Last updated 11 October 2026
English · Svenska · Norsk · Dansk · Deutsch
Glenn is a family of small apps: Glenn Pack keeps a record of what you own and where you put it, Glenn Drive keeps your driving log, Glenn Proof keeps your receipts, Glenn Archive remembers which folder each of your papers is in, Glenn Service keeps track of when your car and the things at home were serviced and are due next, Glenn Wine keeps track of the wine and spirits you keep, Glenn Write writes down what you say as a note, a list or a diary, sealed so that only you can read it, and Glenn Trot is a notebook for people who follow harness racing: the day’s races, your picks, your notes on each horse and who pays whom, sealed so that only you and the people you play with can read it (each app is named in your language; in Swedish, for example, Glenn Lagra, Glenn Köra, Glenn Inköp, Glenn Arkiv, Glenn Serva, Glenn Vin, Glenn Skriva and Glenn Trav). One account works in all of them, and this page covers all of them. What you record is yours. We don't sell it, we don't advertise against it, and we store as little around it as we can.
Your email address, and a display name if you set one. Authentication is handled by Supabase Auth; passwords are stored only as hashes, and if you sign in with an email link we never see a password at all. If you allow Glenn to send what you say, or a picture, to OpenAI, we keep when you allowed it, so that every Glenn app knows; turning it off under Me clears it.
The places, boxes and things you add — box codes, names, quantities, details, and the notes you write. Also a history of changes (who changed what, and when) so that people sharing a place can see how it got that way, and records of the QR labels you have generated so you can reprint them.
Box photos are stored in private storage at Supabase. They are never public: the app loads them through short-lived signed links, and only people you have invited to that place can see them. When you remove or replace a photo, the file is deleted too, not just hidden.
The cars you add (a name, and the registration number if you give it) and your trips: the day, where you drove from and to, the errand, who you visited, whether it was for work, odometer readings, kilometres and your notes. Every change to a trip after it was saved (what it was, what it became, and when) is recorded by the database and shown in your yearly log, because tax offices ask for a log that isn't rewritten afterwards; you can read these records but not change them, and they go when your account does. A driving log shows where you have been, so it is kept private to you: Glenn Drive has no sharing, and nobody else can read your trips.
The details of each receipt: the shop, what you bought, the day, the amount, how you paid (only the kind, such as card, Swish, Vipps or MobilePay; never a card number), whether you bought it in a shop, online, by phone or at the door and the day it arrived, the dates that matter for it (open purchase, the 14 days to change your mind, the shop's or maker's warranty, an extended warranty, and the time to complain under the law of the country you bought it in), the country, whether it is meant to last many years (asked in Norway only), whether you bought it from a private person, and your notes. When you delete a receipt it is kept for 30 days in Recently deleted, so you can bring it back, and then removed for good. These details are readable by our systems, so the app can list, find and remind you about them. Glenn Proof has no sharing.
A picture you keep with a receipt is encrypted on your phone before it is uploaded, together with a small thumbnail. We store only the encrypted files. We do not have the key, so we cannot open them, and neither can anyone who gets hold of our storage. See “Pictures of receipts” below.
Glenn Archive remembers where your papers are; the papers themselves stay in their folders at home. For each folder: its name and where it is kept (“the blue folder in the hall cupboard”). For each paper: what it is (such as “House insurance”), its kind (insurance, contract, ID and passport, home, car, bank and pension, tax, warranty and manual, or other), who issued it, the dates that matter for it (when it expires or renews, the last day to cancel, or a date in your own words), which folder it is in, and your notes. These details are readable by our systems, so the app can find your papers, show you what is coming up and make your spreadsheet. When you delete a paper it is kept for 30 days in Recently deleted, with its copies, so you can bring it back, and then removed for good. A folder you delete does not go to Recently deleted: its papers stay, under Not in a folder, and the folder itself is removed for good 30 days later. Glenn Archive has no sharing.
Glenn never keeps an identity number (such as a Swedish personnummer, a Norwegian fødselsnummer, a Danish CPR number or the number of a German ID card), an account number or a card number as a detail of a paper: long numbers are removed from what it hears. Glenn Archive has nothing made for health papers. You can note where one is kept, but its details are your own words, so keep them to what helps you find it, and rely on the paper itself for what it says.
If you add a copy of a paper, the picture is encrypted on your phone before it is uploaded, with the same key as your receipt pictures in Glenn Proof (one key for both apps). Glenn Archive never reads a copy: it is sealed on your phone and sent only sealed. We store only the encrypted files, so we never see what is on a copy, including anything sensitive such as health details or an identity number. What we can see is that a copy exists, its size, when it was added and which paper it belongs to. See “Copies of papers” below.
The cars and the things at home you keep serviced: a name, the kind (car, other vehicle, heating, chimney and stove, ventilation, alarms and safety, or something else), a car's number plate if you give it, and where a thing is (“the boiler room”). What comes back for each, such as a service or a tyre change, and how often: every so many months or kilometres, in given months of the year, or on a day or at an odometer reading you were told. And each service: what was done, the day, who did it, the odometer reading and your notes. These details are readable by our systems, so the app can work out what is due next, find a service and make your spreadsheet. Glenn Service has no sharing.
If you say a car is the same car as in Glenn Drive, Glenn Service reads the highest odometer reading from your trips there, and nothing else from your driving log. If you link a service to a receipt in Glenn Proof, Glenn Service shows that receipt's shop, day and amount; the receipt and its picture stay in Glenn Proof, sealed, and nothing is copied. When you delete a car, a thing or a service it is kept for 30 days in Recently deleted, so you can bring it back, and then removed for good.
The wine and spirits you keep: each wine’s name, its kind, grape and region and the other details you save, when it is at its best, what it goes with, and your notes in your own words. The places you keep bottles, marked at home or further away (“the wine fridge”, “the cellar”, “the rented storage unit”), and a rack or box inside one. How many bottles of each wine are in each place, and the day a bottle was last taken out. What you answered when Glenn asked how the last bottle was, and whether you turned reminders off for a wine. These details are readable by our systems, so the app can find a wine, show what is at its best, answer what goes with dinner and make your spreadsheet. Glenn Wine has no sharing.
When your words and a wine’s label don’t say when it is at its best, Glenn may add a usual window for that kind of wine from its own table of wine styles (reading the label only names the style), always marked as Glenn’s guess. Wine names are matched against LWIN, a list of wines kept in our own database, so no outside service is asked. When you delete a wine or a place it is kept for 30 days in Recently deleted, so you can bring it back, and then removed for good.
Glenn Write writes down what you say or type as a note: a plain note, a list of things to tick (a shopping list in the order of the shop), steps (such as a recipe), a diary for a day, a log of dated lines, or a memory, dated by when it happened. Every note, with its title, its words, its subjects and the day it belongs to, is encrypted on your phone with your key before it is stored: the same key and key page as your receipt pictures in Glenn Proof and your copies in Glenn Archive. We store only the encrypted note, so we cannot read it, and neither can anyone who gets hold of our database. Your settings in Glenn Write (where in the shop you find each thing, and which of Glenn’s changes to check first) are sealed the same way.
What we can see is only what Glenn Write needs to work: the kind of note, when it was made and last changed, how it is divided into parts (each thing on a list, each step or line) and their order, whether a thing on a list is ticked, who you share a note with and what they can do, and in a shared note who wrote or last changed each part. When you delete a note it is kept for 30 days in Recently deleted, so you can bring it back, and then removed for good. See “Notes: written down once, then sealed” below.
Glenn Trot is a notebook for harness racing. It keeps your tickets (the races of a day, with the horses you picked and the ones you are thinking about, in your order), your notes on horses, how a ticket went (what you put in, what came back, who placed it, who pays whom, and your own words) and, if you play with others, a group and its pot. Each of these is encrypted on your phone with its own key before it is stored: the same key and key page as your receipt pictures, your copies in Glenn Archive and your notes in Glenn Write. We store only the encrypted data, so we cannot read it, and neither can anyone who gets hold of our database. The money in Glenn Trot is only written down: Glenn Trot never places a bet, shows odds, or moves, holds or collects money.
What we can see is only what Glenn Trot needs to work: the kind of record (a ticket, a note on a horse, a group or a pot), when it was made and last changed, which group a ticket belongs to, and who holds it and may change it. The horses you follow and the tracks you star are not sealed: they are public identifiers, and a reminder is made from them on our server. Race information is public, and the same for everyone (see “Glenn Trot: race information, your picks and groups” below). When you delete a ticket or a note on a horse it is kept for 30 days in Recently deleted, so you can bring it back, and then removed for good.
For each app, and for the subscription that covers every Glenn app: whether you have one, which product, and when it renews or expires. Payments are handled by Apple or Google in the phone apps, and by Stripe through RevenueCat on the web — we never see your card details.
This is the part worth being precise about, because it is unusual.
When you describe a box (Glenn Pack), a drive (Glenn Drive), a purchase (Glenn Proof), a paper (Glenn Archive), a service (Glenn Service), your bottles (Glenn Wine), a note (Glenn Write) or your picks and how a ticket went (Glenn Trot) out loud, or tell Glenn more about a receipt, a paper, a service or a note, the recording is sent to our server function, transcribed to text, and the text is turned into a list of the things you mentioned, the trips you described, the details of the purchase, the details of your papers, what was serviced and when it is due again, the wines you described, your note, or the horses you picked and what you said about how it went. Then both the audio and the transcript are gone. They exist only in memory for the length of that one request — they are never written to a database, never written to a file, and never logged. What is saved is what you check on screen and choose to keep.
During that request, the audio and the resulting text are processed by OpenAI, which acts as our processor for transcription and extraction. OpenAI keeps no copy of the audio. The text it turns into a list may stay in OpenAI's abuse-monitoring logs for up to 30 days (longer only if the law requires it) and is then deleted. OpenAI does not use any of it to train its models.
Before anything is sent to OpenAI for the first time, the app asks you, and names OpenAI. Nothing is sent until you allow it; one answer counts for every Glenn app, and you can turn it off under Me (Sharing with OpenAI). While it is off, our server refuses every recording, picture and dinner question, and everything you type in yourself keeps working.
We keep a status record of the job (queued, done, failed, how long the audio was, how many things, trips, receipts, papers, services, wines, parts of a note or changes to a ticket came out) so the app can show you progress and we can fix failures. That record contains no audio and no transcript.
When you take a picture of a receipt, a smaller reading copy is sent to our server function, which has the shop, the date and the amounts read from it and sends them back to your phone. The reading copy exists only in memory for that one request and is never written to a database or a file. What is saved is what you check on screen and choose to keep.
The picture you keep is encrypted on your phone (AES-256) with a key made on your phone. Your key is kept on your devices: on an iPhone in iCloud Keychain, which Apple encrypts end to end; on Android and in a web browser, on that device only, and in a browser only until you sign out. You can make a key page, a code and 12 words, to bring your pictures back on a new phone. It is shown to you once; we keep only a copy of your key locked with those words, which we cannot open. Nobody else takes part: we never hold a usable copy of your key, so we cannot help you open your pictures without it. If every copy of your key is lost, the pictures cannot be opened by anyone, but the details of every receipt stay.
During the reading request the picture is processed by OpenAI, which acts as our processor. OpenAI may keep the picture and the details it read in its abuse-monitoring logs for up to 30 days (longer only if the law requires it), and then deletes them. OpenAI does not use them to train its models.
When you take or choose a picture of a bottle’s label in Glenn Wine, it is sent to our server function, which has the wine’s details read from it and sends them back to your phone. The picture exists only in memory for that one request. It is never written to a database or a file, it is not sealed and kept, and it is not on our servers once it has been read. What is saved is what you check on screen and choose to keep.
During that request the picture is processed by OpenAI, which acts as our processor. OpenAI may keep the picture and the details it read in its abuse-monitoring logs for up to 30 days (longer only if the law requires it), and then deletes them. OpenAI does not use them to train its models.
Glenn Wine answers only from your own bottles. When you choose a dish, or name one that is on Glenn’s own word list, the answer is worked out on your device and nothing is sent anywhere. Only when no word matches does Glenn send the dish and a short list of your bottles to OpenAI, to choose among them: each wine’s name, kind, grape and region, whether it is at home and whether it is at its best. Your notes are never sent. As with a recording, OpenAI may keep that text for up to 30 days to detect abuse, and does not use it to train its models.
This happens at most 20 times a day for each person. To keep to that, we count how many times it was asked each day, and keep the count for 7 days. A question you ask out loud is transcribed like any other recording (see above). Glenn never names a shop, a price, a score or a link, and never encourages anyone to drink.
Every night Glenn works out from your own wines what is worth knowing: a wine at its best from this year, its best years ending, or bottles left of a wine you said was past its best. Each reminder is kept, so the same thing is never said twice, and goes when the wine does. The app shows them under Good to know.
On a Sunday morning, and never more than once a week, Glenn emails what is new to your account’s email address, in your language, through Resend. The email names the wines, what is worth knowing and how many bottles are left; nothing else. It is on unless you turn it off, under Me in the app or with the link at the bottom of every email, which works without signing in. We keep whether it is on, its language, and when the last one was sent. We don’t track whether you open the email or follow its links.
Glenn Proof, Glenn Archive and Glenn Service do the same with their dates. When a date on a receipt or a paper, or a service, starts to show under Coming up in the app, it is emailed once, on a Sunday morning, each app in its own email that you can turn off on its own. The email names the receipt (what was bought and where), the paper, or the car or thing and its service, with the kind of date and the day; never a picture, a copy or an amount.
Glenn Trot does the same for the horses you follow: when one of them has a start coming up in the next week, it is emailed once, on a Sunday morning, in Glenn Trot’s own email that you can turn off on its own. It is never sent on the day of the race, and it says nothing about your tickets: it names the horse, the day, the track and the race. The horses you follow are kept unsealed (a public identifier), because the reminder is made on our server.
A reminder can come as a notification on your phone instead. If you allow notifications in a Glenn app on your phone, the app gives our server an address for that phone (a token from Google’s Firebase Cloud Messaging, and whether it is an iPhone or an Android phone) so reminders can reach it; on an iPhone they pass through Apple’s push service. The notification then replaces the email, unless you choose otherwise under Me: a notification, an email, both, or nothing. It says what the email says, shortened. The phone’s address is removed when you sign out, when the app is removed from the phone, or after 60 days unused. Glenn never sends anything else as a notification, and we don’t track whether you open one.
Unlike a picture of a receipt, a copy of a paper in Glenn Archive is never read: not by our server, not by OpenAI, not by anyone. It is encrypted on your phone (AES-256) with your key, the same key and key page as in Glenn Proof (see above), and only the sealed file leaves your phone. Because we cannot read a copy, we do not process what is on it, including any health details, identity numbers or other sensitive information it may show. We store the sealed file and a few facts about it (that it exists, its size, when it was added and which paper it belongs to), and it goes when its paper does (see “How long we keep things”). If every copy of your key is lost, the copies cannot be opened by anyone, but the details of every paper stay.
A copy of an ID paper (a passport, an ID card or a driving licence) is marked “Copy” across the picture on your phone before it is sealed, so a copy can always be told from the original. German law asks for this (PAuswG § 20); Glenn does it in every country.
Only the copy is sealed. What you tell Glenn about a paper, such as its name, its folder and your notes, is an ordinary detail that our systems can read.
When you say a note in Glenn Write, the recording is sent once to our server function, transcribed and written down as a note, in your own words with the “um”s and repeats taken out, exactly like a recording in the other apps (see “What we never store: your voice”): it exists only in memory for that one request, and neither the audio nor the transcript is kept. The titles of your notes and your subjects go with each recording, so Glenn can reuse the subjects you already have and find a note you name. When you add to a note, the words already in it go too, so Glenn can put what you said in the right place and not repeat what is there. They are used for that one request and are not kept either. During that request the audio and the text, with what went with it, are processed by OpenAI, which acts as our processor. OpenAI keeps no copy of the audio; the text may stay in its abuse-monitoring logs for up to 30 days (longer only if the law requires it) and is then deleted. OpenAI does not use any of it to train its models.
What Glenn wrote down is shown to you before it is kept. When you add to a note, Glenn’s changes (what it adds, changes or takes out) are shown to you before they are kept; if you chose under Me to be asked less, anything saved without asking is marked in the note with Undo. Then the note is sealed on your phone and stored only sealed.
What you type is never sent to anyone to be read: a typed note, or words you type into a note, are sealed on your phone. (If you later add to that note out loud, its words go with that one recording, as above.)
To keep recording within bounds, we count how many seconds you record in Glenn Write each day (see the terms for the daily limit), and keep the count for 7 days.
Your key. Your notes are sealed with the key described under “Pictures of receipts” above, kept on your devices, with the same key page. Without it nobody can open your notes, not even us. If every copy of your key is lost and you start over with a new key, the notes only the old key could open are deleted, because they can never be opened again; a note you share with someone who can still open it stays, and their phone gives it back to you.
Sharing a note. You can share a note, a list, steps or a log, but never a diary or a memory, with another Glenn account by its email address: “Can read it” or “Can add and change”. The note’s key is then sealed for that person, so the people on the note can read it and we still cannot. If the email has no Glenn account yet, we keep it with the note as an invite for 30 days; if an account is made with that address in that time, the note reaches it. Glenn does not send the other person an email: tell them yourself. You can take someone off a note at any time.
The lock. Glenn Write can be locked with a four-digit code, and Face ID or a fingerprint. The lock stays on your device: the code is never sent anywhere, and only a hash of it is kept, on that device. Face ID and fingerprints are checked by your phone; Glenn learns only whether it said yes, and never receives anything about your face or your finger.
Saving your notes as a file (a PDF, a Word document or text files) happens on your device, and nothing goes through our servers. A file you save is not sealed, so keep it somewhere safe.
Health. People sometimes say things about their health in a diary or a note. Glenn Write has nothing made for health: no kind of note, subject or feature for it. A note you keep is sealed and never read by Glenn. A recording is processed once, as above, to write it down, and nothing of it is kept in a form anyone but you can read. If you would rather such words did not pass through that one request, type them: a typed note is never sent to be read.
Glenn Trot is not a betting service. It never places a bet for you, never links to a place to bet, never shows odds or what others have bet, never says what to play, and never moves, holds or collects money. What you write down about money (what you put in, what came back, who pays whom) is a note for you and the people you play with; the money itself is wherever you keep it.
Race information. The day’s races, their horses and drivers, each horse’s past starts and the results are public facts. Our server fetches them from public sources the first time anyone asks for them that day, and keeps them for everyone to read; a phone never fetches them, and nothing about you or your tickets is sent to those sources. To keep the number of requests in bounds, we count how many races each account asked for in a day, and keep the count for 7 days. If the information is not available, you can still make a ticket by typing the horses’ names and numbers.
Picks, by voice or by typing. When you say your picks (for example “Solvalla Saturday, race six, the four, the seven and the nine”), or how a ticket went, the recording is sent once to our server function, transcribed and matched against the start list, exactly like a recording in the other apps (see “What we never store: your voice”): it exists only in memory for that one request, and neither the audio nor the transcript is kept. The start list of the race (the horses’ names and numbers, which are public) goes with the recording, so Glenn can match what you said to the horses; what comes back is the changes to your ticket, which you check before they are kept. During that request the audio and the text are processed by OpenAI, which acts as our processor, on the same terms as in the other apps: it keeps no audio, the text may stay in its abuse-monitoring logs for up to 30 days (longer only if the law requires it), and none of it is used to train its models. We keep a record that a recording was received (an identifier and the time, nothing of what was said), so the same recording is never processed twice; it is kept until you delete your account. What you type is never sent to anyone to be read: a change you type is read on your phone against the start list, and sealed there. To keep recording within bounds, we count the seconds you record each day, together with Glenn Write, and keep the count for 7 days.
Your key. Tickets, notes on horses, groups and pots are sealed with your key and key page, and the same rules apply as for your notes (see “Notes: written down once, then sealed”): without your key nobody can open them, not even us.
Groups. You can make a group of the people you play with, and invite people by their email address. An invitation can be accepted only by a person who has signed in with that address and confirmed it. We keep the address with the invitation only so that person can accept it: it is removed when the invitation has been answered or has run out, at the latest 30 days after it was sent, and at once if the account it was sent to is deleted. While it waits, the people in the group can see it. Glenn does not send the other person an email: tell them yourself. People in a group see the group’s tickets and its pot, and each other’s names and email addresses, and nothing else of yours: your notes on horses, and your tickets that are not in the group, stay yours. Everyone in a group sees the same ticket as it changes, and a change to how a ticket went is listed with who made it and when.
Leaving, handing over and deleting. Someone who leaves a group, or is taken off it, loses access to its tickets and its pot, and the keys of what they could open are changed. What they themselves had settled in the group is kept for them as a private record, sealed so that only they can open it. The tickets and the pot stay with the group. The person who made a group hands it to someone in it before leaving it, or deletes it; deleting it removes the group and its pot, and the tickets stay with the people who made them. When an account is deleted, a group it made goes, with its pot and tickets, to the member who has been in it longest, and its tickets in other people’s groups go to the person who made that group, and the account is taken off them. This is so that deleting one account does not take the others’ shared record of money away. Your notes on horses, and your tickets that are in no group, are deleted with the account.
Saving your tickets as a file (a spreadsheet, a page to print or a message) happens on your device, and nothing goes through our servers. A file you save or send is not sealed, so keep it somewhere safe.
The lock. Glenn Trot can be locked with a code, and Face ID or a fingerprint, in the same way as Glenn Write: it stays on your device and never reaches us.
| Who | What they do |
|---|---|
| Supabase | Database, authentication, file storage, server functions |
| OpenAI | Transcribes a recording and lists the things, trips, purchases, papers, services or wines in it, writes it down as a note, or matches your picks to a race’s start list, reads a picture of a receipt or a wine label once, and chooses among your bottles for a dish when Glenn’s own word list has no match. Keeps no audio; may keep the text, and a receipt or label picture, up to 30 days to detect abuse. Never receives a copy of a paper, receives a note’s words only while you add to that note out loud, and never receives a ticket you typed |
| Public racing sources | Where our server fetches the day’s racing facts (races, horses, past starts and results) for Glenn Trot. Nothing about you or your tickets is sent to them |
| RevenueCat | Keeps each subscription, whether bought in the App Store, on Google Play or on the web (your account’s id, what you bought and when; for a purchase on the web also your email address, for the receipt) |
| Apple, Google | Sell and charge subscriptions bought in the phone apps |
| Stripe (Stripe Payments Europe, Ltd.) | Takes the payment for a subscription bought on the web, and holds your card details, which we never see. Stripe’s own privacy notice: stripe.com/privacy |
| Google (Firebase Cloud Messaging), Apple (push service) | Deliver reminders as notifications to phones that allowed them (the phone’s address and the notification’s text) |
| Vercel | Serves the web versions of the apps |
| Resend | Sends the emails for signing in and confirming your address, and the reminder emails (your address, and what each email names) |
| Forward Email | Passes on what you write to support@itsglenn.app |
Each of these acts on our instructions for the purpose above, and nothing else. We do not sell or share personal data for advertising.
In Glenn Pack: you, and the people you invite to a place, with the role you give them. In Glenn Drive, Glenn Proof, Glenn Archive, Glenn Service and Glenn Wine: only you, and not even we can open the pictures of your receipts or the copies of your papers. In Glenn Write: you, and the people you share a note with, with the role you give them; not even we can read your notes. In Glenn Trot: you, and the people in a group you play with (the group’s tickets, and its pot if it keeps one); not even we can read them, and a note you write on a horse is yours alone. Access is enforced in the database itself, not only in the app, so nothing you have not shared is readable by anyone else.
We can technically access data in order to run and repair the service. We do so only when it is necessary for that purpose.
Glenn Drive does not use your location. Trips are what you say or type, nothing is tracked. Glenn Service asks only for the microphone, and so does Glenn Trot (and Face ID or a fingerprint, if you turn on its lock).
You can refuse any of these and still use the rest of the app. Nothing is recorded in the background, ever.
Download a copy. In Glenn Pack, Me → Download a copy gives you your places, boxes and things as an Excel spreadsheet or a data file, and your box photos as a zip file. In Glenn Drive, Me → Download the year’s log gives you every trip, its totals and every change to it as a spreadsheet. In Glenn Proof, Me → Download a spreadsheet gives you every receipt’s details, and any receipt picture can be saved from the receipt itself. In Glenn Archive, Me → Download a spreadsheet gives you every paper’s details, and any copy of a paper can be saved from the paper itself (Show the copy, then Save a copy). In Glenn Service, Me → Download a spreadsheet gives you every service and when each thing is due next. In Glenn Wine, Me → Download a spreadsheet gives you every wine, where its bottles are and your notes. No request needed, no waiting. The download is part of Unlimited, and stays yours if you have ever subscribed. On the free plan, email support@itsglenn.app and we will send you the same copy, free of charge. In Glenn Write, Me → Save your notes gives you your notes as a PDF, a Word document or text files, on every plan, the free one too. It is made on your device; since we cannot read your notes, we cannot send you a copy of them. In Glenn Trot, Me → Download a spreadsheet gives you your tickets, and a ticket can be saved as a page to print or sent as a message, on every plan. Those are made on your device too, so we cannot send you a copy of your tickets either.
Deletion. Me → Account → Delete my account, in any of the apps, removes everything in every Glenn app: your photos, your places and everything in them, your cars and trips, your receipts and their pictures, your papers, folders and copies, your service log, your wines and places, your notes (a note you shared goes for the people you shared it with too), your tickets and notes on horses (a group you made goes to the member who has been in it longest, and your tickets in other people’s groups go to the person who made the group; see “Glenn Trot: race information, your picks and groups”), your key, your invitations, and your login. It is immediate and it cannot be undone. If you would rather ask us to do it, email support@itsglenn.app.
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask us to restrict that use. Downloading a copy and deleting are built into the app so you don't have to ask; for anything else, email support@itsglenn.app and we will answer within 30 days.
If you are in the EU or EEA, you can also complain to a data protection authority. Ours is Sweden's Integritetsskyddsmyndigheten (IMY), imy.se, which leads for our processing everywhere in the EU. You can always complain to the authority where you live instead: in Norway Datatilsynet, datatilsynet.no; in Denmark Datatilsynet, datatilsynet.dk; in Germany the data protection authority of your state (Land), listed at datenschutzkonferenz-online.de.
We process your data to provide the service you asked for (performing our agreement with you), to keep it secure, and to meet legal obligations such as accounting.
Everything travels over encrypted connections. Access rules live in the database, so they apply no matter how data is requested. Photos are stored privately and shown only through links that expire. Receipt pictures, copies of papers, notes and tickets are encrypted on your device with a key we never hold. Secrets — including the keys for transcription — exist only on the server and are never shipped inside the apps.
The Glenn apps are not directed at children and we do not knowingly collect data from children under 13.
Your account and everything you record in the apps, including photos, are stored in the EU, in Ireland, by Supabase.
Some of the services listed above are based in the United States: OpenAI (while a recording, a receipt or label picture, or a dish is being read), RevenueCat (your subscription status), Stripe (which takes payments on the web), Vercel (which serves the web version), Resend (which sends the emails for signing in and the reminder emails), Google and Apple (which deliver notifications) and Forward Email (which passes on what you write to support). When your data passes to them, the transfer relies on the safeguards in their data processing terms, such as the EU Standard Contractual Clauses.
If we change how any of this works, we will update this page and change the date at the top. If a change is significant, we will tell you in the app.