Privacy Policy

Glaux is operated as an independent project. You can reach us at support@getglaux.com for any privacy question, deletion request, or anything else covered below.

We try to collect as little as we can while still being a useful coach. Concretely:

• Account information. Your email address, and a display name you provide during onboarding.
• Career profile. The answers you give during onboarding, the paths you adopt, your roadmap progress, reflections you write, and insights you clip from inside the app.
• Coaching content. Your monthly check-in text, mood score, and the AI coaching response generated for you.
• Subscription details. Whether you are on the Free or Pro tier, and a customer identifier from our payment processor (web subscriptions only). We never store full payment card details.
• Push token. If you opt in to notifications on mobile, we store the device token issued by Apple or Google so we can send you check-in reminders.
• Standard server logs. Our hosting provider records IP address and user-agent strings for short-term operational and security purposes.
• Usage analytics. With your consent on the web, how you move through and interact with the app — pages viewed and features used — plus session recordings in which all on-screen text and form inputs are masked in your browser before anything is sent.

• To run the service and show you your own data.
• To generate personalized AI coaching responses based on the profile and check-in text you provide.
• To send the notifications you opted in to (monthly check-in reminders, occasional path updates).
• To process subscription payments and keep your tier in sync.
• To debug problems, prevent abuse, and keep the service available.
• To understand how the web app is used and to fix problems, through privacy-masked product analytics you can opt out of at any time.

We use a small number of named third parties to deliver the service. We do not sell your data and we do not share it for advertising.

• Supabase — authentication and database hosting.
• Anthropic — AI inference (Claude). Content you send to the coach is forwarded to Anthropic so it can generate a response. Under Anthropic's commercial terms, this content is not used to train their models.
• Lemon Squeezy — payment processing for web subscriptions. They receive the billing details you enter at checkout.
• Vercel — application hosting.
• PostHog — product analytics and session replay for the web app, enabled only after you accept cookies. Recordings are captured with all on-screen text and form inputs masked in your browser, so your reflections, check-ins, and coaching content are never transmitted to PostHog.
• Resend — transactional email and waitlist delivery. They process your email address to send account and product emails.
• Upstash — rate limiting. Briefly processes your IP address and account identifier to protect the service from abuse.
• Apple Push Notification Service and Google Firebase Cloud Messaging — push notification delivery on mobile (only if you opted in).

• We do not sell your data to anyone.
• We do not embed advertising or third-party advertising trackers.
• We do not run third-party analytics SDKs inside the mobile app beyond what is strictly required by Apple, Google, and our hosting provider.
• We do not share your coaching content with anyone outside the processors listed above.

We keep your data for as long as your account exists. Deleting your account permanently removes your profile, paths, reflections, clips, check-ins, and coaching history from our database. This cannot be undone.

On mobile: open Settings, scroll to the bottom, tap Delete account, and confirm by typing your email.

On the web: email support@getglaux.com from the address on your account and we will delete it within seven days.

If you have an active Glaux Pro subscription, cancel it on getglaux.com/settings before deleting — account deletion does not stop ongoing billing from the payment processor.

Deleting your account removes your data from our own database. It does not reach into the third parties listed above: usage analytics and any session recordings already captured remain in PostHog, emails you've received remain in Resend's logs, content already sent to Anthropic for a response is subject to Anthropic's own retention, and Lemon Squeezy keeps the transaction records it is legally required to retain. Email support@getglaux.com and we will request deletion from these processors on your behalf where they allow it.

You can ask us to show you what we hold about you, correct anything wrong, export it in a portable format, or delete it entirely. Email support@getglaux.com from the address on your account. We aim to respond within seven days.

If you are in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, or CCPA respectively, including the right to object to processing and to lodge a complaint with your local data protection authority.

Glaux is intended for people aged 16 and older. We do not knowingly collect information from anyone younger. If you believe a child has created an account, contact us and we will delete it.

Our processors may store and process data in the United States and the European Union. Where transfers leave your region, we rely on standard contractual clauses and the processors' own transfer mechanisms.

The web app sets a first-party cookie from Supabase to keep you signed in. If you accept cookies, PostHog also sets first-party analytics cookies and uses your browser's local storage to measure usage and link a session to its recording; if you decline, these are never set. Your cookie choice itself is stored in local storage so we don't ask again. We do not use advertising cookies and we do not sell your data. The mobile app does not use cookies.

When we make material changes we will update the date at the top and, where appropriate, send a notice to the email on your account. Continued use of Glaux after a change means you accept the updated policy.

Questions, requests, complaints — all of it goes to support@getglaux.com. A real person reads them.