Privacy Policy

We use the information we collect to:

• Matching: Determine when two users have checked in within 100 meters of each other and facilitate blind matches.
• Communication: Enable messaging between mutually matched users.
• Safety & Security: Detect and prevent fraudulent activity, abuse, harassment, and violations of our Terms and Conditions.
• Service Improvement: Analyze usage patterns to improve features, performance, and user experience.
• Account Management: Authenticate your identity, manage your account, and communicate with you about service-related matters.

Your privacy regarding location is extremely important to us. We want to be clear about how location data works in Glimpse:

• Location is collected only when you actively drop a glimpse. We never track your location in the background.
• Your precise coordinates are used for proximity matching (100m radius) but are never displayed to other users.
• Other users may see a general area description (e.g., neighborhood or venue name) but never your exact location.
• Location data associated with glimpses is automatically deleted after 24 hours.
• You can revoke location permissions at any time through your device or browser settings.

Photos you upload are stored securely in Supabase Storage. When you appear as a potential match to another user, your photos are displayed in a blurred state. Photos are only revealed in full clarity after both users have mutually matched. You can delete your photos at any time from your profile settings.

Your data is stored using Supabase, which provides enterprise-grade security including encryption at rest and in transit. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission using TLS/SSL.
• Encrypted data storage with AES-256 encryption at rest.
• Row-level security policies to ensure users can only access their own data.
• Regular security audits and vulnerability assessments.
• Secure authentication via Supabase Auth with session management.

We use the following third-party services to operate Glimpse:

• Supabase: Provides authentication, database, and file storage services. Your account data, profile information, and photos are stored using Supabase infrastructure.
• Mapbox: Provides mapping and geocoding services. When you drop a glimpse, your location coordinates may be processed by Mapbox to display map tiles and location context. Mapbox's privacy policy governs their handling of this data.
• Vercel: Hosts the Glimpse web application. Vercel may collect standard server logs including IP addresses, browser types, and access times.

We do not sell your personal data to any third party. Data is shared with these services only as necessary to operate the Glimpse platform.

Glimpse uses minimal cookies. We use only essential cookies required for authentication and maintaining your session. We do not use advertising cookies, tracking cookies, or third-party analytics cookies. The cookies we use are:

• Authentication session cookie: Keeps you logged in securely across page visits. This cookie is essential for the service to function and cannot be disabled.

• Glimpses: Check-in data (including associated location data) automatically expires and is deleted after 24 hours.
• Matches & Messages: Conversation data is retained for the duration of the match unless either party deletes the match or their account.
• Account Data: Your profile information, photos, and account data are retained until you choose to delete your account.
• Post-Deletion: When you delete your account, all personal data is permanently removed from our systems within 30 days. Some anonymized, aggregated data may be retained for analytics purposes.

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request corrections to inaccurate or incomplete personal data.
• Deletion: Request deletion of your account and all associated personal data.
• Export: Request a portable copy of your data in a commonly used format.
• Withdraw Consent: Withdraw your consent for location data collection at any time by revoking location permissions.

To exercise any of these rights, please contact us at privacy@theglimpse.app. We will respond to your request within 30 days.

Glimpse is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a user under 18, we will promptly delete their account and associated data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the “Effective Date” at the top of this page and, where appropriate, providing additional notice via email or an in-app notification.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

privacy@theglimpse.app