Privacy Policy

1. Introduction

At Glance, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service. We are committed to transparency and giving you control over your data.

2. Information We Collect

2.1 Account Information

Email address: Used for account creation, authentication, and important service communications
Name: Optional, collected during onboarding for personalization
Password: Stored securely using industry-standard hashing (we never see your plain-text password)

2.2 Feed Data

Webhook payloads: The data you send to your feeds via HTTP requests
In-app uploads: Images, text, and other content you submit directly through the Glance app (e.g. via the "Upload to Widget" flow), including images selected from your photo library or captured via your camera
Feed metadata: Feed names, schema types, creation dates, and preferences
Event logs: History of feed updates, including timestamps and status (accepted/rejected/throttled)

2.3 Device Information

Device type: iOS, Android, or Web
OS version: To ensure compatibility
App version: To provide appropriate features
Push notification tokens: Required to send notifications to your devices
Last seen timestamp: To show device activity status
Camera and photo library access: When you use the "Upload to Widget" feature, the app requests permission to access your camera and photo library to select or capture images for your feeds. We do not access your camera or photos at any other time. Images you select are sent to our servers only to be processed and displayed on your widgets.

2.4 Usage Data

API usage: Number of webhook requests, to enforce rate limits and plan quotas
Error logs: Technical logs to diagnose and fix issues (no personal data or webhook content)

2.5 Payment Information

We use Apple In-App Purchase and Google Play Billing for subscriptions. We do not store or process credit card information directly. Payment data is handled entirely by Apple and Google according to their privacy policies.

2.6 Public Widget Data

If you choose to use the Public Widgets feature, additional data is collected and, where applicable, made publicly visible:

Published widget metadata: Widget name, description, category, and a system-generated public URL slug (e.g. glance.cool/x7k2m9pq). This information is publicly visible to any Glance user and to unauthenticated visitors on the web.
Creator display name: When you publish a widget, your display name is shown alongside your widget in the Discover page, on public web landing pages (glance.cool/{slug}), and in the widget lists of all subscribers. This is the name you provided during onboarding.
Published feed content: The current state of your widget's feeds (images, text, data values) is visible to your subscribers and to any unauthenticated visitor on the public web page for your widget, as long as the widget is marked discoverable.
Subscription relationships: We record which public widgets you have subscribed to. This information is used solely to include subscribed widgets in your device sync and is not exposed to other users or to widget creators.
Widget URL click events: When a subscriber taps a link on a public widget that has a URL configured, we record that a click occurred (timestamp, widget, and user ID). This data is used to provide creators with aggregate click counts. We do not share individual subscriber identities with creators.

3. How We Use Your Information

To provide the Service:

Store and update feed state based on incoming webhooks or direct in-app uploads
Display feed data on your iOS widgets and in the web console
Send push notifications when feed data changes
Maintain event history for debugging and monitoring
Display your published widget content to subscribers on their home screens and in the Discover page
Serve public widget landing pages (glance.cool/{slug}) to unauthenticated visitors, including generating rich social preview metadata
Provide creators with aggregate analytics (subscriber count, total URL clicks) for their published widgets

To maintain and improve the Service:

Monitor system performance and uptime
Diagnose and fix technical issues
Enforce rate limits and plan quotas
Prevent abuse and fraudulent activity

To communicate with you:

Send critical service notifications (downtime, security issues)
Respond to support inquiries
Notify you of significant updates to Terms or Privacy Policy

4. What We DO NOT Do With Your Data

We do not sell your data to advertisers, data brokers, or third parties
We do not analyze your private feed content for marketing, profiling, or any purpose other than delivering it to your widgets. This commitment applies to all private feed data — webhook payloads and in-app uploads alike.
We do not share your data with third parties except as required to provide the Service (see Section 5)
We do not use tracking pixels or advertising networks
We do not read your private feed payloads unless you explicitly grant us access for support purposes
We do not expose individual subscriber identities to creators. Widget click analytics show creators aggregate counts only — not which specific users clicked or subscribed

Note on public widget content: Content you choose to publish via the Public Widgets feature (widget names, descriptions, feed images, and data values) is intentionally made visible to any Glance user and to unauthenticated visitors on the public web. This is by your explicit choice when you publish a widget. Private feed data — feeds that are not part of a published public widget — remains completely private and is never shared.

5. Data Sharing and Third Parties

We only share data with the following service providers, who are bound by contractual obligations to protect your data:

Supabase: Database and authentication provider (stores account info, feed data, device info)
Firebase Cloud Messaging (FCM): Push notification delivery for Android (when supported)
Apple Push Notification Service (APNs): Push notification delivery for iOS
RevenueCat: Subscription management and billing (receives anonymized user IDs)
Hosting provider: Infrastructure hosting (currently Fly.io or Render)

Legal Requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of Glance, our users, or others.

6. Data Retention

Active Accounts:

Account information is retained as long as your account is active
Feed state is retained indefinitely while the feed exists
Event logs are retained according to your plan limits (7/14/45 days for Free/Pro/Power)
Device information is retained while the device is registered

Deleted Accounts:

When you delete your account, all associated data (feeds, events, devices, public widgets, subscriptions, and click events) is permanently deleted within 30 days
Any public widgets you had published are unpublished immediately upon account deletion; subscribers will no longer see your content
Your widget subscriptions and associated subscription records are deleted along with your account
Backup copies are purged after 90 days
We may retain minimal transaction records for legal and accounting purposes (e.g., subscription history)

7. Data Security

We implement industry-standard security measures to protect your data:

Encryption in transit: All data transmitted to/from our servers uses TLS/HTTPS
Encryption at rest: Database and backups are encrypted
Password security: Passwords are hashed using bcrypt with per-user salts
Write key security: Feed write keys are hashed and never displayed after creation
Access controls: Strict role-based access to production systems
Regular security audits: We review and update security practices regularly

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Privacy Rights

You have the following rights regarding your data:

Access: View your account information and feed data in the web console
Export: Request a copy of your data (contact support@glance.cool)
Correction: Update your name and email in settings
Deletion: Delete individual feeds or your entire account through the web console
Objection: Opt out of non-essential communications

To exercise these rights or if you have questions, contact us at privacy@glance.cool

9. Children's Privacy

Glance is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it immediately.

10. International Users

Glance is operated from the United States. If you are accessing the Service from outside the US, please be aware that your information may be transferred to, stored, and processed in the US where our servers and service providers are located.

11. Cookies and Tracking

We use minimal cookies and tracking:

Authentication cookies: To keep you logged in (required for functionality)
Session cookies: To maintain your session state

We do not use third-party analytics (like Google Analytics), advertising cookies, or tracking pixels. We respect your privacy and don't follow you around the web.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a prominent notice in the Service. Continued use after changes constitutes acceptance of the updated policy. The "Last Updated" date at the top indicates when the policy was last modified.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

Email: privacy@glance.cool

Support: support@glance.cool

Our Commitment to Privacy

We built Glance because we believe developers deserve tools that respect their privacy. We don't track you, we don't sell your data, and we don't do anything sketchy with your webhooks. Your data is yours, and we're just here to help you display it beautifully.