GLORA

Privacy policy

Effective September 5, 2026 · Operated by Randy Ventures

This policy covers the Glora iPhone/iPad app and myglora.app. Randy Ventures operates Glora. For privacy questions or requests, email randyventures06@gmail.com.

Information we collect and why

Sign in with Apple provides an account identifier and, when available, your name and email, including a Hide My Email relay address. We use these to create and secure your account. We do not receive your Apple password. Apple authorization credentials are stored encrypted on our server; the app stores its session in iOS Keychain.

We store the information you enter to provide the service: your profile name, username, bio, treatments, prices, recurrence, due dates, provider details, notes, completion history, sharing choices, payment-app handles, and notification preferences. We also store treat requests, sender reports, recipient responses, and abuse reports to operate the treat workflow and address misuse. Please do not put sensitive medical information into your profile or notes.

Apple and RevenueCat provide subscription status and transaction information linked to your Glora account ID, so we can check access, restore purchases, and process renewals or expiration. Glora does not receive your card number or bank credentials.

In app version 1.0 build 5 and later, sharing first-party usage analytics is optional and off by default on each device. If you enable it in Settings → Privacy, the app sends limited events, such as app opens, onboarding progress, and plan type, associated with an account or installation identifier. Turn it off to stop future usage events; this does not affect subscription access. Earlier pilot builds sent these events while signed in without that setting. Events help us understand use and improve reliability; they do not include free-form notes or payment credentials. Essential subscription verification and provider security/operational processing still occur. Hosting services may process IP addresses and technical/security logs. The website has no advertising or third-party analytics scripts; Glora does not sell personal information or use it for cross-app advertising tracking.

What is public

When public sharing is enabled and you have subscription access, anyone with your link can see your public profile, the treatments you choose to share, their schedule, and enabled payment handles. Private prices, provider details, notes, and history are not returned by the visitor API. Turning sharing off makes your profile unavailable, but cannot retract information already copied by someone else.

Visitors do not need an owner account. Payment apps may reveal sender or recipient identities according to their own settings. Glora does not process external payments or verify that money settled; sender and recipient confirmations are their statements, not financial verification.

Service providers

We use Render for the website, API, and PostgreSQL database hosted in the United States; Cloudflare for domain/DNS services; Apple for sign-in, app distribution, subscription billing, and push notifications; and RevenueCat for subscription management. Data may therefore be processed outside your country. These services handle data needed for their roles, subject to their terms and privacy protections. External payment services are separate services you choose to use.

Read the provider policies: Render, Cloudflare, Apple, RevenueCat, Venmo, and Cash App.

Cookies, device storage, and reminders

The visitor website uses an essential eight-hour session cookie when a visitor session is established. Preparing a treat extends the encrypted, HTTP-only continuation cookie to up to 30 days so you can return in the same browser. Clearing cookies, expiration, or a security-key change can end access. These cookies are functional, not advertising cookies.

The app stores a protected, account-scoped cache for offline use and your appearance preference on your device. Local treatment reminders require notification permission, which you can change in iOS Settings. App version 1.0 build 6 and later also supports optional remote treat alerts when someone reports sending a treat. With notification permission, we store Apple's device push token linked to your signed-in session to deliver enabled alerts through Apple Push Notification service. This token is used for notification delivery, not advertising. Remote alerts contain no names, treatments, amounts, or payment verification; opening one loads Activity for the currently signed-in account. Profile views and payment-app clicks do not trigger alerts. Glora billing alerts remain disabled in this pilot.

Turn off Treat alerts in Glora Settings → Notifications and save, or change system permission. Online sign-out removes the session's push binding; offline sign-out is retried when the app reconnects. An alert already accepted by Apple cannot be recalled. Account deletion removes linked device bindings and notification jobs. Completed notification jobs are retained for up to seven days before routine cleanup; expired undelivered jobs are also cleaned up. Delivery is not guaranteed, and the pilot does not queue alerts at Apple for an offline device. Check Activity for the authoritative treat state.

Retention and account deletion

We keep your live account and linked treatment records while your account remains open, unless you remove them sooner. Deleting an item and archiving it are different: archived items remain in your account. Use Settings → Delete Account to request account deletion. Successful deletion removes the live account and its linked profile, treatment, history, payment-link, and treat records and revokes stored Apple authorizations. If Apple revocation cannot complete, the app reports an error so you can retry or contact us.

Successful account deletion also removes usage events and reports still linked to your account, removes your account reference from subscription-webhook records, and requests deletion of your Glora customer record from RevenueCat. RevenueCat processes erasure asynchronously; a provider error keeps the Glora deletion request retryable instead of reporting success. Deletion is not an instant erasure of every record everywhere: older records already unlinked from an account, security logs, and backups may remain. The current pilot does not automatically expire all such records on a fixed schedule. Contact us for review of remaining identifiable records. Hosting backups and logs expire under the provider’s retention settings. Apple and external payment services retain their own records under their policies.

Deleting the app or your Glora account does not cancel an Apple subscription. Cancel separately in your Apple subscription settings.

Your choices and privacy requests

You can edit your information, disable public sharing or payment links, change notification permission, sign out, or delete your account. Email randyventures06@gmail.com to request access, correction, export, deletion, or to raise a privacy concern, including about usage data. Include your Glora username if you have one; we may need to verify account ownership. Do not send passwords, sign-in codes, identity tokens, or payment credentials. Rights and applicable exceptions depend on where you live; this policy does not limit rights provided by law.

If a child has provided personal information without appropriate permission, contact us so we can investigate and address it. We will update this page when our practices change and revise the effective date.