Last Updated: April 01, 2026
This Privacy Policy applies to the Granoflow application, the account-hub login, account, subscription, and billing redirection pages, and the related online services we operate for account management, synchronization, cloud attachments, recovery, subscriptions, and support (collectively, the “Services”).
Granoflow is operated by A New Zero Innovations Limited (Hong Kong). Unless this policy says otherwise for a specific feature or third party, A New Zero Innovations Limited (Hong Kong) is the controller of the personal information described in this policy.
Granoflow is local-first by design. By default, your tasks and most of your personal productivity data stay on your device. We process information online only when you choose to sign in, enable cloud features, use cross-device functions, use paid features, contact us, or use features designed to work with third-party AI services.
This policy explains what information we process, why we process it, when we share it, how long we keep it, and what choices you may have.
This policy does not control the independent practices of third parties that you interact with directly, such as app stores, payment processors, identity providers, or third-party AI services. Those parties process information under their own terms and privacy policies.
Some features require certain information to work. If you do not provide information that is necessary for a requested feature, we may be unable to provide that feature.
When you create an account, sign in, register a device, manage sessions, or request account deletion, we may process:
Granoflow is used to manage tasks, projects, notes, reviews, preferences, attachments, and related productivity content.
By default, this content stays on your device. If you choose to enable online features such as cloud sync, cloud attachments, recovery, or backup, we may process:
We aim to limit server-side processing to what is necessary to provide the feature you chose to use.
When you buy, restore, or manage paid features, we may process:
We do not directly store full payment card numbers.
account-hub, and Security MetadataWhen you use account-hub or related web flows, we may process:
This information is used to complete the requested flow, protect the service, and diagnose failures.
We currently use crash and diagnostic tooling, including Firebase Crashlytics, to help detect failures, investigate bugs, and improve stability.
This may include:
We do not use this diagnostic data for advertising targeting or cross-app profiling.
If you contact support or choose to participate in research, interviews, or surveys, we may process:
Granoflow is not a self-hosted AI model service. Some features are designed to work with third-party AI services.
When you use those features, Granoflow may:
Depending on your settings and the features you use, some AI-related long-term user data, such as redaction terms, aliases, statuses, or sync policies, may be synced or backed up as part of your account-connected data.
We process information to:
account-hub login, callback, and billing redirection flowsWe do not sell or rent your personal information. We do not use your app content for advertising targeting or data brokerage.
We may share information only when needed for the purposes described above, including with the following categories of recipients:
Some of these providers act on our behalf, while others may act under their own legal terms when you interact with them directly. We require service providers acting for us to process information only as needed for their services to us.
If you are in the European Economic Area (“EEA”), we generally rely on the following legal bases, depending on the processing:
EEA users may also have the right to lodge a complaint with their local data protection authority.
Where required by applicable EEA law, we will identify any required EEA representative and provide the relevant contact details in the applicable service, notice, or account flow.
Because Granoflow, its operator, and its service providers may operate in different locations, your information may be processed in Hong Kong and in other jurisdictions where our providers operate. Depending on the features you use, this may include jurisdictions such as the United States or the European Economic Area.
We use contractual, organizational, and technical measures designed to protect information during cross-border processing, including access controls, minimization, feature scoping, and encryption or pseudonymization where appropriate.
Where EEA-restricted transfers apply, we intend to rely on an appropriate transfer mechanism recognized under applicable law, such as contractual safeguards, and you may request additional information about the relevant safeguard mechanism by contacting us.
Where applicable law requires additional notice, consent, or a specific transfer mechanism before certain cross-border processing takes place, we will provide that at the relevant collection point, feature flow, or account workflow.
We keep information for different periods depending on what it is and why it is needed:
If you request account deletion, your request currently enters a 30-day cooling-off period before final server-side deletion is completed. During that period:
Deleting your account does not automatically remove:
Depending on your location and applicable law, you may have the right to:
Some requests may require identity verification, and some rights may be limited by law, technical feasibility, security needs, or the rights of others.
For privacy requests, please email granoflow@anz.tv. Please do not post sensitive personal information in public GitHub issues.
We aim to provide clear Chinese-language disclosures for users in Mainland China. Where applicable law requires separate notice, separate consent, or additional disclosure for particular cross-border processing or sensitive processing, we may provide that through the relevant feature flow, settings notice, account workflow, or collection point.
This policy is our general privacy policy statement for Granoflow. Where a specific feature or collection point, including account-hub forms and billing-related web flows, requires collection-point notice, we will provide an additional notice at that point. If you do not provide information that is necessary for a requested feature, we may be unable to provide that feature.
If you are in Singapore, you may have rights to withdraw consent, request access, or request correction, subject to applicable law. Withdrawal of consent may affect features that depend on the information being processed. Where collection takes place through a specific web form, account workflow, or billing flow, we will provide collection-point notice in that flow. Where personal data is processed outside Singapore, we seek to ensure a standard of protection comparable to applicable legal requirements.
Granoflow is not directed to children. If you are below the age at which you can validly consent to the processing described in this policy under applicable law, use the Services only with the involvement or permission of a parent or guardian where required.
We may update this policy from time to time to reflect product, operational, or legal changes. If an update materially affects your rights or our data handling, we will provide reasonable notice through the app, account-hub, email, or another appropriate channel.
We may also provide feature-specific notices, FAQs, or in-product prompts for sync, AI, billing, or other specialized flows. Those disclosures supplement this policy.
If you have privacy questions or requests, contact us at:
Operator / Controller: A New Zero Innovations Limited (Hong Kong)