Privacy Policy

1.Who we are and what this covers

Glenn Works, LLC ("Glenn Works," "we," "us" or "our") is an independent app studio organized under the laws of the State of Arizona, United States, with its principal place of business in Phoenix, Arizona. We build mobile applications that turn advanced phone hardware, such as cameras and LiDAR depth sensors, into tools anyone can use.

This Privacy Policy explains how we collect, use, share and protect personal information when you use any mobile application, website or related service that we publish and that links to this policy (together, the "Services"). Individual apps may include an in-app privacy summary or app store "privacy label" that describes that app's data practices in more detail. Where an app-specific notice is more specific than this policy, the app-specific notice applies to that app.

Glenn Works is the "controller" (or "business," depending on the law that applies to you) of the personal information described in this policy. For how to reach us, see section 19.

Your use of the Services is also governed by our Terms of Service.

2.Information we collect

What we collect depends on which app you use and which features you turn on. We group it into three sources.

2.1 Information you give us

• Account information. When you create an account, we collect the information needed to sign you in: an email address and, if you choose Sign in with Apple or Google, the identifier and name your provider shares with us. If you use Apple's "Hide My Email," we receive only the relay address. Accounts are optional unless a feature needs one (for example, to sync across devices).
• Profile and settings. A display name, units of measurement, preferences and similar settings you choose.
• Content you create. Measurements, scans, photos, notes, plant lists, item descriptions, saved locations and other content you create or import into an app ("User Content"). Most User Content is stored on your device. Some apps let you back up or sync User Content to our servers; where they do, the app tells you.
• Purchases. If you subscribe or make an in-app purchase, the transaction is handled by Apple or Google. We receive a transaction record, the product purchased and its status, but not your payment card number or billing address.
• Communications. If you email us, respond to a survey or submit feedback, we keep the correspondence and any information you include.

2.2 Information collected automatically

• Device and app information. Device model, operating system version, app version, language, time zone, screen size, sensor availability (for example, whether the device has LiDAR), and anonymous or resettable identifiers assigned by your device or by us (such as an install ID, Apple's IDFV, or, with your permission, the advertising identifier).
• Usage and diagnostics. Which features you use, screens you view, taps and session length, performance metrics and crash reports. Crash reports may include the state of the app at the time of the crash but are designed not to include the content of your scans.
• Approximate location inferred from your IP address, used for regional settings, fraud prevention and aggregate statistics.
• Sensor data as described in section 3 and section 4.

2.3 Information from other sources

• Sign-in providers (Apple, Google) share the information you authorize when you sign in.
• App stores (Apple App Store, Google Play) provide purchase and subscription status.
• Public and licensed data sets, such as weather, climate zone, elevation, parcel and satellite imagery data, which some apps combine with your location to provide a result. These data sets describe places, not people, but when joined with your saved location they become part of your personal information.

2.4 Information we do not collect

We do not collect government ID numbers, payment card numbers, precise health data, or contacts from your address book. We do not perform facial recognition, and we do not create biometric identifiers or templates from any image or scan.

3.Camera, LiDAR and scan data

Our apps are built around the camera and depth sensors in your phone. This section explains exactly what happens with that data.

3.1 What the sensors capture

With your permission, an app may access:

• Camera images (still photos or live video frames) used to identify objects, read a scene or guide a measurement.
• Depth and LiDAR data: a three-dimensional point cloud or mesh describing the shape, distance and slope of surfaces in front of the device. Depth data looks like geometry, not a photograph, and generally cannot identify a person.
• Motion sensors (accelerometer, gyroscope, compass) used to stabilize measurements and understand device orientation.

3.2 Processing happens on your device by default

Unless an app clearly tells you otherwise at the moment you use a feature, camera frames and depth data are processed in memory on your device, used to produce a result (a measurement, a map, an identification, an estimate), and then discarded. They are not transmitted to Glenn Works or to anyone else. Results you choose to save are stored on your device as User Content.

3.3 When scan data may leave your device

Some features cannot run entirely on a phone. If a feature needs to send a photo, scan or derived data to our servers or to a third-party service (for example, a cloud model that identifies a plant or estimates the value of an item), the app will:

• tell you before the first upload what is being sent and to whom;
• ask for your explicit permission, separately from your camera permission; and
• let you decline and still use the rest of the app.

Where we use a third-party provider for such features, the provider is a processor acting under our instructions, is contractually prohibited from using your content to train its models or for its own purposes, and receives only what the feature needs. See section 9.

3.4 Backups and sync

If you turn on cloud backup or multi-device sync in an app that offers it, the User Content you choose to back up (which may include saved photos and scans) is encrypted in transit and stored on our hosting provider's servers in the United States. You can turn sync off and delete backed-up content at any time from within the app or by contacting us.

3.5 Other people and property in your scans

Scans and photos can incidentally capture other people, neighbors' property or private spaces. You are responsible for scanning only where you have the right to do so and for respecting other people's privacy. We do not attempt to identify people in images, and we ask that you do not upload or share images of others without their consent.

3.6 No biometrics

We do not collect, store or use face geometry, fingerprints, voiceprints, iris or retina scans, or any other biometric identifier, and we do not derive them from depth data. Depth maps of people's faces are never created or stored by our apps. If this ever changes for a specific feature, we will update this policy and obtain any consent required by law (including under the Illinois Biometric Information Privacy Act and similar laws) before enabling it.

3.7 Permissions you control

Camera and sensor access always requires your permission through your device's operating system, and you can revoke it at any time in your device's Settings. Revoking permission will disable features that depend on it but will not delete content you have already saved.

4.Location

Some features use your device's location. Examples include mapping sunlight and shade on a property, retrieving the weather, climate zone or terrain for a place you save, recognizing a place you are visiting so the app can preselect it, and tagging a measurement with where it was taken.

• Precise location (GPS-level) is collected only when you grant the app location permission and only while you use a feature that needs it, unless you expressly enable background location for a specific feature that explains why. You can choose "approximate" location on iOS and Android if a feature works with it.
• Saved locations (for example, the property you are mapping) are stored as User Content, on your device or, if you enable sync, on our servers.
• We never sell precise location, never share it with advertisers or data brokers, and never use it to build a history of your movements.

You can revoke location permission at any time in your device's Settings.

5.How we use information

We use personal information to:

• Provide the Services: run the apps, process scans and measurements, store and sync your content, authenticate you and deliver purchases.
• Improve and develop the Services: understand which features are used, fix crashes, test changes and design new features. We use aggregated or de-identified data for this where possible. We do not use your photos or scans to train machine-learning models unless you expressly opt in to a program that says so.
• Communicate with you: respond to support requests, send service announcements (such as changes to terms or security notices) and, if you opt in, product news. You can unsubscribe from marketing emails at any time.
• Show and measure advertising in apps that are ad-supported, as described in section 8.
• Protect the Services: detect fraud, abuse, security incidents and violations of our Terms.
• Comply with law: meet legal obligations, respond to lawful requests and enforce our rights.

We do not make decisions about you that have legal or similarly significant effects using solely automated processing.

6.Legal bases for processing (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:

Where we rely on consent, you can withdraw it through the relevant setting in the app or your device, or by contacting us. Withdrawal does not affect processing that happened before you withdrew.

7.How we share information

We do not sell personal information for money. We share it only as follows:

• Service providers (processors). Companies that host our infrastructure, store data, authenticate users, send email, provide analytics and crash reporting, process payments on behalf of the app stores, and (with your consent) run cloud or AI features. They may use personal information only to provide services to us. Our current core providers are listed in section 17.
• Advertising partners. In ad-supported apps, ad networks receive the information described in section 8. Under some US state laws this counts as a "sale" or "sharing" of personal information, and you can opt out.
• App stores and sign-in providers. Apple and Google process your purchases and sign-ins under their own privacy policies.
• Legal and safety. When required by law, subpoena or court order; to protect the rights, property or safety of Glenn Works, our users or the public; or to enforce our Terms.
• Business transfers. If Glenn Works is involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any change in ownership or in how your information is used.
• With your direction. When you choose to export, share or publish content, for example sharing a measurement by message or email.
• Aggregated or de-identified data that cannot reasonably be used to identify you, for example "how many scans were taken in a region last month." We commit to maintaining such data in de-identified form and not to attempt to re-identify it.

8.Advertising, analytics and tracking

8.1 Analytics and crash reporting

We use Google Firebase (Google Analytics for Firebase and Crashlytics) to understand how our apps are used and to diagnose crashes. These tools collect device information, app events, an app-instance identifier and, where permitted, the advertising identifier. IP addresses are used to derive coarse location and are not stored by Google Analytics for Firebase. You can limit this collection through your device's privacy settings, and on request we will exclude your device from analytics.

8.2 Advertising

Some of our apps are free and supported by ads. Ads may be served by Google AdMob and partner networks. By default, and always for users who have not opted in to tracking, we request non-personalized (contextual) ads, which are chosen based on the app and general factors such as device type and coarse region rather than on your behavior across other apps and sites. Ad networks still collect certain information to serve and measure ads, such as IP address, device information and ad interaction data.

Personalized ads are shown only if you opt in:

• On iOS, through Apple's App Tracking Transparency prompt ("Allow this app to track your activity..."). If you select "Ask App Not to Track," we do not access the IDFA and do not link your data to third-party data for advertising.
• On Android, through the app's consent prompt and your Google advertising ID settings.
• In the EEA, UK and Switzerland, through a consent dialog that meets the IAB Transparency & Consent Framework, shown before any personalized advertising begins.

You can change your choice at any time in your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads) or in the app's privacy settings. We do not show personalized ads to users we know to be under 18.

8.3 "Do Not Sell or Share" and Global Privacy Control

Under the California Consumer Privacy Act and similar state laws, allowing ad networks to collect identifiers and usage data for cross-context behavioral advertising can be considered a "sale" or "sharing" of personal information. You may opt out at any time:

• in the app, under Settings → Privacy → Do Not Sell or Share My Personal Information;
• by emailing hello@glennworks.app with the subject "Do Not Sell or Share"; or
• by enabling an opt-out preference signal such as Global Privacy Control in a browser or device that supports it. We honor such signals where the law requires.

We do not use precise location, scans, photos or User Content for advertising, and these are never sold or shared for advertising purposes.

8.4 Cookies on our websites

Our websites, including glennworks.app, currently use no cookies and no third-party analytics. If that changes, we will update this section and show a cookie notice where required.

9.AI features

Some features use machine-learning models to recognize objects, estimate values or dimensions, or generate suggestions. Where these models run on your device, no data leaves your phone. Where a feature sends your content to a cloud model operated by us or by a third-party AI provider, we will:

• name the category of provider and what is sent, in the app, before the first use, and obtain your explicit permission;
• send only the content needed for the feature, stripped of account identifiers where feasible;
• use providers that contractually agree not to train on your content or retain it beyond what is needed to return a result (typically 30 days or less for abuse monitoring); and
• clearly label output that is generated or estimated by AI.

AI output is an estimate and may be wrong. It is not professional advice (for example, it is not a certified appraisal, survey, agronomic or horticultural opinion). See our Terms of Service.

10.How long we keep information

We keep personal information only as long as needed for the purposes described above, then delete or de-identify it. Typical periods:

11.Security

We protect personal information with measures appropriate to its sensitivity, including encryption in transit (TLS) and at rest for synced content, access controls and least-privilege credentials, platform security features such as the iOS Keychain and Android Keystore, and keeping processing on your device wherever possible. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

12.Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy in a portable format;
• Correct inaccurate information;
• Delete your personal information;
• Object to or restrict certain processing, including processing based on legitimate interests and direct marketing;
• Withdraw consent at any time where processing is based on consent;
• Opt out of the sale or sharing of personal information, targeted advertising and profiling;
• Not be discriminated against for exercising your rights; and
• Complain to a supervisory authority or appeal a decision we make about your request.

We honor these rights for everyone, regardless of where you live, to the extent we reasonably can.

How to exercise them. Many choices are available directly in the app (export, delete account, privacy toggles) or in your device settings (camera, location, tracking). For anything else, email hello@glennworks.app. We will verify your request by confirming you control the email address or account involved, and respond within the time required by law (generally 30 days in the EEA/UK and 45 days in US states, extendable once with notice). You may designate an authorized agent to make a request on your behalf; we may ask the agent for proof of authorization and may still verify your identity directly with you.

Appeals. If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will respond within 45 days. If you are not satisfied, you may contact your state attorney general or data protection authority.

13.Deleting your account and data

You can delete your account and the data associated with it at any time:

1. In the app: open Settings → Account → Delete Account. Deletion is permanent and takes effect immediately for your account, with synced content removed from our servers within 30 days and from backups within 90 days.
2. By email: send a request to hello@glennworks.app from the email address on your account, naming the app. We will confirm and complete the deletion within 30 days.
3. Local data only: content stored on your device is removed when you delete the app. If you have an account, deleting the app alone does not delete the account; use one of the options above.

We may retain limited information after deletion where the law requires it (for example, purchase records for tax purposes) or to resolve disputes and enforce our Terms. Deleting your account does not cancel an active subscription; cancel subscriptions through your Apple or Google account settings.

14.United States state privacy notices

This section supplements the policy for residents of US states with comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. The rights in section 12 apply to you. Note that many of these laws apply only to businesses above certain size thresholds; we extend these rights regardless.

14.1 Categories of personal information (California notice at collection)

In the preceding 12 months we have collected, or may collect, the following categories of personal information as defined by the California Consumer Privacy Act (CCPA), for the purposes described in section 5:

We do not collect the following CCPA categories: characteristics of protected classifications, biometric information, professional or employment information, education information, or the contents of mail, email or text messages not directed to us.

Sources: you, your device, sign-in providers, app stores and the public data sets described in section 2.3. Disclosed for a business purpose to: service providers listed in section 17. Sold or shared: only the categories marked above, only to advertising networks, and only for cross-context behavioral advertising; you may opt out as described in section 8.3. We have no actual knowledge that we sell or share the personal information of consumers under 16. We do not offer financial incentives in exchange for personal information.

14.2 Sensitive data and consent

Precise geolocation is "sensitive data" under several state laws. We process it only with your opt-in consent through your device's permission prompt and only for the feature you are using. Where state law (for example, Oregon) prohibits the sale of precise geolocation data, we comply; in fact we never sell it anywhere.

14.3 Profiling and targeted advertising

We do not profile you in furtherance of decisions that produce legal or similarly significant effects. You may opt out of targeted advertising as described in section 8, and we honor the Global Privacy Control signal where required.

14.4 Nevada

We do not sell covered information as defined by Nevada law. Nevada residents may submit a request to opt out of future sales to hello@glennworks.app.

14.5 California "Shine the Light"

We do not share personal information with third parties for their own direct marketing purposes.

15.International users and data transfers

Glenn Works is based in the United States, and our service providers store data in the United States and in other countries where they operate. If you use the Services from outside the United States, your personal information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

EEA, UK and Switzerland. When we transfer personal information from these regions, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum or International Data Transfer Agreement, and Swiss adaptations, as applicable) with our service providers, together with supplementary measures where needed. Where a provider is certified under the EU-US, UK or Swiss-US Data Privacy Framework, we may also rely on that certification. You may request a copy of the relevant safeguards by contacting us. You also have the right to lodge a complaint with your local data protection authority; the lead authority for our EU operations has not been designated because we have no EU establishment.

Brazil. If the Lei Geral de Proteção de Dados applies, you have the rights set out in Article 18, including confirmation, access, correction, anonymization, portability, deletion and information about sharing, and the rights in section 12. Contact our data protection contact at hello@glennworks.app.

Canada. We comply with PIPEDA and applicable provincial laws. By using the Services you consent to the transfer and processing of your information in the United States. You may withdraw consent subject to legal and contractual restrictions.

Australia. We handle personal information in accordance with the Australian Privacy Principles. By using the Services you acknowledge that your information is disclosed to overseas recipients, principally in the United States, and that we take reasonable steps to ensure those recipients handle it in accordance with the APPs.

Other regions. Where local law grants you rights beyond those described here, we will honor them to the extent required. Contact us with any question about your local rights.

16.Children and teens

Our Services are not directed to children under 13 (or under the higher minimum age in your jurisdiction, for example 16 in some EU member states), and we do not knowingly collect personal information from them. If you are under the applicable minimum age, do not use the Services or give us any personal information. If we learn that we have collected personal information from a child under the minimum age without verifiable parental consent, we will delete it. Parents or guardians who believe a child has provided us information may contact us at hello@glennworks.app.

For users we know to be under 18, we do not show personalized advertising, do not sell or share their personal information, and do not profile them. Where an app store age signal or a parental control indicates a user is a minor, we apply these protections automatically.

17.Third-party services and links

The following providers may process personal information on our behalf. The list reflects our current providers and may change; the in-app privacy summary for each app lists the providers specific to that app.

Our Services may contain links to third-party websites or services (for example, a seed supplier, a map provider or a golf course). We are not responsible for their privacy practices. Review their policies before providing information to them.

Apple's and Google's platforms also collect information about your use of apps under their own policies (for example, App Store analytics you may have opted in to, or Google Play's data collection). We do not control that collection.

18.Changes to this policy

We may update this policy from time to time. The effective date at the top tells you when it last changed. If we make a material change, such as using existing data for a new purpose or collecting a new category of sensitive data, we will notify you in the app or by email before the change takes effect and, where the law requires, ask for your consent. Prior versions are available on request.

19.How to contact us

If you are in the EEA or UK and are not satisfied with our response, you may lodge a complaint with your national data protection authority or, in the UK, the Information Commissioner's Office.