Privacy Policy - Gleamit

Gleamit is made by Lorenzo Zabot, Milan, Italy (“we”, “us”).

In short

Everything you record stays on your device. There is no Gleamit account and no Gleamit server, so we never see your data.
The app has no ads, no analytics and no tracking.
The app only talks to others for two optional things you choose yourself: the Pro purchase and the cloud backup.

What the app stores

Your brushing and floss sessions, streaks, reminders, toothbrushes, dentist and appointment details, tooth notes, the documents and photos you attach, and your settings. All of it stays on your device. Reminders are local notifications: there is no push server.

Pro purchase

Pro is a one-time purchase handled by Google Play or the App Store and checked by RevenueCat. They receive the purchase details, an anonymous ID created by the app and basic device information, to confirm the purchase and prevent fraud. Your oral hygiene data is never sent.

Google Play: policies.google.com/privacy
Apple: apple.com/legal/privacy
RevenueCat: revenuecat.com/privacy

Cloud backup

It is off until you turn it on. When on, Gleamit copies your records, documents and photos into your own cloud storage, never ours:

iOS: a hidden Gleamit folder in your iCloud Drive.
Android: a hidden Gleamit folder in your Google Drive. Gleamit asks Google only for access to that folder (drive.appdata) and cannot see your other files. It receives your email address, to show which account is connected, and an access token kept on your device. Neither is sent to us or to anyone else.

The files are not encrypted by Gleamit. Apple and Google protect them as they do the rest of your storage. Only the latest copy is kept. Your phone’s own system backup does not include Gleamit data: you restore from inside the app. Backups can stop, for example when your storage is full, and the app tells you when that happens.

Exports

The backup archive and the dentist report PDF are created on your device. They go only where you send them.

Website

This website, gleamit.app, is hosted on GitHub Pages, which keeps ordinary server logs. It has no analytics and sets no cookies of its own. The theme switch saves your choice in your browser’s local storage, and that choice never leaves your device.

The home page also shows content from other sites, which see your IP address and browser when it loads:

the Product Hunt and PeerList badges. Product Hunt also sets __cf_bm, a 30 minute Cloudflare bot-check cookie.
one ad from Ad Swap, in a sandboxed frame that cannot read this website. It is served from Google Firebase.

Blocking third-party content in your browser hides them.

Deleting your data

Delete items in the app, or uninstall it. A cloud backup stays in your storage until you delete it: in your iCloud settings on iOS, or by disconnecting Gleamit from your Google Drive on Android. The Support page shows how.

RevenueCat keeps a record of your Pro purchase, even after you uninstall. To have it deleted, email support@gleamit.app with the order number from your store receipt. This does not refund the purchase, and tapping “Restore purchase” later creates the record again.

Your rights

We never receive the data you record, so you manage it yourself as described above. For the Pro purchase record we are the data controller, RevenueCat processes it for us, and the legal basis is the purchase contract (Article 6(1)(b) GDPR). You can ask us to access, correct, delete or export it, or object to its use, by email. You can also complain to the Italian data protection authority, the Garante per la Protezione dei Dati Personali.

Medical disclaimer

Gleamit is not a medical device and does not give dental advice. See our Terms and conditions.

Children

Gleamit is not aimed at children, and we collect no personal information from anyone.

Changes

When we update this policy, the version and date at the top of this page change. Earlier versions stay in this website’s public source history.

Contact

Email: support@gleamit.app