Glispy privacy policy

Effective September 13, 2026

This policy covers the Glispy website and mobile app. Glispy is an AI companion for everyday GLP-1 support, journaling and tracking. Contact the Glispy team at info@glispy.app about this policy or your information.

Information you share

We store your name, email, account identifier and a protected password hash. When you choose to provide them, we store your medication details, injection routine, weight and goals, hydration, symptoms, meals, feelings, journal entries, companion messages and approved memories. This information may reveal sensitive health details. You can use manual trackers without participating in AI chat or Community.

We also process saved foods, search usage, subscription status, billing identifiers, reminder preferences, consent choices and progress milestones. Technical information such as request logs and IP addresses helps operate the service, prevent abuse and investigate failures. Onboarding source answers and paywall events help us understand how people find and use Glispy.

AI conversations and OpenAI

With your permission, your companion messages and relevant conversation history are sent to OpenAI to check safety, produce replies and identify information you may want to record. If you separately enable saved context, relevant profile details, recent journal and tracker entries, and approved memories may also be sent. Starting without saved context still requires OpenAI to process the messages you type in that conversation.

Private journal entries and trackers are not Community posts. We do not send your Community posts as context for private companion replies. You can turn off saved context, review or forget memories, and withdraw permission for AI processing in your account controls. Withdrawal stops future AI requests; it does not undo processing already completed.

OpenAI processes API data under its service terms and may retain data for abuse monitoring or other applicable service requirements. See OpenAI’s privacy policy. We do not promise zero retention by our providers.

Community and sharing

Community is optional. Posts, replies, your chosen alias and reactions are visible to other members. With your separate permission, post and reply text is sent to OpenAI for automated safety checks before publication. Our moderators can review reports and flagged content. Do not post private information about yourself or others that you do not want members to see.

Social sharing happens only when you choose to share. Review the image and caption before sending them. The destination service’s own privacy rules apply to the copy you share there.

Who processes information

Supabase stores account and application data. Our hosting providers deliver the website and API. OpenAI provides AI generation and moderation. Stripe processes web payments and retains billing records; Glispy does not receive full card numbers. If a purchase is made through Apple, Apple processes that purchase. Email delivery providers send account, support and subscription messages. GLP Food Score supplies food and restaurant results from your search requests; private journals and health profiles are not included in food lookup requests.

We share information with these providers only as needed to operate their services. We do not sell personal information or use private health information, journals or chats for targeted advertising. We may disclose information when legally required, to address abuse or protect rights, or in a business transfer subject to appropriate privacy obligations.

Permissions and storage on your device

Mobile sign-in credentials are stored using the operating system’s protected storage. Web sign-in uses cookies and local storage. Routine notifications are optional and can be disabled in Glispy or device settings. Camera access, when a camera feature is available, is requested when you choose to use it. Granting access does not give Glispy permission to browse your photo library.

Retention and deletion

We keep account, journal, tracker and Community information while your account is active and as needed to provide the service. Conversation-retention settings control how much past chat is eligible for companion context; they should not be interpreted as a guaranteed deletion schedule for all stored messages.

You can permanently delete your account from Privacy and account in the app, or from your web account settings. This removes your active account records, private chats, memories, journals, trackers, saved foods and Community content. Backups may retain copies until they expire under the hosting provider’s backup cycle. Payment providers may retain transaction records to meet legal, tax or dispute obligations. Deleting an account does not cancel an Apple subscription; manage that in your Apple account.

Your choices and rights

You can review account details, change memory and AI permissions, use the available export controls, and request access, correction or deletion by emailing info@glispy.app. We may verify account ownership before fulfilling a request. Depending on your location, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent, or complain to your local privacy regulator.

Security and international processing

We use encrypted connections, restricted server access and account authentication. No service can guarantee absolute security. Providers may process information outside your country; applicable provider agreements and safeguards govern those transfers.

Adults and policy updates

Glispy is intended for adults aged 18 and older. Contact us if you believe a child has provided information. We will update this page when our practices change and seek renewed permission when a change requires it.