Privacy Policy
Glacko
Privacy Policy — Glacko
Effective date: 2026-09-25
Summary
By default, Glacko works without an account and stores your inventory only on your device. The app sends anonymous usage statistics to help us improve it. If you enable the optional Household Sharing feature, the inventory of that household (product names, dates, categories, zones/appliances) is stored on our servers to enable synchronization across the household's devices.
Anonymous usage statistics (PostHog)
Glacko sends anonymous usage events (e.g. item added, item consumed, screen viewed, premium purchase) via the PostHog service, for the sole purpose of improving the app. These events are tied to a random device identifier, never to your name, email, or any other personal identifier. The content of your inventory (product names, notes, photos) is never sent to PostHog: in the session recordings described below, it is masked on your device before sending.
If the app crashes or hits an error, Glacko also sends PostHog a technical report (error type, screen involved, app and system versions, device model), tied to the same random identifier and without the content of your inventory, so we can fix the problem.
Household Sharing (optional feature, off by default)
If you enable household sharing (Settings → Household Sharing), the following data for that household is sent to and stored on our servers (Supabase infrastructure, hosted in the European Union) in order to synchronize the inventory across the household's devices in real time:
- Product names and categories, freezing/expiry dates, quantities, text notes.
- Zone and appliance names (e.g. "Drawer 1", "Freezer").
- An anonymous device identifier (no account, name, or email is requested) and a single-use invite code with a limited lifetime (10 minutes), used only to link two devices to the same household.
This data remains accessible only to devices that are members of the shared household. You can leave the shared household at any time (Settings → Household Sharing → Leave shared household): from that point on, your household data is no longer accessible to the other members. Photos attached to products stay stored locally on each device and are not synchronized between household members.
This feature is entirely optional. As long as it is not enabled, no inventory data leaves your device.
Data stored locally
The following information is stored on your device, in the App's SwiftData database:
- Names and categories of frozen products.
- Freezing dates and quantities.
- Optional text notes.
- Optional photos attached to products (stored in the App's Documents folder, never synchronized to our servers even when household sharing is enabled).
- App preferences (notifications, last drawer used) via UserDefaults.
This data only leaves your device in the following cases: CSV/JSON export via the iOS share sheet, or enabling household sharing. Glacko does not sync your inventory with iCloud (iOS may still include it in your general iPhone backup, depending on your settings).
Purchases (RevenueCat)
Glacko+ purchases are processed by Apple. To verify subscriptions, Glacko also uses the RevenueCat service, which receives purchase information (product, date, subscription status) linked to the app's random identifier. RevenueCat never receives your name, your email or the content of your inventory.
Local notifications
If you enable weekly reminders, Glacko schedules local notifications on your device. They are generated and shown entirely locally by iOS.
Rights
You can delete your household-sharing data at any time by leaving the shared household (Settings → Household Sharing → Leave shared household), and all of your local data by uninstalling the app. For a full deletion request of data stored on our servers beyond "leave the shared household," contact us at the address below.
Session recording (screenshots with masking)
Since September 2026, Glacko may record usage sessions through PostHog, to understand where people get stuck in the app.
- What it is: a series of screenshots of the app screen, replayed like a video, with the places that were tapped. No audio, no camera, no content from other apps. Nothing is recorded while the app is in the background.
- What is masked: your product names, notes, photos, voice entries and household sharing codes. Masking is applied on your device, before sending: these never appear in a recording.
- Hosting and retention: PostHog servers in the European Union, kept for 30 days, then deleted automatically.
- Identification: the recording is tied to the same random identifier as the other usage metrics, which cannot identify you.
Contact
For any question about this policy, contact the developer via the App's App Store page, or at alexandre-paul@outlook.com.