Privacy, in plain language.

The short version

There is no Glance account, so there is nothing to sign in to and no profile attached to you. Agent output, clipboard contents, file names, notifications, and what is on your screen stay on your Mac.

Four things do reach the network: the licence check, an optional daily usage count, the optional features listed below that query an outside service by design, and your purchase — which is handled by a payment provider, not by us.

What stays on your Mac

Glance reads this locally and never transmits it: the status and output of the coding agents you run, the contents of your clipboard and the clipboard shelf, file names and paths in the file shelf, notifications, calendar events and reminders, what is playing, and anything captured through Accessibility or Screen Recording.

It is stored in the app's own container on your Mac and removed when you delete the app.

Licence and trial

Starting the 3-day trial and activating a licence both call the licence server at dgwoaywptceotvptjlcg.supabase.co. The request carries a machine fingerprint, your licence key when you have one, the app version, your macOS version, your Mac's architecture, and your interface language.

The fingerprint is a SHA-256 hash of your Mac's hardware UUID. It is what makes a trial un-restartable and a licence limited to 2 Macs. It cannot be reversed into the UUID, and it is not linked to your name, your email, or your purchase.

Usage statistics, and how to switch them off

Once a day, a running copy of Glance sends a short ping: the same machine fingerprint and environment fields as above, whether it is a trial or a licence, and a set of counters — plain numbers saying how many times a feature was used. No content, no file names, no text, no timestamps of individual actions.

This exists to answer which macOS versions still need support and which features are worth keeping. You can turn it off in Glance under Settings → Privacy → "Help improve Glance", which stops the counters at the source and discards any that were pending.

Optional features that reach the internet

• Lyrics. Looking up synced lyrics sends the current track's title, artist, album, and duration to LRCLIB. No identifier is attached and nothing is stored there.
• Music artwork and metadata. Missing artwork is fetched from the Deezer public API using the track and artist name.
• Weather. The weather panel uses Apple WeatherKit. It sends one coordinate per refresh — either your location, if you granted it, or the city you picked — and does not subscribe to your movements.
• Sharing a file. When you explicitly share a file from the shelf, its bytes are uploaded to litterbox (catbox.moe) and the link expires after 72 hours. Nothing is uploaded unless you ask for that link.
• Interview features. If you enable them, system audio is streamed to Deepgram for transcription and the transcript is sent to the model provider you chose. These run on API keys you supply, stored in your macOS Keychain; Glance never sees or relays them, and each provider's own policy applies to what you send.

macOS permissions

Glance asks only for what a panel you enabled needs, each one at the moment it is first used, and macOS lets you revoke any of them in System Settings → Privacy & Security.

• Accessibility — to read agent and app state, and to act on the notch shortcuts.
• Screen Recording and system audio — for screen-aware and interview features.
• Microphone and speech recognition — for voice input, when enabled.
• Calendars and Reminders — to show your next events in the notch.
• Location — for local weather. A city chosen by hand works instead.
• Apple Events — to control the media app that is playing.

Chrome extension

The Glance Chrome Activities extension talks to the app over Chrome Native Messaging and a local service on 127.0.0.1. It sends nothing to Glance servers. Its data handling is covered in detail on the Chrome extension privacy policy.

Buying a licence

Purchases go through Polar Software Inc., which acts as Merchant of Record. Your name, email, billing country, and payment details are handled by them under their privacy policy. We receive the order and the licence key, never your card details.

Downloads are served from GitHub Releases, so GitHub sees the request the way any web server would, including your IP address.

What never happens

Glance does not sell or rent data, does not run advertising or third-party trackers, does not use an analytics SDK, and does not read your agent conversations, clipboard, or screen from a server. There is no server-side copy of them to read.

Retention and your rights

The licence server keeps activation records for as long as the licence is valid, and daily usage rows in aggregate. Because a row is keyed to a machine fingerprint and not to you, we usually cannot connect one to a person without your help — sending the licence key or order reference from your receipt lets us find it.

If the GDPR or a similar law applies to you, you can ask for access to that data, its correction, or its deletion, and you can object to the usage ping — or simply turn it off in Settings → Privacy. Deleting a licence record ends the licence, so that request is confirmed with you first. Write to hello@glance.app and you will get an answer within 30 days. The data controller is Anass El Janati, France. You also have the right to complain to your local data protection authority.

Children

Glance is a developer tool and is not directed at children under 16. No data is knowingly collected from them.

Changes

This page changes when the app does. The date at the top is the current version, and a change that affects what leaves your Mac is called out in the release notes rather than slipped in quietly.

Contact

Privacy questions: hello@glance.app. Setup and connection issues are covered on the support page, and the licence itself is covered in the terms of use.