Privacy Policy
Last updated 3 September 2026.
Grapevine is a private communications app for Orthodox parishes and dioceses, operated by Blackbox Studios. It is invite‑only. An administrator of a group creates your account, and you cannot sign yourself up. This policy describes what we hold about you, why we hold it, and how to have it removed.
What we collect
Everything below is given to us by you or by the administrator who added you.
- Your account. Your email address, which is also how you sign in, and the @handle you choose.
- Your profile. First and last name, patron saint, vocation, profile picture, name day, ordination date, and date of birth.
- What you write. Posts, comments, photos you upload, and the posts and comments you like.
- Who you are connected to. The groups you belong to and your role in each, the people you follow, and any direct messages you send.
- Technical. A push notification token for each device you enable notifications on, and the time you last used the app.
We do not collect your location, your contacts, your payment details, or anything from other apps. Grapevine contains no advertising and no third‑party analytics or tracking software.
What is visible to others, and what is not
Grapevine has no public content. What you write is readable only by people who hold an approved membership in the same group. There is no feed, page or search that reaches outside your groups.
Your date of birth and your email address are never shown to anyone. They are collected so your parish can remember your birthday and so you can sign in, and the app does not publish either.
Why we hold it
- To sign you in and keep you signed in.
- To show your name and picture beside what you write.
- To deliver notifications you have asked for.
- To let administrators manage who belongs to their group.
We do not sell your information, share it for advertising, or use it to build a profile of you.
Who else processes it
We use a small number of service providers, each acting on our instructions and only to run the app.
- Supabase. Database, sign‑in, and file storage.
- Vercel. Application hosting.
- Resend. Delivers the sign‑in code emails.
- Google Firebase Cloud Messaging. Delivers push notifications to your device.
How long we keep it
For as long as your account exists. If an administrator removes you from a group you lose access to it immediately, and if your account is deleted everything listed above is destroyed. See Deleting your account below.
Security
Traffic is encrypted in transit. The database enforces row‑level security, and every request is authorised individually against your current memberships, so removing someone takes effect on their very next request rather than whenever their session happens to expire.
Children
Grapevine is not directed to children under 13 and we do not knowingly create accounts for them. Because every account is created by a group administrator rather than by self‑signup, admission is always a decision made by an adult. If you believe a child's information is held here, write to support@blackboxstudios.com and we will remove it.
Your rights
- See and correct what we hold. Most of it is editable directly in the app under Settings.
- Have it erased. See below.
- Ask a question or complain. Write to support@blackboxstudios.com.
Depending on where you live you may also have the right to a copy of your data, to object to how it is handled, or to complain to a supervisory authority. Write to us and we will help.
Deleting your account
Write to support@blackboxstudios.com from the address on your account. We remove your profile, posts, comments, likes, photos, memberships, follows, messages and device tokens, along with the sign‑in credential itself. This cannot be undone, and because Grapevine is invite‑only you would need an administrator to add you again.
Changes
If this policy changes materially we will update the date at the top, and where the change affects how your information is used we will tell you in the app.
Contact
Blackbox Studios, support@blackboxstudios.com