Privacy Policy

This policy explains what Glance collects, why, where it is stored, who it is shared with, and the rights you have. The short version: files you open stay on your Mac; only media you deliberately send to a cloud Widget leaves it.

1. What stays on your Mac

• Images, videos and files you open, browse, compare, capture or process with local tools. They are never uploaded.
• Preferences, local history and the app log at ~/Library/Application Support/Glance.
• If you enable Peek, the text you select is read locally to find a link or path. It is not sent to our servers; previews of web links load directly from that website.

2. What we collect

• Account data: your email address; with Google sign-in also your name, profile picture and Google account ID. Sign-in sessions are stored only as a one-way hash.
• Email verification: a hashed one-time code and rate-limit counters, deleted after expiry.
• Device data for licensing and abuse prevention: a hashed device identifier, the Mac's name and last-used time, used to enforce the device limit, the one-trial-per-Mac rule and the one-bonus-per-Mac rule.
• Cloud Widget tasks: the media you choose to upload, task parameters you enter (for example a prompt), the result, task status, timestamps and the credit cost.
• Credits and orders: your credit balance and ledger, and order records from our payment provider: order ID, product, amount, currency, buyer email, billing country and status. We never receive your full card number.
• Request metadata: IP-derived country (used to pick the default currency and the processing region) and standard server logs.

3. How we use it

To sign you in, run the Widgets you request and return results, charge and refund credits, deliver purchases and licences, prevent fraud and abuse, answer support requests, and meet legal obligations. We do not sell personal data, we do not use it for advertising, and we do not use your media to train AI models.

4. Where it is stored

Account, credit, order and task records are stored in Cloudflare D1, and uploaded media and results in Cloudflare R2, operated by Cloudflare, Inc. on its global network.

5. Who we share it with

• Cloudflare — hosting, database and file storage.
• Google — only if you choose Google sign-in.
• Resend — delivers email verification codes.
• RunningHub (runninghub.cn) — receives the media and parameters of tasks for the AI Widgets that run on it.
• Freeimage.host — receives images you upload with the Image Hosting Widget from mainland China; such links are public.
• Pancake by Waffo — our Merchant of Record; processes payments, taxes and refunds under its own privacy policy.
• Authorities, when required by law.

6. Retention

Account, credit and order records are kept while your account exists; order records may be kept longer where tax or accounting law requires. Uploaded media and results are currently kept until you ask us to delete them or delete your account; we will announce any automatic retention period on this page before introducing it. Expired verification codes and sessions are deleted.

7. Your rights

You can ask to access, correct, export or delete your personal data, delete specific uploads, or delete your account, and you can object to processing or withdraw consent. Email [email protected] from your account email address. We respond within 30 days. You may also complain to your local data protection authority.

8. Security

Traffic uses HTTPS. Sign-in tokens are stored on your Mac in the macOS Keychain and on our servers only as hashes. Result links to Glance storage are time-limited signed URLs.

9. Children

Glance is not directed to children under 13, and we do not knowingly collect their data. Contact us if you believe a child has given us data.

10. Changes and contact

We will post changes on this page and, for material changes, notify you by email. Questions: [email protected].