Privacy policy
This explains what GRATUS does with your information, in plain words. GRATUS is a small test version. We keep what we collect to a minimum.
The short version
- GRATUS has no ads, no analytics and no tracking cookies.
- Your moments, goals, pictures, steps, lessons and points stay on your own device.
- What you tell the Oracle is sent to an AI service (Anthropic's Claude) to write a reply. GRATUS does not keep it.
- Only what you post to the group board is stored online. Only people with the invite word can read it, and it never shows who wrote it unless you choose to be named.
- You can copy, back up, restore or delete all of your information yourself, in Growth, then Settings, then Account & data.
Who runs GRATUS
GRATUS is run by Aprima Pty Ltd (ABN 12 156 219 233), trading as EFG Gratus. You can contact us at info@joxsox.au.
What stays on your device
Your reflections (how you feel, what you are grateful for, what you want to create), what helps you feel calm, your Vision and goals including any pictures, your steps, lessons, points, the days you showed up and settings are saved in your browser's storage on this device. GRATUS's servers never receive them. If you switch on Use my location in Choose a look, a rounded position (to about 10 km) is kept here too. It is not put into backup files.
This also means they are not on your other devices, and they disappear if you clear your browser's site data. Use Save a backup in Account & data to keep a file with everything, and Restore from a backup to bring it back. Copy my data and Save as a file make a plain-text copy.
Who else handles information
To work, GRATUS uses a few other services. Here is exactly what goes to each, and why.
- The Oracle (Anthropic). What you type to the Oracle, and a picture if you choose to show one, goes from your device through GRATUS's server to Anthropic, which makes Claude, so that it can write a reply. GRATUS's server does not store or log what you send or what comes back. It only records that a request happened and whether it worked. Anthropic handles that content under its own terms and privacy policy, which may include keeping it for a limited time for safety.
- Oracle memory. This is off unless you switch on “Let the Oracle remember me”. When it is on, short extracts of what you chose to save (your Vision, goal titles, recent gratitude notes, steps and lessons) are included with your messages so the Oracle can use them. You can switch it off, and remove it, at any time in Privacy settings.
- The Oracle's voice (ElevenLabs). The Oracle's own voice, Tessa, is AI-generated, not a real person. The meditation lines are fixed script. GRATUS asked ElevenLabs to turn them into speech once, and keeps the finished audio on our own hosting so it can be played to everyone. Nothing you have written or said is sent for this, and playing a meditation does not contact ElevenLabs. If you switch on "Let the Oracle speak her replies" and keep her own voice chosen, GRATUS's server also sends each reply the Oracle has just written to ElevenLabs to be turned into speech. That is her words, not yours, though her words can echo what you told her. ElevenLabs may keep the text it receives, under its own terms and privacy policy. GRATUS does not keep that audio. To keep her replies on your device, choose a device voice in Settings, then The Oracle's voice, or leave spoken replies off.
- Your location (optional, and off unless you switch it on). When you choose Use my location, your browser asks you first, and your phone then works out where you are. Some browsers do that with their maker's location service, which has its own privacy policy. GRATUS never receives your position and never gives it to the Oracle. It is rounded to about 10 km and kept on your device, and is used there to work out sunrise, sunset and the season for the background. You can switch it off at any time in Choose a look.
- Voice typing, and spoken replies in a device voice. These are features of your browser and device. In some browsers, such as Chrome, voice typing happens on the browser maker's servers. Some device voices are online voices too. GRATUS never receives your audio, only the words you send.
- The group board (Supabase). If you join the test group, what you post is stored with Supabase, which hosts the board's database. See the next section.
- A bot check (Cloudflare). When you join the test group, a small check run by Cloudflare, called Turnstile, confirms that you are a person and not a bot, before your anonymous ID is created. Cloudflare sees your IP address and basic browser details for this, under its own privacy policy. It does not run when you use the rest of the app.
- Hosting (Vercel). Vercel serves the app, including its fonts, so no font service is contacted. Like any web host, it handles your IP address and basic technical details such as your browser type, to deliver pages and protect against abuse.
The group board
If you enter the invite word, you can ask the group a question, reply to others, send thank-you notes and share points through a shared pool. These are stored online, together with: a random anonymous ID created for your browser when you join (no email or password), a display name if you choose to set one, whether you are pausing right now and when you were last seen (for “pause together”), and any reports you make.
Everyone who has the invite word can read what is posted, so please do not post anything you would not want them to see. Posts show a pseudonym, “Anonymous”, or your display name, as you choose for each post. The ID that links a post to you is kept on the server and is never sent to other people.
Nothing from your private moments, goals or pictures is ever posted to the board.
What we do not do
We do not sell your information. We do not show ads. We do not use analytics or build profiles. The switches called “Help improve GRATUS” and “Take part in research” do not send anything at present. They only record your choice for the future.
How long we keep things
- On your device: until you delete it or clear your browser's data.
- Oracle conversations: GRATUS does not keep them. They live on your screen until you leave it.
- Group board posts and your anonymous ID: until you delete them. “Delete my account” in Account & data removes your posts, replies, thank-yous, display name and group membership. Backups kept by our hosting provider may hold a copy for a short time after.
- Reports: kept so that they can be reviewed.
Your choices and rights
You can copy or save everything on your device, delete it all, switch off Oracle memory and remove it, and leave the group and delete your posts, all from inside the app, without asking us.
Depending on where you live (for example under the EU's GDPR or Australia's Privacy Act), you may also have the right to ask what we hold about you, to have it corrected or deleted, to object to how it is used, and to complain to your data protection authority. For anything you cannot do yourself, contact us. We use your information only to provide the feature you chose, on the basis of your consent, which you can withdraw at any time.
Other countries
The services listed above operate from several countries, including the United States, so your information may be processed outside the country where you live.
Children
GRATUS is not designed for children under 16. If you believe a child has used it, contact us and we will remove what they posted.
Security
Everything travels over encrypted connections. The group board is protected by the invite word, limits on how often a person can post, and database rules that check who is asking. No system is perfectly secure, so please share only what you are comfortable sharing.
Changes
If we change this policy we will update the date at the top and, for important changes, tell you in the app.
Contact
Aprima Pty Ltd (ABN 12 156 219 233), trading as EFG Gratus, info@joxsox.au.