Privacy Policy

Gleam ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use the Gleam iOS application ("the App").

Gleam is available on the App Store in the United States, Canada, Australia, and the United Kingdom. It is not distributed on the European App Store.

1. Information We Collect

Account Information

If you choose to create an account, we may collect your email address. Account creation is optional — you can use Gleam without creating an account.

Usage Analytics

We use PostHog to collect anonymized usage analytics. This includes which features you interact with, how often you open the app, and which affirmation categories you browse. This data helps us improve the app experience. No personally identifiable information is linked to analytics events.

Subscription Information

We use RevenueCat to manage in-app subscriptions. RevenueCat processes your subscription status and purchase receipts. Payment information is handled directly by Apple and is never shared with us.

Affirmations & Content

If you create custom affirmations or save favorites, this data is stored securely via Supabase (our backend database provider) and locally on your device using MMKV storage.

Device Information

We may collect minimal device information (such as iOS version and device type) solely for debugging and compatibility purposes. This information is not sold or shared with third parties for advertising.

2. How We Use Your Information

We use the information we collect to:

• Provide and improve the Gleam app experience
• Manage your subscription and restore purchases
• Sync your saved affirmations and preferences across sessions
• Diagnose technical issues and improve app stability
• Understand which features are most useful to our users

We do not sell your personal data. We do not share your information with third parties for advertising or marketing purposes.

3. Data Sharing

We share your data only with the following trusted service providers:

• PostHog — anonymized usage analytics (privacy policy)
• RevenueCat — subscription management (privacy policy)
• Supabase — secure backend data storage (privacy policy)
• Apple — payment processing via App Store

These providers are contractually obligated to protect your data and may not use it for their own commercial purposes.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you request deletion of your account, we will delete your personal data within 30 days, except where retention is required by law.

5. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your account and personal data
• Opt out of usage analytics (via iOS settings)

To exercise any of these rights, contact us at privacy@gleamapp.co.

6. Children's Privacy

Gleam is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

7. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. All data in transit is encrypted using TLS. Data at rest is encrypted by our infrastructure providers.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: privacy@gleamapp.co