Extrais

Extrais — Privacy Policy


Last updated: 11 June 2026 · Controller: Graviti Labs · Contact: info@gravitilabs.com


This is a working draft for review by legal counsel before launch. It reflects how the Extrais app is

built. Host the final version at a public URL and link it from the App Store / Google Play listings.


1. Who we are

Extrais ("we") is operated by Graviti Labs. We are the data controller for personal data processed

through the Extrais mobile app. For any privacy request, contact info@gravitilabs.com.


2. What we collect

  • Account: email address, name, role (client or Pro), language, and (Pros) trade and languages.
  • Verification (Pros): identity document + selfie and trade-authorisation details, processed for

    • trust and safety.

  • Jobs: the service category, photos you attach, a short note, and the approximate location of

    • the job — captured only when you tap to create or update a request.

  • Messages & calls: in-app chat content (auto-deleted 24h after a job ends) and call metadata. We

    • do not record call audio. Phone numbers are never shared between users.

  • Payments: we do not process payment for the physical service. App credits are purchased via

    • Apple/Google in-app purchase; we receive only the transaction confirmation, never card details.

  • Device & usage: push token (if enabled) and, only with your consent, anonymous product

    • analytics. Analytics are off until you opt in (Settings → Help improve Extrais).


    3. Why (legal bases)

  • To provide the service and connect clients with Pros — performance of a contract.
  • Trust, safety, fraud prevention, and compliance — legitimate interests / legal obligation.
  • Analytics and marketing emails — consent (withdrawable anytime).

    • 4. Sharing

  • Other users: a Pro's public profile (name, rating, languages, verification badge) is shown to

    • clients who request work; a client's job details are shown to matched Pros.

  • Processors: Supabase (database/auth/storage, EU region), Apple/Google (push, IAP),

    • and our email/analytics providers — each under data-processing terms.

  • We never sell personal data.

    • 5. Where & how long

    Data is hosted in the EU. We keep job and account data for as long as your account is active and as

    required by law, then delete or anonymise it. Chat messages are purged 24 hours after a job completes.


    6. Your rights (GDPR)

    You can access, export, correct, or delete your data, object to or restrict processing, and

    withdraw consent. In the app: Settings → Privacy & data to export your data or **delete your

    account** (which erases your profile and associated data). You may also lodge a complaint with the

    Luxembourg data-protection authority (CNPD).


    7. Children

    Extrais is not directed to anyone under 18.


    8. Changes

    We'll update this policy as the product evolves and note the date above.