Effective date: August 4, 2026
This Privacy Policy explains how PixieForge ("PixieForge," "we," "us," or "our") collects, uses, discloses, and protects information when you use the Holy Grail Product Tracker mobile application, its websites, and related services (collectively, the "Service").
By using the Service, you acknowledge the practices described in this Privacy Policy. This policy does not replace our Terms of Service, which govern use of the Service, Smart Import Credits, purchases, and limitations concerning product and restaurant information.
Summary: We use personal information to operate your account and the features you request. PixieForge does not sell identifiable user data or individual user histories. We may create, use, license, or sell aggregated or de-identified product analytics that cannot reasonably be linked to you. Advertising, import, hosting, authentication, and payment providers may process limited data as described below.
Account information: email address, name, age, gender, authentication provider, account identifier, and information needed to manage your account.
Saved content: product and restaurant records, brands, product names, barcodes, ingredients, prices, store links, restaurant addresses and hours, categories, ratings, favorites, notes, tasks, and similar information you choose to save.
Photos and images: photos you choose from your device, capture with the camera, or select from search results. Locally selected photos may remain on your device; external image links and information needed to display a saved image may be associated with your saved record.
Community and support content: recommendations, availability reports, feedback, recall submissions, support messages, and other content you submit.
Smart Import requests: product or restaurant names, brands, barcodes, search terms, shared links, Google Maps links, and the results you select.
Please do not place highly sensitive personal information in free-form fields such as notes. You control what you enter into those fields.
Device and app information: a pseudonymous installation identifier, device type, operating system, app version, language, and similar technical information.
Usage and diagnostic information: feature interactions, import attempts and outcomes, timestamps, error and diagnostic logs, performance data, ad interactions, and information used to detect service problems.
Security and abuse-prevention information: Firebase App Check attestations and hashed versions of device identifiers and IP addresses used for authentication, fraud prevention, rate limits, and service security. PixieForge does not use these rate-limit hashes to build advertising profiles.
Advertising information: Google Mobile Ads and its advertising partners may process advertising identifiers, IP address, approximate location derived from IP, device information, consent choices, and ad-view or interaction data. The exact data depends on your device settings, region, and advertising choices.
We maintain records such as your Smart Import Credit balance, credit grants and uses, Supporter status, purchase product, transaction identifier, rewarded-ad grant, and related ledger entries. App-store and payment providers process payment credentials; PixieForge does not receive or store your full payment-card number. Smart Import Credit availability and expiration are governed by the Terms of Service and the disclosures shown when credits are offered.
Depending on the features you use, the app may request permission to access the camera for barcode scanning and taking photos, the photo library for selecting images, and notifications for reminders. We access these features only after permission is granted. You may change permissions in your device settings. Holy Grail does not intentionally record or retain audio.
We use information to:
create and secure accounts, authenticate users, and synchronize saved content;
provide product, barcode, image, web-link, restaurant, and Google Maps import features;
maintain Smart Import Credit balances, verify purchases and rewarded-ad grants, and prevent duplicate or fraudulent credits;
personalize and organize the Service according to your saved products, restaurants, categories, ratings, and preferences;
provide customer support and respond to privacy or account requests;
operate, troubleshoot, secure, measure, and improve the Service;
show advertising, measure advertising performance, and honor consent or opt-out choices;
develop aggregated or de-identified product and service analytics as described below; and
comply with law, enforce our agreements, and protect users, PixieForge, and others.
We may disclose information in the following circumstances:
Vendors process information for us to provide hosting, databases, authentication, security, app integrity, customer support, purchases, advertising, and related infrastructure. These providers include Google services such as Firebase, Google Sign-In, App Check, Google Play, Google Maps, and AdMob, as well as RevenueCat when in-app purchases are enabled.
When you request a Smart Import or image search, the search terms, barcode, product or restaurant name, brand, or URL needed for the request may be sent to the relevant source website or data provider. Providers may include SerpAPI, Apify, Barcode Lookup, UPCitemdb, INCI-related services, Open Food Facts, Open Beauty Facts, Open Pet Food Facts, Jina AI, Google Maps, and other product, retailer, manufacturer, restaurant, or public-information sources. Those parties may receive technical request information such as an IP address. We do not intentionally send your account email, private notes, or full saved history with a routine import query.
Google Mobile Ads and participating advertising partners may collect or receive the advertising and device information described above to deliver, limit, personalize, secure, and measure ads. Rewarded ads are optional. Depending on your region and choices, ads may be personalized, non-personalized, or limited.
We may disclose information when reasonably necessary to comply with law or legal process, investigate fraud or abuse, enforce our agreements, protect safety or rights, or respond to an emergency. If PixieForge or the Service is involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction subject to applicable law and this policy.
PixieForge may use information about products, brands, ingredients, categories, prices, retailers, availability, restaurants, and feature usage to create aggregated statistics and de-identified insights. Examples include product popularity, category trends, commonly saved ingredients, general price trends, retailer availability patterns, and overall feature performance.
We may use, publish, license, or sell these aggregated or de-identified analytics to business partners, researchers, retailers, brands, or other organizations. We do not provide those partners with your email address, account identifier, private notes, an identifiable user profile, or a product history tied to you.
We use reasonable technical and organizational measures intended to prevent this analytics information from being linked back to an individual. To the extent required by applicable law, PixieForge will maintain de-identified information in de-identified form, will not attempt to re-identify it, and will require recipients not to attempt re-identification. We may retain and use information that is no longer personal information because it cannot reasonably identify or be linked to a person.
PixieForge does not sell personal information for money and does not sell or license identifiable user data as product analytics. Our licensing or sale of aggregated or de-identified product analytics is not a sale of personal information when that information cannot reasonably identify or be linked to a person.
Some privacy laws define "sale," "sharing," or "targeted advertising" broadly enough to include certain disclosures by advertising technology. Google Mobile Ads and participating advertising partners may process identifiers and activity data for advertising as described in this policy. Where applicable, you may use the privacy choices presented in the app or by the advertising provider, adjust your mobile advertising settings, or contact us to exercise an available opt-out right.
If laws in the European Economic Area, United Kingdom, or Switzerland apply, we process personal data as necessary to perform our contract with you, pursue legitimate interests such as operating and securing the Service, comply with legal obligations, and obtain consent where required, including for certain advertising technologies. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.
We retain account information and saved content while your account is active and as needed to provide the Service. Retention periods vary based on the type of information, the reason we use it, legal and accounting requirements, dispute resolution, fraud prevention, and technical backup schedules.
When you delete your account, we delete or de-identify account data as described in the account-deletion process, subject to limited legal, security, fraud-prevention, and backup exceptions.
Pseudonymous device and IP rate-limit records may be retained temporarily to detect abuse and enforce rolling limits.
Transaction, purchase, and credit-ledger records may be retained as required for accounting, fraud prevention, disputes, or legal compliance.
Aggregated or de-identified information that can no longer reasonably identify you may be retained for a longer period.
You may update much of your saved information directly in the app. Depending on where you live, you may also have rights to request access, correction, deletion, or a portable copy of personal information; to object to or restrict certain processing; to opt out of certain sales, sharing, or targeted advertising; to withdraw consent; and to appeal a denied request.
To submit a request, email pixieforge.support@gmail.com. Describe the request and use the email address associated with your account. We may need to verify your identity before acting. Authorized agents may submit requests where permitted by law, subject to verification of their authority. We will not discriminate against you for exercising an applicable privacy right.
You may control camera, photo-library, notification, and advertising settings through your device. Advertising consent and privacy choices may also be available in the app or through Google’s ad controls.
You can request permanent account deletion in Holy Grail by opening the gear icon, choosing User Settings, and selecting Delete account. If you cannot access the app, use our account-deletion page or email support from the address associated with your account.
Deleting an account removes the account and associated saved content from active systems, including products, restaurants, categories, ratings, notes, tasks, community contributions tied to the account, and the Smart Import balance. Some limited information may remain temporarily in backups or be retained when reasonably necessary for security, fraud prevention, transaction records, disputes, or legal compliance. Information already converted into aggregated or de-identified form is not associated with the deleted account.
We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated access, Firebase security controls, app attestation, encryption in transit, and restricted administrative access. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.
PixieForge and its providers may process information in the United States and other countries where privacy laws may differ from those in your location. Where required, we rely on legally recognized transfer mechanisms and provider contractual protections.
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it. Additional age or parental-consent requirements may apply depending on the user’s location.
The Service may display information or links from retailers, manufacturers, restaurants, public databases, search providers, or other third parties. Their privacy practices are governed by their own policies. This Privacy Policy covers PixieForge’s practices and does not control how an unaffiliated third party handles information when you visit its site, app, or service.
We may update this Privacy Policy as the Service, our partners, or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required by law. Material changes will apply prospectively unless otherwise permitted by law.
PixieForge
Holy Grail Product Tracker
Email: pixieforge.support@gmail.com
For a privacy request, include “Holy Grail privacy request” in the subject line and contact us from the email address associated with your account when possible.