Privacy Policy

1. Introduction

Welcome to Glimtalk ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-native social network.

By using Glimtalk, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly:

• Account Information: Username, email address, password (encrypted)
• Profile Information: Display name, bio, profile photo, location (optional)
• Content: Posts, comments, messages, photos, and other content you create
• Payment Information: Billing details for Pro subscriptions (processed securely by LemonSqueezy)

2.2 Automatically Collected Information

When you use Glimtalk, we automatically collect:

• Usage Data: Pages viewed, features used, time spent, interaction patterns
• Device Information: Device type, operating system, browser type, IP address
• Location Data: Approximate location based on IP address (not precise GPS)
• Cookies and Tracking: See our Cookie Policy

2.3 AI-Generated Data

Our AI features may generate:

• Conversation Starters: AI-suggested prompts based on post content
• Energy Tags: Automatic mood classification (high/calm/low)
• Memory Insights: Personal patterns and observations (Pro feature only)
• AI Roommate Interactions: Messages from Zara, Quinn, or Blaze

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Personalize your experience with AI features
• Process transactions and send related information
• Send you notifications, updates, and promotional content (you can opt out)
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations and enforce our Terms of Service
• Conduct research and analytics to improve our platform

4. AI and Machine Learning

4.1 How We Use AI

Glimtalk uses Google's Gemini AI to power features like conversation starters, energy tags, and AI roommates. Your content may be processed by AI to provide these features.

4.2 Memory Mode (Pro Feature)

Pro users who enable Memory Mode allow our AI to remember past conversations and preferences to provide personalized responses. You can disable Memory Mode or delete all memories at any time in your settings.

4.3 Data Processing

Content processed by AI is sent to Google's Gemini API. Google may temporarily process this data but does not use it to train their models. See Google's AI privacy policies for details.

5. How We Share Your Information

We may share your information with:

5.1 Other Users

• Public posts and comments are visible to all users
• Your profile information (username, bio, photo) is public
• Private messages are only visible to participants

5.2 Service Providers

• Supabase: Database and authentication hosting
• Vercel: Web hosting and deployment
• Oracle Cloud: Backend API hosting
• Google (Gemini AI): AI features and processing
• LemonSqueezy: Payment processing (PCI-DSS compliant)

5.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, property, or safety, or that of our users or the public.

6. Data Security

We implement security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Encrypted password storage (bcrypt hashing)
• Secure authentication tokens (JWT)
• Regular security audits and updates
• Role-based access control (RBAC)
• Rate limiting to prevent abuse

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Update

You can access and update your account information at any time through your profile settings.

7.2 Data Deletion

You can delete your account and all associated data at any time. Go to Settings → Account → Delete Account. This action is permanent and cannot be undone.

7.3 Export Your Data

You can request a copy of your data in machine-readable format. Contact us at privacy@glimtalk.com to request a data export.

7.4 Marketing Communications

You can opt out of marketing emails by clicking "Unsubscribe" in any email or adjusting your notification settings.

7.5 AI Memory (Pro)

Pro users can disable Memory Mode, view all stored memories, or delete specific memories at any time in Settings → Privacy → Memory Mode.

8. Children's Privacy

Glimtalk is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@glimtalk.com, and we will delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using Glimtalk, you consent to the transfer of your information to our facilities and service providers worldwide.

10. Data Retention

We retain your information:

• As long as your account is active
• As necessary to provide services
• As required by law or for legitimate business purposes
• For up to 30 days after account deletion (backup retention)

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Your continued use of Glimtalk after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

13. Additional Rights (GDPR/CCPA)

For EU Users (GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion (right to be forgotten)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

For California Users (CCPA)

You have the right to:

• Know what personal information is collected
• Know if your information is sold or disclosed
• Opt-out of the sale of personal information (we do not sell data)
• Request deletion of personal information
• Non-discrimination for exercising your rights