Glacius privacy policy

Draft for review before launch. Plain language on purpose; have counsel check it against the storefronts you list in.

Glacius is operated by Glacius, Inc., a Delaware corporation ("we"). This policy says what we collect when you use the Glacius app and website, why, and what you can do about it.

What we collect

Your account. A name if you give one, your email address (or the private relay address Apple provides), and which sign-in method you use. We use these to sign you in, keep your progress on your account, and contact you about your account.

Membership payments. Stripe processes payments and stores your payment method. Glacius receives Stripe customer and subscription identifiers, your plan, payment and trial status, renewal dates, and cancellation status. We use these to provide access, prevent duplicate subscriptions, and manage billing. We do not receive or store your full card number or security code. Your two free starting units are stored with your account so that your allowance follows you across devices.

Your learning. The lessons you read, the questions you answer and how you answered them, the sessions you complete, the quests you join, and the answers you gave during setup (your goal, background, and daily time). This is the product: it is how the app knows what you know and what to show you next.

AI features. AI is part of learning in Glacius, and some question formats require AI grading. The sign-up and sign-in forms include a preselected checkbox agreeing to share your submitted questions and answers, relevant conversation history, and lesson context with AI providers for grading, explanations and replies. Agreement is recorded when you continue with the box checked, not when the form loads. Unchecking it prevents continuing into the app. “How AI uses your data” lists the current providers and explains this processing. Existing signed-in sessions without the current agreement see a compact confirmation. We remember agreement on this device until sign-out. Signing out prevents further AI requests from that app session; it does not delete information already sent.

Questions you ask. Ask questions and replies are stored with your account. Settings → Ask controls whether your saved conversations may be used to improve our lessons; it does not turn off conversation storage or control permission to send content to AI providers.

Usage analytics. We record product events such as opening the app, starting or finishing a session, answering a question, and finishing a lesson, with details like which concept, whether the answer was right, and how long it took. We send these events to Mixpanel, our analytics provider, under an account identifier. We never send your name, your email address, or anything you type. We use this to see where lessons lose people and to improve them. You can turn this off in Settings under Privacy at any time.

Website analytics. We record visits to the web app, public lesson library and lesson pages, and clicks from those pages into the app. These events include the page category, lesson identifier, referring website’s public domain, traffic source, and approved marketing campaign and link labels. Referral paths, query strings, identifying subdomains, search terms, and unrecognized campaign text are not sent to Mixpanel. We retain your first observed website acquisition and most recent non-direct source with your account and analytics profile to understand which marketing leads to sign-ups and learning activity; direct returns and navigation within our site do not replace a known campaign. A random identifier stored in your browser connects visits to your later app activity and sign-up. A small queue of unsent website events is stored in your browser and expires after one day. Use “Turn off website analytics” in the public-site footer to stop website tracking on that browser; your account’s analytics opt-out stops analytics events and profile updates and clears the acquisition record held with your account. Opting out does not retroactively delete events already sent to Mixpanel.

Technical data and approximate location. We record the platform and app version you use, so we can fix problems. For usage and website analytics, our server uses your connection's IP address to estimate your city, region, and country using a local database. We send only those approximate location labels to Mixpanel with your analytics events and profile updates. We do not collect GPS or precise location, and we do not send your IP address or coordinates to analytics providers. Estimates may be missing or inaccurate, especially with VPNs and mobile networks. Your analytics opt-out also stops this location tracking. IP Geolocation by DB-IP (https://db-ip.com), using its City Lite database under Creative Commons Attribution 4.0.

Learning reminders. If you enable notifications, we store your device’s push token or browser subscription and encryption keys, your chosen reminder time, timezone and days, and delivery/open records. We use your learning progress to send useful reminders and skip them after you have learned that day. You can pause reminders, turn them off for a device, or turn them off everywhere in Settings → Notifications. Notification permission is separate from usage analytics; reminders still work if you turn analytics off. Push tokens, browser subscription endpoints, and encryption keys are never sent to Mixpanel.

Who else sees data

• AI providers process submitted questions, answers and relevant lesson/conversation context for grading, explanations and replies. Our current provider is OpenAI. We update the provider list and agreement before enabling additional recipients for your content.
• Stripe receives your billing email, payment details and an internal account identifier to process membership payments and manage subscriptions. Stripe handles payment data under its privacy policy at https://stripe.com/privacy. Payment credentials and Stripe customer identifiers are not sent to Mixpanel.
• Mixpanel receives the usage events described above.
• Apple and Google handle sign-in when you choose them. They tell us who you are; we do not get your password.
• Apple and your browser’s push provider (such as Google, Mozilla, or Microsoft) deliver notifications when you enable them. They process the delivery information needed for that service; Apple receives native notification content, and browser push payloads are encrypted for your browser.

We do not sell your data and do not share it for advertising.

Where it lives and how long

Your data is stored on our servers for as long as you have an account. Deleting your account in Settings removes your profile and learning record; backups are cleared within 30 days. Analytics events already sent to Mixpanel are deleted on request.

Your choices

• Turn off usage analytics in Settings under Privacy.
• Pause or turn off learning reminders in Settings under Notifications, or change permission in your device or browser settings. Signing out disconnects reminders on that device; deleting your account removes its notification records.
• Uncheck the AI-sharing agreement before continuing on the sign-up or sign-in form. AI is required for the app's learning experience. After agreeing, you can sign out in Settings to stop using the app and clear this device's agreement.
• Turn off use of your Ask conversations to improve lessons in Settings. Conversations are still stored with your account.
• Delete your account in Settings, or by emailing us.
• Ask for a copy of your data, or for it to be deleted, at the address below.

Children

Glacius is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect.

Contact

tangandrewdev@gmail.com

Billing after account deletion. Deleting your account first cancels active Glacius subscriptions and open checkouts, then removes the billing identifiers and access records stored in our app database. Stripe may retain transaction and customer records for its legal, accounting and fraud-prevention obligations; deleting a Glacius account does not erase Stripe’s financial records.