Who we are
Grapple is published by Showrunner-Studio Ltd, a private limited company registered in England and Wales (company number 16955290), whose registered office is at 124-128 City Road, London, EC1V 2NX, United Kingdom. That’s who “we” and “us” refer to in this notice. We decide how the personal data described here is used, which makes us its controller under UK data protection law.
For anything about your privacy, email [email protected].
The short version
- Grapple runs on your computer. Your projects, media, chats with Ape, settings and keys stay there.
- We don’t run accounts for Grapple, and the app sends us no analytics or usage data. Its only automatic contact with us is a check for updates.
- When you use a cloud AI service with Ape or Create, Grapple sends that service what the task needs, under your own key or account with it.
- To download Grapple, you give us your name and email address. We email you news only if you tick the box for it, and you can ask us to delete your details at any time.
- Our website has no analytics, no trackers and no cookies of its own, and our download records never contain your IP address.
- We don’t sell data, and Grapple shows no advertising.
On your computer
These stay on your computer, and you can delete any of them yourself.
- Your projects
- Your edits, the media you import or links to where it’s stored, and each project’s history.
- Ape’s chats
- Your messages, Ape’s replies and the work Ape did, saved inside the project they belong to.
- Settings and keys
- Your preferences, and any AI service keys you save. Windows encrypts each key for your user account, so other accounts on the computer can’t read it.
- Programs and models you install
- Optional programs, such as Claude Code, and AI models that run on your computer.
- Crash reports
- If Grapple crashes, it saves a report in its diagnostics folder and never sends it anywhere. A report can hold fragments of what you were working on. If you choose to send us one, we use it only to fix the problem.
AI services you choose
Ape and Create need an AI model, and you choose which. A cloud service receives something from your project only when you use it: when Ape works on a request you sent, or when you start a run in Create. It then gets what that task needs.
- A service you give a key
- With Anthropic, DeepSeek, Google Gemini, OpenAI, OpenRouter, xAI or a compatible service you add yourself, Grapple sends your request, the relevant part of the chat and what Ape needs for the task straight to that service. That can include text from your project, transcripts, images, video frames and audio. Grapple sends your key only where the Vault page in Settings allows it to go.
- Claude Code or Codex
- These are programs from Anthropic and OpenAI that you install and sign in to with your own Claude or ChatGPT account. Grapple gives the task to the program on your computer, and the program sends it to its own service under your account.
- OpenCode
- An open-source program you install and sign in to. Grapple gives it the task, the relevant part of the chat and the results of Ape’s tools, and OpenCode sends them to the model service you set up in it. Grapple turns off OpenCode’s option to share a conversation online.
- Google Vertex AI
- Vertex AI makes images and video in Create. Grapple sends Google the prompt, any images or video you add, the generation settings, and the names of your Google Cloud project, location and model. It signs in through the Google Cloud CLI on your computer. When Google leaves a finished video in Cloud Storage, Grapple downloads it from there with the same sign-in.
- A model on your computer
- With Ollama or LM Studio running on your computer, requests stay on your computer.
- Other agents
- Let other agents use Grapple starts turned off. If you turn it on in Settings, an agent you run yourself, such as Claude Code or Codex, can read and change the open project, and sends what it reads to its own service.
Each service handles what it receives under its own terms and privacy policy, and under your account or key with it. We can’t see or delete what a service keeps. Their privacy policies: Anthropic, OpenAI, Google, Google Cloud, DeepSeek, OpenRouter, xAI and OpenCode.
Web search and commands
When Ape works through Claude Code, Codex or OpenCode, it can search the web and read pages.
- With Claude Code, Grapple turns on Claude’s web search and page reading, so Anthropic receives search queries and the addresses of pages Ape reads.
- With Codex, Grapple turns on Codex’s live web search, so search queries go to OpenAI.
- With OpenCode, Grapple turns on its web search, which sends search queries to Exa, and its page reading, which requests pages from their websites. Exa handles searches under its privacy policy.
A search or an address can contain details from your task, and what comes back joins the chat that goes to the model service.
Ape can also run programs and scripts on your computer to finish a task. By default, Ape’s model reviews each command that needs to leave Grapple’s sandbox before it runs. On the Ape page of Settings, you can choose to approve each one yourself instead. Approved commands can use the internet, so they can download files and could send information to websites.
Because Ape acts on your computer, open projects, plugins and scripts from other people only if you trust where they came from.
Updates, installs and links
Grapple checks updates.grapplevideo.com for a new version when it starts and every four hours while it’s open, and downloads updates in the background. Like any web request, this shows our hosting providers your IP address and which update files Grapple asks for. The check carries nothing about you or your projects. To stop it, clear Update feed on the Updates page of Settings.
When you install an optional program or AI model, Grapple downloads it from where its publisher hosts it, such as GitHub, Google Cloud Storage, the Python Package Index or Hugging Face. That host receives your IP address and the name of what you download.
Links such as Get a key open in your web browser, where that website’s own terms apply.
Our website and downloads
Cloudflare delivers grapplevideo.com and protects it from attacks, so it handles your IP address. Our pages load their fonts and everything else from our own server, and use no analytics, no trackers and no cookies of their own.
When you download Grapple, we record the file and version, the date and time, and the country, region and city Cloudflare links to your connection. To count how many different people download each day, we also keep a short code made from your connection’s address, your browser’s name and version, and a random value that changes every day. We delete each day’s random value when we make the next one, so an old code can’t be traced back to anyone. Your IP address itself is never saved in our records.
To download Grapple, you give us your name and email address. You can also tell us what you’ll use Grapple for and your studio or company. We use these details to understand who Grapple reaches. We send you news and tips only if you tick the box for it, which starts unticked, and every email lets you unsubscribe.
Only we can see these details, on a password-protected page. If you ask us to delete them, we remove your name, email and answers, and the download stays counted without them.
Why we keep it, and for how long
UK data protection law asks us to name the reason, called the lawful basis, for each use of personal data.
- Your name, email and answers
- We use them to understand who Grapple reaches, which is our legitimate interest as its publisher. We keep them until you ask us to delete them, or for 24 months after your last download, whichever comes first.
- News and tips by email
- Only with your consent, which you give by ticking the box. You can withdraw it at any time with the link in any email or by writing to us.
- Download records
- The file, version, time, approximate place and daily code let us count downloads, our legitimate interest. Once the day’s random value is deleted they can’t be linked to you, and we keep them as statistics.
- Update checks and server logs
- We use request logs only to deliver updates and downloads and to keep the service working and secure, our legitimate interest. Our server’s request logs, which can include IP addresses, are kept for no more than 14 days.
- Messages you send us
- If you email us, or send feedback or a crash report, we use it to answer you and to fix problems in Grapple, our legitimate interest. We keep it only while we need it for that.
We don’t sell your details or share them for anyone else’s marketing. We share them only with the companies that host our services, named below, or when the law requires it.
Where it’s stored
Our server runs on Amazon Web Services in its London region, and Cloudflare delivers our website and protects it. Cloudflare runs servers around the world, so your connection details can pass through countries outside the UK. Where they do, they’re covered by standard safeguards approved under UK law, such as standard data protection clauses.
Read Amazon Web Services’ privacy notice and Cloudflare’s privacy policy.
Your rights
Under UK data protection law, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it;
- delete it;
- restrict how we use it, or object to our using it;
- give it to you in a form you can take to another service, where that right applies.
Email [email protected] from the address you gave us, and we’ll reply within a month. It costs nothing. You can also withdraw your consent to news emails at any time.
Most of what Grapple handles never reaches us. Your projects, chats and keys stay on your computer, and AI services hold what they receive under your account with them, so for those, ask the service.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d like the chance to put it right first.
Children
Grapple and our website aren’t meant for children under 13, and we don’t knowingly collect their details. If you think a child has given us theirs, email us and we’ll delete them.
Changes to this notice
If we change this notice, we’ll publish the new version on this page and change the date at the top.