, gym, training details, preferences, and related athlete profile data.
• Training content you provide, including session notes, voice recordings, transcripts, training descriptions, match notes, feedback requests, and information used to generate coaching feedback and performance analysis.
• AI input and output data, including prompts, user submissions, generated coaching insights, detected patterns, recommendations, summaries, and other outputs created by Grapli or by third-party AI providers on our behalf.
• Subscription and purchase status information processed through Apple and RevenueCat. Payment card details are handled by Apple and are not stored by us.
• Device, usage, diagnostic, and analytics data used to secure, operate, debug, measure, and improve the app.
• Support communications, such as emails or messages you send to us.

How we use information

We use personal information to:

• Create, authenticate, and manage user accounts.
• Provide Grapli features, including session tracking, athlete profiles, training history, and AI-powered coaching feedback.
• Process, analyze, summarize, classify, and generate insights from user-submitted training content, including voice notes and session information.
• Develop, test, train, fine-tune, evaluate, monitor, and improve Grapli’s models, algorithms, prompts, recommendations, and product features.
• Provide subscription access, manage entitlements, and process purchase status through Apple and RevenueCat.
• Provide customer support and respond to requests.
• Improve performance, reliability, safety, security, and user experience.
• Detect, prevent, and investigate abuse, fraud, misuse, security incidents, or technical issues.
• Comply with legal obligations and enforce our rights.

Voice recordings, training data, and AI analysis

When you submit voice notes, text notes, session information, match information, or other training content, we may process that content to detect patterns in your grappling game and provide feedback.

We may use your submitted content, generated outputs, and related metadata to improve Grapli, including by developing, testing, training, fine-tuning, and evaluating AI models and product features. Where practical, we may use aggregated, pseudonymized, or de-identified data, but we cannot guarantee that all data used for these purposes will be fully anonymized.

Voice recordings are not intended to identify you by voice, create a voiceprint, or authenticate your identity. However, voice recordings may still contain personal information because they may include your voice, names, training details, gym information, or other information you choose to provide.

You should not submit information that you do not want processed by Grapli or by our service providers.

AI and infrastructure providers

We may use third-party AI, cloud, analytics, database, authentication, subscription, payment, hosting, and infrastructure providers to operate Grapli. These providers may process personal information on our behalf.

These providers may include Supabase, RevenueCat, Apple, PostHog, OpenAI, Anthropic, and similar or replacement service providers. The specific providers used may change over time as we develop Grapli.

Third-party AI providers may process user inputs, outputs, transcripts, session notes, voice-derived text, and related data to provide AI functionality, safety monitoring, abuse prevention, debugging, reliability, analytics, and service improvement, subject to their terms, privacy policies, and our agreements with them.

Legal bases for processing

Where applicable law requires a legal basis, we may process your personal information based on:

• Performance of a contract, to provide the Grapli service you request.
• Consent, where you give consent, such as for certain permissions or optional features.
• Legitimate interests, such as improving Grapli, developing AI features, securing the service, preventing abuse, understanding usage, and supporting users.
• Legal obligations, where processing is required to comply with law.

Payment and subscriptions

Subscriptions and in-app purchases are processed through Apple and may be managed using RevenueCat. We may receive subscription status, entitlement, product, transaction, and purchase-related metadata. We do not receive or store your full payment card number or Apple payment credentials.

International transfers

Your information may be processed in countries other than your own, including the United Kingdom, France, the United States, and other locations where we or our service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent transfer mechanisms.

Data retention

We keep personal information for as long as needed to provide Grapli, maintain your account, improve and develop the service, train and evaluate models and features, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.

When your account is deleted, we aim to delete or anonymize personal information unless retention is legally required, permitted for legitimate business purposes, needed for security, fraud prevention, backups, dispute resolution, model development records, or technically necessary. Some information may persist in backups, logs, derived datasets, aggregated data, model training datasets, or model outputs where deletion is not technically feasible or where the data has been de-identified or aggregated.

Your rights and choices

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to the processing of your personal information. You may also request deletion of your account or withdraw consent where applicable.

To exercise these rights, contact us at hello@grapli.app.

Account deletion

You may request account deletion by emailing hello@grapli.app. We may need to verify your identity before processing the request. Deleting your account may not immediately remove all information from backups, logs, analytics, derived datasets, de-identified or aggregated records, or information we are legally or technically required or permitted to keep.

Security

We use reasonable technical and organizational measures to protect personal information. However, no electronic transmission or storage system can be guaranteed to be completely secure.

Children

Grapli is not intended for children under 13. If you are under the age required by your country to consent to data processing, you may use Grapli only with parental or guardian consent. If you believe a child has provided us personal information without appropriate consent, contact us at hello@grapli.app.

Updates

We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated date. If we make material changes, we may provide additional notice where required.

Contact

For privacy questions, requests, or concerns, contact us at hello@grapli.app.