This Privacy Policy explains what information the GLEAMO iOS app collects, how we use it, who we share it with, and the choices and rights you have. GLEAMO is a strength-training app, and much of what it handles is health and fitness information that can be sensitive — so we have tried to describe our practices plainly and completely. Please read this policy carefully.
1. Who we are
GLEAMO ("GLEAMO," "we," "us," or "our") is an iOS strength-training application operated by Glenn Product LLC. This policy applies to the GLEAMO iOS app and the backend services that support it.
To provide the app, we use a database, authentication, and file storage hosted on Supabase, and an application programming interface (API) hosted on Vercel. We describe these providers and every other company that helps us run GLEAMO in the "Who we share information with" section below.
2. The data we collect
We collect only what we need to run the app for you. Here is everything, grouped by type.
Account and identity
Email address. Used to identify your account and to sign you in.
Sign-in credentials. You can sign in with an email one-time login code, with Sign in with Apple (in which case we receive an Apple user identifier, and Apple may provide a private relay email address instead of your real one), or with Sign in with Google (in which case we receive your Google account identifier and email).
Display name. The name shown for your profile in the app.
Connect code. A short code used to link your account with a partner's account (see "Partner connections" below).
Health and fitness data
This category includes sensitive health information. As part of onboarding you can tell us about injuries and pain (for example, knee pain). We use this to tailor your workouts. You choose what to share, but this information is central to how the app works.
Specifically, we collect and generate:
Onboarding questionnaire responses, covering your training goals, experience level, injuries or pain, target body areas, and the equipment you have available.
AI-generated workout plans created for you based on your questionnaire.
Per-exercise weights you record.
Sets, reps, and dose for your exercises.
Workout completion and progress, and your workout history over time.
Photos and videos you upload
Questionnaire photos. Photos you upload of your equipment or workout space so we can better tailor your plan. These are stored.
Imported workout videos. You can import a workout by uploading a video from your camera roll or through the iOS share sheet. We analyze the video to extract the exercises in it (see "AI processing of imported videos"), and we save a still thumbnail taken from the video along with the exercise clips we generate. The source video you uploaded is stored in a private storage bucket and deleted immediately after processing is finished.
Device and push notifications
Apple Push Notification token. A token for your device that we use to notify you when a workout import has finished processing.
Subscriptions and payments
Subscription status. If you subscribe to Gleamo Pro, your purchase is processed by Apple through the App Store. We do not receive or store your payment card or billing details. Whether you have an active subscription or free trial is determined on your device through the App Store in order to unlock paid features.
Partner connections
Linked partner accounts. Two accounts can link to each other using a connect code. Once linked, you and your partner can view each other's plan, progress, and weights. If you link with someone, be aware that this information becomes visible to them.
Diagnostics and usage
Generation timestamps. We record when certain items are generated, used only to enforce rate limits (to prevent abuse and manage load).
Server logs. Standard server logs generated in the ordinary course of operating the app's backend.
Website visits (gleamo.lol)
Our website uses a small first-party visit counter that we built ourselves. It sets no cookies and stores no IP addresses. When you load a page or tap a download button, it records the page, the site that referred you, your country, whether you are on a phone or a computer, and a short code derived from your connection that changes every day and cannot be tied back to you. We use this only to see how many people visit and which pages and links work. No third-party analytics service receives this data.
3. How we use your information
We use the information described above to:
Create and manage your account and sign you in.
Generate personalized workout plans based on your goals, experience, injuries, target areas, and available equipment.
Track your workouts, weights, progress, and history so you can pick up where you left off.
Process workout videos you import in order to identify the exercises in them and turn them into workouts you can follow.
Send you a push notification when an import you started has finished.
Enable partner connections and share plan, progress, and weights between linked partners.
Enforce rate limits and keep the service secure and reliable.
Operate, maintain, and troubleshoot the app and its backend.
We do not use your information for advertising, and we do not build cross-company profiles of you.
4. AI processing of imported videos
When you import a workout video, we need to figure out which exercises appear in it. To do this, we use the Anthropic (Claude) API. We want to be specific and honest about exactly what is sent:
We send sampled frames from the video (still images taken at intervals — not the full video file) and the title or caption associated with the imported video.
Anthropic's Claude API uses this to identify the exercises so we can build your workout.
The full source video is not sent to Anthropic — only the sampled frames and the title/caption. The source video itself stays in our private storage bucket and is deleted immediately after processing.
5. Who we share information with
We do not sell your data. We do not use third-party advertising or analytics SDKs. We do not track you across other companies' apps or websites. GLEAMO contains no third-party analytics, advertising, or tracking software. Our website uses only a first-party visit counter with no cookies, described in section 2.
We share information only with the service providers ("sub-processors") that help us operate the app, and only as needed to provide it. These are:
Supabase — provides our database, authentication, and file storage. Your account data, health and fitness data, questionnaire photos, generated exercise clips, and thumbnails are stored here.
Vercel — hosts our API. Uploads pass through Vercel transiently while they are being processed.
Apple — provides Sign in with Apple (when you choose it), delivers push notifications to your device, and processes Gleamo Pro subscription purchases. Apple, not GLEAMO, handles your payment information.
Google — provides Sign in with Google (when you choose it).
Anthropic (Claude API) — receives sampled frames and the title/caption of an imported video in order to identify the exercises in it, as described in Section 4.
WorkoutX — provides the exercise animation library. The app requests animations using a non-personal exercise identifier only. No personal data is sent to WorkoutX.
We may also disclose information if required to do so by law, or to protect the rights, safety, and security of our users, the public, or GLEAMO.
6. Data retention
We keep your information until you delete your account. When you delete your account, your data is permanently removed as described in Section 8.
Source videos you import are deleted immediately after processing is complete. We retain the generated exercise clips and the still thumbnail taken from the video.
Standard server logs and rate-limiting timestamps are retained in the ordinary course of operating the service.
7. Your choices and rights
Depending on where you live, you may have specific rights over your personal information. Regardless of where you live, GLEAMO offers you the ability to access and delete your data as described below.
Everyone: access, correct, and delete
Access. You can view your account, plan, progress, weights, history, and uploaded media within the app.
Correct. You can update your questionnaire and profile information at any time in the app.
Delete. You can permanently delete your account and all associated data at any time from within the app (see Section 8).
Copy of your data. To request a copy (export) of the personal information we hold about you, contact us at contact@gleamo.lol and we will provide it consistent with applicable law.
California residents (CCPA / CPRA)
If you are a California resident, you have the right to:
Know what personal information we collect about you and how we use and share it (this policy provides that information).
Delete the personal information we hold about you.
Correct inaccurate personal information.
Opt out of the sale or sharing of your personal information. We do not sell or share your personal information as those terms are used under California law, so there is nothing to opt out of.
Non-discrimination. We will not discriminate against you for exercising any of these rights.
Other regions (including GDPR-style rights)
If you are located in a region with comprehensive privacy laws (such as the EU/EEA or UK), you may have the right to access, correct, delete, restrict or object to certain processing, and receive a portable copy of your personal information. You may also have the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, use the in-app account deletion for deletion, or contact us at contact@gleamo.lol for other requests. We will respond consistent with applicable law.
8. How to delete your account
GLEAMO offers in-app account deletion. In the app, go to Guide → Account → Delete account.
This permanently purges everything: all of your database rows, all of your stored files, and finally the authentication account itself. This action cannot be undone.
9. Security
We take reasonable measures to protect your information, including:
Encryption in transit — data moves over HTTPS.
Per-user access controls — row-level access controls so that, in general, you can only access your own data (and, where you have linked with a partner, the plan, progress, and weights you have agreed to share).
A private storage bucket for raw uploads such as imported source videos.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information appropriately.
10. Children
GLEAMO is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at contact@gleamo.lol and we will take steps to delete it.
11. International users
We operate the app using service providers that may store and process information in countries other than the one in which you live, including countries where those providers and their infrastructure are located. As a result, your information may be transferred to, stored in, and processed in a country whose data protection laws differ from those of your own. By using the app, you understand that your information will be handled as described in this policy.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will take reasonable steps to notify you. Your continued use of GLEAMO after an update means you accept the revised policy. This policy is governed by the laws of the State of California, United States.
13. How to contact us
If you have any questions about this Privacy Policy or your information, contact us at: