Privacy Policy
Glizzy App
Last updated: June 7, 2026
1. Who We Are
Glizzy App Development Team ("we", "our", "us") is the responsible party for the application Glizzy ("Application").
We act as the Controller of the personal data collected through this Application.
Data Protection Officer (DPO) Contact:
- Email: support@glizzy.top
2. Data We Collect
2.1 Data You Provide to Us
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Full name | Account creation & in-app profile customization | Execution of contract | While account is active |
| Email address | Authentication (Apple Sign-In, Google Sign-In, or Email/Password), password recovery, and secure updates | Execution of contract | While account is active |
| Profile photo | Custom profile display within your Guilds and Feed | Consent | While account is active |
| Hot dog photos | Uploaded photos attached to your logs displayed in the social feed | Consent / Contract | Retained as part of logs |
2.2 Data Collected Automatically
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Geographic location | Tagging where you enjoyed your hot dog (only when using the "Log Dog" sheet) | Consent | While account is active |
| Push notification token | Delivering guild activity notifications (e.g. when a member logs a hot dog) | Consent | While account is active |
| App usage data | Improving performance, resolving navigation bugs (via PostHog analytics) | Legitimate interest | 6 months |
| Device data | Technical diagnostics and viewport optimization | Legitimate interest | 6 months |
2.3 Data We Do NOT Collect
We do not collect the following data:
- Passwords in plain text (we store only secure, hashed credentials using Supabase Auth)
- Credit card data
- Sensitive biometric data
3. How We Use Your Data
We use your personal data to:
- Provide the service: Create and manage your account, join and customize Guilds, and log hot dog metrics.
- Tag location: Map out hot dog logs with location data when you grant permission.
- Send notifications: Deliver push notifications for guild activity when you opt in. You can manage or disable notifications at any time in the app under Profile → Notifications or in your device Settings.
- Account security: Provide secure email and password updates, password reset triggers, and account verification.
- Analytics: Understand how the app is used in aggregate to improve performance and fix bugs (PostHog). We do not use analytics data to build advertising profiles.
- Data compliance: Provide native account deletion.
4. Data Sharing
We do not sell your personal data. We share information only with trusted service providers:
- Supabase: Core database hosting, secure authentication, and storage buckets (for avatars and hot dog pictures).
- Apple Sign-In: To support native Apple login on iOS.
- Google Sign-In / Google Play Services: To support native Google login.
- PostHog: Product analytics (usage patterns and performance data only — no personally identifiable information is intentionally sent to PostHog).
- Expo / EAS: Push notification delivery via Expo Push Notification Service, which relays messages through Apple APNs.
5. Your Rights & Account Deletion
You have the right to request access to, correction of, or deletion of your data at any time.
How to Delete Your Account:
- Open the app and navigate to the Profile tab.
- Tap the Delete Account button at the bottom of the screen.
- Confirm the permanent deletion.
Upon deletion, all of your profile details, registered emails, logged hotdogs, photos, and comments are permanently removed from our database and storage buckets.
6. Security
We use modern, secure measures to safeguard your information:
- Hashing passwords using industry-standard algorithms.
- Enforcing HTTPS (TLS 1.3) for all API communications between the app and Supabase.
- Encrypting secure tokens on-device using iOS Keychain Services and Android Keystore via
expo-secure-store.
7. Contact
For any privacy-related questions or requests, please contact us at support@glizzy.top.