Privacy Policy

Who we are

Grend is an administration platform for residential communities in Chile, available as a mobile app (iOS first, Android to follow) and a website. This policy explains how we handle personal data when you use the Grend app or this site.

In general, Grend processes your account data on behalf of and under the instructions of your community's administration, which is who enables you as a user. For website data and the operation of the platform itself, Grend decides the purposes and means of processing.

Grend is operated by Grend SpA.

You can contact us at soporte@mail.grend.app or through the form on the support page.

How your account is created

There is no public sign-up. Accounts are created by each community's administrators, who invite you by email. We only process data of people linked to a community that uses Grend.

What data we process

• Account identity: name, email address, and phone number.
• Community membership: community, unit or apartment, and role (administration, resident, concierge, or platform operations).
• Notices and communications published in the community.
• Package and parcel records, including photos attached as evidence of receipt or delivery.
• Payment and accounting information that the community's administration records or manages, such as common expenses, charges, and movements tied to your unit. Grend does not process payments.
• Photos attached to notices, taken with the camera or chosen from your photo library, only when you choose to attach them.
• Staff attendance (time clock): when clocking in and out, facial analysis is used to verify identity. We do not store face photos: we only keep an encrypted mathematical template (sensitive biometric data) and the related attendance records.
• Text you enter into the app's AI assistant (for example, to draft notices).

Minimal technical logs (for example errors and access times) may also be generated to operate and protect the service.

Face recognition and biometric unlock

The face template is used only for the community staff's attendance control, to verify who is clocking their shift. Grend does not store face photos. Only authorised people in that community's administration, and the Grend team when necessary to operate the service, can access attendance records.

Unlocking with Face ID, fingerprint, or another biometric method on your device happens only on your phone. Grend does not receive or store that biometric information.

AI assistant

The app includes an assistant that helps draft notices from text you write. That text is sent to Grend's servers and processed by AI model providers acting on our behalf: OpenAI and Anthropic.

We use these providers to generate the assistant's response. Grend does not store assistant conversations and does not authorise these providers to use your text for training. OpenAI and Anthropic may retain data under their own privacy policies and terms, which you can find on their websites. Do not enter data into the assistant that you do not want processed this way, such as sensitive information about other people.

Device permissions

• Camera: to take photos for notices, package evidence, and attendance.
• Photo library: to attach existing images to a notice.
• Face ID / biometrics: to unlock the app, processed locally by your device.

You can revoke these permissions in your phone settings. Some features will stop working.

Why we use data

• To provide the service: sign you in, show your community's information, and enable notices, packages, payments, and attendance.
• To communicate with you about your account and answer support requests.
• To keep the service secure, prevent abuse, and fix bugs.
• To comply with legal obligations.

We do not sell personal data, show ads, or track you across apps or websites. The app includes no third-party analytics or advertising SDKs.

Who we share data with

Within your community, information is visible according to role: for example, the administration sees resident and finance data, and the concierge sees packages. A resident does not see other residents' private data.

We use infrastructure and cloud service providers that process data on our behalf to host and run the service. We do not use them for advertising.

For the AI assistant, the text you enter is processed by OpenAI and Anthropic as sub-processors (see the assistant section).

We may disclose data if a competent authority requires it under the law.

International transfers

Data is stored and processed in the United States, on cloud service providers' infrastructure. If you use the AI assistant, the text you enter is also processed by OpenAI and Anthropic. Your data may therefore be transferred outside Chile. We require these providers to apply reasonable security measures and use them only to provide the service.

How long we keep data

We keep data while your account is active and your community uses Grend. When a user leaves a community, their data is kept for 6 months (grace period); after that, their account data, including name, email, and phone, is deleted. When a community is deleted, its notices and package records are kept as community records for 5 years for accounting reasons. The time-clock face template is deleted when the employee leaves. Grend does not store AI assistant conversations. We keep encrypted database backups; data removed from the live system is purged from backups when they rotate. See the account and data deletion page.

Your rights

Under Chilean personal data protection law (Law No. 19.628 and the new Law No. 21.719), you can generally request access, rectification, deletion, and objection to the processing of your data, and in some cases portability or blocking of processing. You may also complain to the data protection authority where applicable.

To exercise these rights, write to us at soporte@mail.grend.app or through the form on the support page. We may ask you to confirm your identity. If your data is managed by your community, we may forward the request to its administration.

Security

We apply reasonable technical and organisational measures to protect data, such as role-based access control and encrypted communications. No system is completely infallible.

Children

Grend is aimed at adults linked to a residential community. We do not direct the service to minors or knowingly create accounts for them.

Changes to this policy

We may update this policy. We will publish the current version on this page with its update date and, for important changes, notify you in the app or by email.