This is the privacy policy for Glown, a mobile application operated by an Australian sole trader (ABN 52 606 397 297). This policy explains what information Glown collects when you use the app, why, and what you can do about it.
Glown is built with the belief that private, small conversations between friends should stay private. This policy is designed to reflect that.
Glown lets you send two kinds of messages: drops (geo-anchored neon signs at specific locations, viewable in AR or on the map) and beams (direct messages delivered as a takeover screen to a friend). To make the app work, Glown collects:
If you sign in with Apple, Glown receives:
Glown does not receive your iCloud account, your contacts, your real name, or any other Apple account data. Glown does not request the Full Name scope. The Apple identifier is stored in our authentication system; we do not share it with third parties.
You can revoke Glown's access at any time from Settings → your name → Sign-In & Security → Sign in with Apple on your iPhone.
When you drop or beam a neon message, you pick the friends who can see it. Only those friends see it — nobody else, including the Glown operator, reads the content of your private messages as part of normal operations.
The only exceptions are:
Glown's backend runs on Supabase, a hosted database and authentication service. Your account data, messages, friendships, and reports live on Supabase's infrastructure. Supabase processes this data on Glown's behalf and is bound by its own published privacy terms. You can read Supabase's policy here: supabase.com/privacy.
Message location data is stored using PostgreSQL with PostGIS, using standard geographic coordinates (latitude/longitude). Nothing about your routes, movement patterns, or daily travel is stored — only the specific points where you chose to drop a message.
When Glown sends you a push notification (e.g. when a friend beams you or drops a message for you), the notification content is briefly handled by Apple's Push Notification service (APNs) for delivery to your device. Apple does not retain the content of these notifications beyond what's needed to deliver them. Apple's privacy practices are described at apple.com/legal/privacy.
Crash reports and non-fatal errors are sent to Sentry (hosted in the EU, Frankfurt) to help diagnose stability issues. Sentry receives the crash stack trace, device model, iOS version, and the sequence of in-app screens visited before the crash. Sentry does not receive your messages, your share code, your friend list, or your email address. Sentry's privacy policy: sentry.io/privacy.
You can delete your entire Glown account from inside the app at any time. Open the GRID screen, scroll to the Danger Zone, tap Delete My Account, and confirm by typing DELETE.
When you do this, the following are permanently erased from Glown's servers:
This action cannot be undone. Glown does not keep a backup copy of deleted accounts.
Messages that other people dropped or beamed to you remain in their senders' accounts until they expire or those senders delete them. Glown cannot delete someone else's message on your behalf — you can, however, block the sender to stop seeing anything from them.
If you're in the European Economic Area, the United Kingdom, or a similar jurisdiction, you have rights under the GDPR and similar laws, including the right to access, correct, delete, and export your data. If you're in Australia, you have similar rights under the Privacy Act 1988.
You can exercise all of these rights directly from the app (delete works immediately; export is available on request). You can also email us at the address below.
If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete it, the right to correct it, and the right to opt out of any sale or sharing of personal information.
Glown does not sell your personal information. Glown does not share your personal information with third parties for cross-context behavioral advertising. There is nothing to opt out of, because Glown does not engage in either practice.
You can exercise your access, deletion, and correction rights directly from inside the app (delete works immediately; access and correction can be requested by emailing [email protected]). Glown will not discriminate against you for exercising these rights.
Glown is not intended for children under 13, and under 16 in some jurisdictions. If you are below the minimum age in your region, please do not use Glown. If you're a parent or guardian and believe your child has created an account, email us and we'll delete it.
If this policy changes in a way that affects you, we'll update the "Last updated" date at the top and, for meaningful changes, notify active users inside the app before the new terms take effect.
You can reach us about anything in this policy — data requests, concerns, corrections — at:
Glown is operated by an Australian sole trader, ABN 52 606 397 297. For postal correspondence, please email [email protected] first and we will provide a current correspondence address.