Privacy Policy

Glimt is built to help you breathe, not to watch you. We collect only what we need to sell you a license and keep it working, and nothing more. This policy explains exactly what that is.

Who we are

Glimt is made by TANGEN APPS ("we", "us"), based in Norway. We are the data controller for the personal data described here. You can reach us at hello@glimtapp.io for any privacy question or request.

What we collect

When you buy a license

Your email address, so we can send you your license key and help you if you lose it.
Order details: the Stripe checkout session ID, the number of licenses and the amount paid.
Your license key(s), linked to your email address.

Payments are handled entirely by Stripe. We never see or store your card details, and we do not store your name or billing address in our own systems.

When you activate the app

A machine identifier. This is a one-way hash derived from your computer's hardware ID. It cannot be reversed to reveal the hardware ID, and it is used only to count activations against your license.

When the app checks for updates

The app periodically downloads a small update file from glimtapp.io. Like any web request, this exposes your IP address to our hosting provider. We do not log or link it to you.

When you visit glimtapp.io

We use Vercel Web Analytics and Speed Insights to understand page visits and site performance in aggregate. They do not use cookies and do not identify you personally.

What we do not collect

Everything you do inside the app stays on your computer. Your breathing sessions, settings, and history are stored locally in the app's own database and are never sent to us.

To pause reminders during calls and meetings, the app checks system activity (such as whether your microphone or camera is in use). This check happens entirely on your device. Nothing about it leaves your computer.

We do not show ads, we do not use tracking cookies, and we never sell or share your data for marketing.

Why we process your data

To fulfil our contract with you — delivering, activating and supporting your license.
To comply with the law — keeping order records as required by Norwegian bookkeeping rules.
Legitimate interest — aggregate, anonymous website analytics so we can improve the site.

Who processes data for us

We rely on a small number of trusted service providers:

Stripe — payment processing
Supabase — secure storage of orders, licenses and activations
Resend — sending your license key by email
Vercel — website hosting and anonymous analytics

Each provider processes data only on our behalf and under appropriate data protection agreements.

How long we keep it

We keep order and license records for as long as your license is in use, and order records for as long as Norwegian bookkeeping law requires. You can ask us to delete your data at any time; we will delete everything we are not legally required to keep. Deleting your license data means the license can no longer be activated.

Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Have your data deleted
Restrict or object to processing
Receive your data in a portable format
Lodge a complaint with your data protection authority (in Norway: Datatilsynet)

To exercise any of these rights, email hello@glimtapp.io.

Changes to this policy

If we change this policy, we will update it on this page and change the effective date above. If a change is significant, we will let license holders know by email.