Privacy policy
Last updated 8 October 2026
Draft. This document is being reviewed and may change before Glim launches on the App Store.
Glim is a coach that works with some of the most personal data you have. This policy explains, in plain words, what we collect, what we do with it, who helps us process it, and how you can get it back or delete it.
The short version: we use your data to coach you and for nothing else. We don’t sell it, we don’t show you ads, and your health data is never used for advertising or marketing. Some of it is sent to an AI provider so the coach can answer you. You can export your data and ask us to delete everything at any time.
- Who we are
- What we collect
- How we use it
- The AI coach
- Who processes it
- Apple Health, WHOOP and Oura
- Cycle tracking
- Coaching with a partner
- How long we keep it
- Your rights and deletion
- The waitlist and this website
- Security
- Children
- Changes and contact
Who we are
Glim (the iPhone app “Glim: Daily Coach” and the website heyglim.app) is made by Fload (Float Technology) [registered company name, number and address to confirm]. We are the controller of your personal data. For anything about privacy, write to [email protected].
What we collect
We only collect what you give us or connect, and what the app needs to work.
Your account
- Your name, email address and password. The password is stored only as a hash, never in plain text.
- Sign-in sessions, which can include the device’s IP address and user agent.
Your profile and goals
- Sex, date of birth, height, units, time zone and the colour you pick for your glim.
- Goals and preferences: target weight, training experience, days and times you can train, sports, equipment and places you train (for example a hotel gym), and why you started.
- Anything you tell us about injuries or limitations.
- Diet style, cuisines, dislikes, allergies and how much you like to cook.
- If you choose to tell us, whether you are trying to conceive or are pregnant, and a due date.
- Travel periods and destinations you add. Glim does not use your device’s location (GPS).
What you log
- Workouts, sets, cardio, steps and notes.
- Food, drinks, water, saved meals, meal plans and grocery lists.
- Weight, body measurements and body fat.
- How you feel: energy, soreness, stress, mood, being unwell, and any note you add.
- Tasks, routines and habits.
- Blood test results you add, and the lab reports you upload.
- Photos and files you upload: meal and menu photos, progress photos, your avatar, lab reports, and screenshots you import into the planner.
- Your conversations with the coach, the things it remembers about you, weekly check-ins and daily briefs.
Data you connect
- WHOOP, Oura and Apple Health: see Apple Health, WHOOP and Oura.
- Your calendar, if you allow it: events from yesterday to four days ahead (title, start and end time, whether it is all-day, and location). We use them to plan around your day, for example to protect your sleep around a late night. You can turn calendar sharing off in the app, which deletes these events from our servers.
Voice
- Dictation uses Apple’s speech recognition, on your iPhone where supported (otherwise Apple’s speech service). Audio never reaches our servers; only the resulting text is sent, as a chat message.
- If you turn on spoken replies, the text of the coach’s reply is sent to OpenAI to be turned into speech. Otherwise your iPhone’s built-in voice is used.
Notifications
- A push token for your device, your notification settings, and a record of the notifications we sent.
The app contains no advertising, analytics or tracking SDKs, and we do not track you across other apps or websites.
How we use it
- To coach you: build and adjust your training, food, sleep and recovery plan, and show your progress.
- To answer you in chat, write your daily brief and review your weekly check-in (see The AI coach).
- To send the notifications you’ve asked for.
- To share what you choose with your partner, if you coach together.
- To keep the service secure, fix problems, and answer support requests.
We never sell your data, we never use it for advertising, and we never share it with data brokers.
Legal bases (EU/UK GDPR) [to confirm]: we process your data to provide the service you asked for (contract). We process health data (for example workouts, heart data, sleep, weight, bloodwork, pregnancy status and cycle data) only with your explicit consent, which you give when you connect a source or enter that data, and which you can withdraw at any time by disconnecting the source or deleting the data.
The AI coach
The coach is powered by Claude, an AI model from Anthropic. To answer you, Glim sends Anthropic the context the coach needs, which can include your profile and goals, recent training, food and body data, how you’ve been feeling, your calendar events (if shared), sleep and recovery data from WHOOP and Apple Health, flagged bloodwork results, things the coach remembers about you, data your partner has chosen to share with you, and photos you send for food logging, menu reading or lab-report reading. Cycle data is included only if you turn cycle tracking on.
Oura data is never sent to the AI. It is used only by Glim’s own rules (your rings, readiness and plan).
Anthropic processes this data on our behalf to provide the service. Under our commercial agreement, it does not use it to train its models [to confirm against the current Anthropic terms]. AI can be wrong: check anything that matters, and see a professional for medical questions.
Who processes it
We use a small number of service providers. Each gets only what it needs for its job.
| Provider | What for | What they receive |
|---|---|---|
| Hetzner (Germany) | Hosting our servers and database | All data stored by Glim, in Germany |
| Cloudflare R2 | Storing uploaded files | Photos, lab reports and screenshots you upload |
| Anthropic (US) | The AI coach | The coaching context described in The AI coach |
| OpenAI (US) | Spoken replies, only if you turn them on | The text of the coach’s replies |
| Apple | Push notifications, Apple Health, speech recognition | Notification text and a device token; dictation audio when on-device recognition isn’t available |
| WHOOP, Oura | The data you connect | A sign-in you approve; we read data from them, we don’t send your Glim data to them |
| Open Food Facts | Food search and barcodes | Search words and barcodes, with no information about you |
| Wikipedia, Wikimedia Commons, TheMealDB | Photos for meal-plan recipes | Dish names only, with no information about you |
| Cloudflare | Hosting this website | Standard request data such as IP address, for delivery and security |
Where data is processed outside the EU/EEA (Anthropic and OpenAI in the United States), we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses [to confirm].
Apple Health, WHOOP and Oura
Apple Health
With your permission, Glim reads workouts, sleep, steps, active energy, resting heart rate, heart rate variability, VO2 max, heart rate, weight, body fat, lean body mass and waist circumference, and can write your weigh-ins and workouts back. It uploads daily steps, active energy, resting heart rate, HRV, VO2 max, sleep, weigh-ins, body fat and workouts to your Glim account so your plan can use them.
Data from Apple Health is used only to provide Glim’s health and fitness features. It is never used for advertising or marketing, never sold, and never shared with third parties for those purposes. You can change Glim’s access at any time in the Health app.
WHOOP
With your permission, Glim reads recovery, cycles and strain, sleep, workouts and body measurements. Access tokens are encrypted at rest. When you disconnect WHOOP, we revoke access and delete the tokens; the data already imported stays in your account unless you ask us to delete it.
Oura
With your permission, Glim reads readiness, sleep, daily activity, blood oxygen, VO2 max, workouts and temperature deviation. Oura data is never sent to the AI. When you disconnect Oura, we revoke access and delete all data that came from Oura.
Cycle tracking
- Off by default. Nothing is collected until you turn it on.
- Sources: read-only from Apple Health (menstrual flow, spotting, ovulation tests, symptoms, and basal or wrist temperature), plus what you log yourself or tell the coach in chat.
- Oura: temperature deviation is used only to help confirm ovulation, and is never sent to the AI.
- AI: while cycle tracking is on, your cycle data is sent to Anthropic so the coach can personalise your training, food and recovery.
- Your partner never sees it, unless you turn on “share my phase”, which shares only the name of your current phase.
- Never shown in widgets, notifications or on the Lock Screen.
- Turning cycle tracking off deletes all your cycle data. Deleting your account deletes everything.
- Cycle data is never used for advertising and never sold.
Coaching with a partner
If you join a household with a partner, they always see your name, avatar, colour, when you were last active, the cheers and nudges you send, and your shared meal plan and grocery list. What else they see is up to you, in Settings › Household & privacy:
- Workouts and personal records (on by default).
- Rings and consistency, such as check-ins done and weigh-in streaks (on by default).
- Your readiness score, given to your partner’s coach only (on by default).
- Your weight trend, given to your partner’s coach only (off by default).
- Meals you log, including “Me too” (off by default).
What you share can also be used by your partner’s AI coach. Progress photos, body measurements, your calendar and your cycle data (except your phase, if you choose) are never shared.
How long we keep it
- We keep your data while your account is open, so your history and plan keep working.
- When you delete something in the app, it is removed from your account. [Before launch: meal photos of deleted food logs and imported planner screenshots must also be removed from storage; today they stay until the account is deleted.]
- When you ask us to delete your account, we delete your account and all its data, including uploaded files, within 30 days [to confirm], and from backups within [to confirm] days.
- Calendar events are deleted when you turn calendar sharing off. Cycle data is deleted when you turn cycle tracking off. Oura data is deleted when you disconnect Oura.
- Waitlist emails are kept until we’ve announced the launch, or until you ask us to remove yours.
Your rights and deletion
You can, at any time:
- Get a copy of your data: in the app, Settings › Household & privacy › Export my data, or by email.
- Correct anything, in the app or by email.
- Delete your account and all your data: email [email protected] from the address you signed up with. [In-app account deletion to be added before launch.]
- Withdraw consent by disconnecting a source, turning off calendar sharing or cycle tracking, or changing what your partner sees.
- Object to or restrict processing, and complain to your local data protection authority.
We answer requests within one month.
The waitlist and this website
If you join the waitlist, we store your email address, where you signed up (for example “web”) and the date. We use it only to tell you when Glim launches. Your IP address is used briefly to stop abuse (rate limiting) and is not stored. To be removed, email [email protected].
This website uses no cookies and no analytics. If you switch to the paper theme, that choice is saved in your browser’s local storage and never sent to us.
Security
Data travels over encrypted connections (HTTPS). Passwords are hashed, WHOOP and Oura tokens are encrypted at rest, and uploaded photos and lab reports are only reachable through short-lived links. Your avatar is served at a hard-to-guess link so your partner can see it. Access to production systems is limited to the people who run Glim. No system is perfectly secure; if something goes wrong, we’ll tell you and the authorities as the law requires.
Children
Glim is not for children. You must be at least 16 [age to confirm] to use it.
Not medical advice
Glim is a coach, not a doctor, and not a medical device. It doesn’t diagnose, treat or prevent any condition.
Changes and contact
If we change this policy in a way that matters, we’ll tell you in the app before it takes effect. Questions, requests or worries: [email protected].