Privacy Policy

Last updated: January 22, 2025

Our Commitment to Privacy

Grantiva is designed with privacy at its core. We collect only the minimum data necessary to provide secure device attestation services. We do not collect personal information, and all device data is processed anonymously.

What We Collect

Anonymous Device Data

  • Device identifiers provided by Apple's App Attest API
  • Device model and iOS version
  • App version and Bundle ID
  • Team ID (identifies the developer account)

Technical Data

  • IP addresses (immediately anonymized after geographic region lookup)
  • Attestation timestamps and validation results
  • API usage metrics

How We Use Data

We use collected data exclusively to:

  • Validate device attestations and detect fraudulent devices
  • Generate risk scores for security decisions
  • Provide analytics to developers about their app's security
  • Detect and prevent abuse of our services
  • Improve our fraud detection algorithms

Data Retention

  • 90 days: Attestation data and device information
  • 2 years: Billing and subscription data (as required by law)
  • Immediate: IP address anonymization after geolocation

Your Rights

Even though we process only anonymous data, you have the right to:

  • Request information about data processing
  • Access aggregated analytics for your apps
  • Export your app's attestation history
  • Delete your account and associated data

Data Security

All data is encrypted using AES-256 at rest and TLS 1.3 in transit. We follow industry best practices for security and undergo regular security audits.

Third-Party Services

We use the following subprocessors:

  • Apple: App Attest API for device validation
  • AWS: Infrastructure and data hosting
  • Stripe: Payment processing (no payment data stored by us)

International Data Transfers

Our servers are located in the United States. By using our service, you consent to the transfer of anonymous device data to the US.

No Sale of Data

We never sell, rent, or share your data with third parties for their marketing purposes.

Updates to This Policy

We may update this policy from time to time. We will notify you of any material changes via email or through our dashboard.

Contact Us

For privacy-related questions or concerns, please contact us at:

Email: privacy@grantiva.com
Address: Grantiva, Inc.
San Francisco, CA 94105
United States