Privacy Policy

Effective Date: August 16, 2025 | Last Updated: December 29, 2025

GRABB (“we”, “our”, “us”), provided by eXperience Tech Group LLC, is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy (“Policy”) explains how we collect, use, store, share, and protect your information when you use the GRABB website, mobile application, and related services (collectively, the “Service”).

By accessing or using GRABB, you consent to the practices described in this Policy. Note: Your use of the Service is also subject to our Terms of Service, including the provisions on User Content and Dispute Resolution.

1. Information We Collect

We collect information in the following categories:

1.1 Account Information

  • Name or nickname
  • Email address
  • Date of birth (to confirm eligibility)
  • Profile photo(s)
  • Gender and sexual orientation (if voluntarily disclosed)

NOTE ON SENSITIVE DATA: Information concerning gender and sexual orientation is considered Sensitive Personal Information (a special category) under GDPR and similar laws. We process this data only based on your explicit consent (given when you choose to disclose it on your profile) and solely for the purpose of providing the core personalized matching service. You may withdraw this consent at any time by removing the information from your profile settings.

1.2 Optional Account Verification

  • Government-issued ID and/or Selfie photo
  • Verification is entirely optional.
  • Used solely for verifying your identity and increasing trust in the community.
  • Data Minimization: Verification data is processed only by authorized personnel and deleted promptly after successful identity confirmation (or if the user deletes the account/revokes verification).

1.3 Usage Information

  • IP address
  • Device type and operating system
  • Browser type
  • App usage data, interactions, and features accessed (e.g., clicks, time spent)

1.4 Location Data

  • With your consent, GRABB collects approximate location to provide proximity-based matching.
  • Location can be disabled anytime in app settings.
  • Risk Warning: Even if you choose to hide your distance or use approximate location, sophisticated users may still infer your approximate or exact location through triangulation. By using this feature, you accept this risk.

1.5 Payment Information

  • Payment details (processed via authorized third-party processors: Google Play, Apple App Store, PayPal, Stripe).
  • We do not store full credit card numbers on our servers.

2. Legal Basis for Processing (GDPR)

We rely on the following legal bases for processing your personal data:

  • Contractual Necessity: To provide the Service and fulfill our Terms of Service (e.g., account management, matching functionality).
  • Explicit Consent: For processing sensitive data (sexual orientation) and optional features (location, verification data).
  • Legitimate Interests: To improve the Service, prevent fraud, ensure security, and for marketing purposes, provided that your rights do not override those interests.
  • Legal Obligation: To comply with applicable laws and regulatory requirements.

3. How We Use Your Information

We use the information collected to:

  • Operate, maintain, and improve the Service.
  • Provide personalized recommendations and matches.
  • Process payments for Premium Services.
  • Develop and train machine learning (AI) models using profile and usage data to:
    1. Improve personalization and connection recommendations.
    2. Enhance moderation and detect unsafe or illicit content.
    3. Improve product functionality and user safety.
  • Communicate with you regarding updates, support, and marketing.
  • Ensure the safety and integrity of the community.
  • Comply with legal obligations.

4. How We Share Your Information

We do not sell your personal data. We may share information with:

  • Other Users: Profile information you choose to display (including photos and approximate distance) is visible to other users.
  • Service Providers: Third-party partners who assist with hosting, analytics, payment processing, or support. They are contractually bound to protect your data.
  • Law Enforcement: Only when legally required and subject to a valid legal process.
  • Corporate Transactions: In connection with a merger, sale, financing, or acquisition.

GRABB does not sell or license user data to third parties for AI training, profiling, or behavioral advertising. Any data shared with partners is limited to essential technical operations.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Remember your login information.
  • Analyze traffic and usage trends.
  • Personalize your experience.

For EU/EEA users, we provide a Consent Management Platform (CMP) for cookie preferences.

6. Data Retention

We retain personal data as long as your account is active and as required by law.

After deletion: Certain limited data (device ID, logs, financial transaction info) may be retained up to two years for security, fraud prevention, and compliance purposes.

Messages: Copies of your messages may remain on recipients’ devices (screenshots, cache) even after deletion from GRABB.

7. User Rights (GDPR / CCPA / Global)

You may have the following rights regarding your personal data:

  • Access: Obtain a copy of your personal data.
  • Rectification: Correct inaccurate information.
  • Erasure: Request deletion of your account and data (subject to retention laws).
  • Restriction: Limit processing of your data in certain cases.
  • Portability: Request transfer of your data to another provider.
  • Objection: Object to processing based on legitimate interests, including opting out of AI model training.
  • Withdraw Consent: Revoke consent for optional data at any time.

Contact: [email protected]. Requests will be handled in accordance with applicable law.

Residents of certain U.S. states (including California) may have additional rights under local privacy laws. GRABB does not sell or share personal data for advertising. To exercise rights, contact [email protected].

8. Data Security

We apply industry-standard measures to safeguard data:

  • Encryption of sensitive data in transit and at rest.
  • Access control limiting staff data access.
  • Regular security audits and vulnerability scans.
  • Continuous monitoring for unauthorized access attempts.

In the event of a data breach affecting your personal information, GRABB will notify affected users and relevant authorities in accordance with applicable law.

9. International Data Transfers

Your data may be stored or processed in the United States or other countries (including Serbia). Transfers rely on Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure adequate protection.

10. Children’s Privacy

           

GRABB is strictly for users 18 years or older. We do not knowingly collect personal information from minors. Accounts found to belong to minors will be immediately deleted in compliance with COPPA and similar laws.

           

Zero-Tolerance Policy on CSAE/CSAM: As an additional, mandatory security measure, we maintain a zero-tolerance policy against Child Sexual Abuse and Exploitation (CSAE) and Child Sexual Abuse Material (CSAM). For detailed information regarding our detection systems, mandatory reporting workflow, and cooperation with law enforcement (such as NCMEC), please review our dedicated:

           

11. Changes to this Privacy Policy

We may update this Policy periodically. You will be notified via email or in-app notice. Continued use constitutes acceptance of changes.

12. Contact Information

For any privacy inquiries or to exercise your rights, contact: [email protected]

Data Controller: eXperience Tech Group LLC
30 N Gould St Ste R, Sheridan, WY 82801, United States.

Učitavanje...