Glimpo
Privacy Policy
Last updated 21 October 2026
Glimpo is built so that we never need to see your footage. This policy explains what stays with you, the limited personal data we do process, why, who helps us, and your rights. It applies to the Glimpo apps, the Glimpo hub, the glimpo.si website and our support and billing services.
The data fiduciary (controller) is Trill Brands LLP (LLPIN AAV-7834), C 1/280, Chiranjeev Vihar, Ghaziabad, Uttar Pradesh 201002, India, which operates Glimpo. Contact us at support@glimpo.si.
1. Your video stays yours
- Video is recorded by the Glimpo hub on hardware you own and saved to storage you choose: your Google Drive, Dropbox, OneDrive, S3-compatible bucket, NAS or a local disk.
- Cloud uploads are encrypted end to end with AES-256-GCM before they leave your hub. Your storage provider receives only encrypted data, and only your recovery key can decrypt it.
- Live view and playback go from your hub to your devices. When your device can’t reach your hub directly, the connection runs through our relay, encrypted end to end between your hub and your device. The relay sees connection metadata (such as IP addresses, timing and data volume), never the video.
- Detection and AI search run on your own hub. We don’t identify people by face or build profiles of the people your cameras see.
2. Glimpses and Blind Relay (optional)
- Glimpses from your hub (Plus plan and above): short event clips and snapshots are encrypted on your hub to a key held only on your phones, then stored on our cloud storage so you can see them when your hub is offline. We store ciphertext and minimal metadata (an id, time, size and type) and cannot open them.
- Blind Relay is off by default. If you turn it on, a camera sends files to our relay by FTP or email; the relay encrypts each file in memory the moment it arrives, then discards the plaintext and stores only ciphertext. This is the one case in which unencrypted camera files briefly reach our servers, which is why it is opt-in and explained in the app first.
- Glimpses are deleted automatically according to the retention shown in the app, or when you delete them or your space.
3. Crash reports and diagnostics
Glimpo sends crash reports and anonymous diagnostics so we can fix problems fast. This is on by default for every copy of Glimpo: the phone and web apps, the desktop app and every hub, whether or not you have an account. You can turn it off at any time.
- How to turn it off: tap Turn off on the notice the first time you open Glimpo, or use the switch Send crash reports & diagnostics in Settings → Privacy & security. The switch is stored on your hub, and every app connected to that hub follows it; on a phone you can also turn it off (or on) for that phone alone. On a hub you run yourself you can also set
GLIMPO_TELEMETRY=off. Once it is off, nothing more is sent and anything waiting on the device is discarded. - What crash reports contain: the kind of error, the error message and where in our code it happened (the stack trace), the Glimpo version, the operating system, the device model and type, memory and screen size, language and time zone, and a short list of what the app was doing just before (screens opened and requests made, with addresses removed). When a hub stops unexpectedly, the next start sends the error and the last log lines.
- What diagnostics contain: which screens and features are used, which camera brands and models connect or fail and why, the hub's version, operating system, uptime, processor and memory use, number of cameras and recording errors, and, when something goes wrong, the error and the last log lines. They carry a random id that the install makes for itself, so we can tell one install's reports from another's; it is not linked to your name, email or account.
- What they never contain: video, pictures or sound from your cameras, camera or hub names, IP, MAC or street addresses, usernames, passwords, keys, recovery keys, emails, file paths, anything you typed or the contents of your storage. All of this is removed on your device before anything is sent, and removed again on our side. We don't store your IP address with a crash report.
- Why (legal basis): our legitimate interest in keeping Glimpo working and secure: finding and fixing crashes, and seeing which cameras fail to connect. We collect as little as that needs, keep it anonymous, and you can object at any time by turning it off.
- Where it goes: crash reports go to Sentry (Functional Software, Inc.), stored in its EU region in Frankfurt, Germany. Diagnostics go to our own database at Cloudflare.
- Retention: crash reports are deleted by Sentry after at most 90 days. Diagnostics are kept for 90 days (error details and log lines for 30 days), then deleted; only daily totals that no one can be picked out of are kept.
The beta
While Glimpo is in beta, downloading it from glimpo.si means joining the beta: you give your email and confirm it with a code. If you also agree to beta diagnostics, the diagnostics from your apps and hubs are linked to your beta account, so we can follow up on problems and thank our most helpful testers. You can withdraw that at any time with Leave beta on your account page; the diagnostics linked to you are then deleted within a day, and your installs go back to sending anonymously unless you turn them off.
- Record of your consent. We keep which wording you agreed to, when, from which browser or app, and a one-way hash of your IP address (not the address itself), and when you withdrew. This is our proof of consent, kept for as long as you have an account and up to 2 years after.
- Beta membership. We keep the date you joined and a summary of your activity (downloads, hubs linked, last activity, support tickets), so that when the beta ends we can offer testers the perks we promised. Your country is recorded at sign-up from your connection, nothing more precise.
4. Personal data we process
- Account and support: your email address, sign-in codes, support tickets and messages, and the files you attach. Used to give you access, answer requests and keep records of them. Your email is also how you join the beta and get the download (section 3).
- Waitlist and updates: your email and, if you give them, your plan and camera-brand interests. Used to send invites and product news, which you can unsubscribe from at any time.
- Purchases and licences: your email, country, plan, licence and subscription status, and invoice details. Payment card or bank details are collected and processed by our merchant of record, Dodo Payments, or by Apple or Google. We never receive your full card number.
- Notifications: device push tokens, and alert text (camera name, event type and id, such as “Person at Front door”) delivered through Apple Push Notification service, Firebase Cloud Messaging or Expo. Notifications contain no images; the app fetches snapshots directly from your hub. Hubs linked to a Glimpo account send this text through our website on its way to Expo, which checks the hub's plan and passes it on without storing or logging it.
- Cloud and camera sign-ins: when you connect Google Drive, Dropbox, OneDrive or a camera account, the tokens and credentials are stored encrypted on your hub, not on our servers. Our website only forwards the one-time sign-in code to your hub and does not store it. Google Drive access is limited to files Glimpo creates.
- Camera compatibility reports: when your hub scans for, tests or adds a camera, it sends us an anonymous record of what the camera is and what worked, so Glimpo can support more cameras without asking you to troubleshoot. A record contains the camera's maker, model and firmware version, the names its software reports, the first half of its network (MAC) address, which identifies only the maker, its open ports, the stream-link pattern that worked (with the address, username and password removed), and the video format. It never contains IP addresses, full MAC addresses, serial numbers, camera names, usernames, passwords, video or pictures. Records are tied to a pseudonymous hub code, not to your account. You can turn reports off in the hub's settings, and see exactly what is waiting to be sent.
- Website visits: we count visits to glimpo.si ourselves, without cookies and without any outside analytics or advertising service. We count which pages are opened, which site or campaign link sent you (only the site's name, like reddit.com), your country and region as our host sees them, whether you use a phone, tablet or computer, and which buttons are pressed. To count a visitor once a day, we mix your IP address and browser name with a random value that changes every day and is then deleted; your IP address and browser details are never stored, and you can't be recognised on another day or another site. Only daily totals are kept. If your browser sends Do Not Track or Global Privacy Control, nothing is counted.
- Crash reports and diagnostics (on by default, you can turn them off): anonymous reports of crashes, errors and how Glimpo is used, cleaned on your device first. Section 3 says exactly what they contain, how long we keep them and how to turn them off. They are linked to your account only if you joined the beta and agreed to that.
- Modified copies: if the hub finds that its own program files were changed after we built them, it sends us one short report with the reason, the Glimpo version, and the operating system and processor type. It contains nothing that identifies you, your hub or your cameras. Set
GLIMPO_TELEMETRY=offto stop it. - Technical data: IP address, approximate country, browser or app version and error information, used for security, abuse prevention, fraud checks and to keep the service working.
5. Why we process it
We process personal data to provide the service you asked for (performance of contract), to meet legal, tax and accounting obligations, for our legitimate interests in securing and improving Glimpo, fixing crashes (anonymous crash reports and diagnostics, which you can turn off) and preventing fraud, and with your consent for linking diagnostics to your beta account, marketing emails and optional features like Blind Relay. Where we rely on consent, you can withdraw it at any time.
6. Who we share it with
We don’t sell your personal data or use it for advertising. We share it only with service providers that process it for us under contract, and only as needed:
- Dodo Payments: checkout, payments, invoicing, tax and fraud prevention.
- Apple and Google: in-app purchases and push notifications. Expo: push notification delivery.
- Cloudflare: website hosting, relay, encrypted Glimpses storage, our support and beta database, and diagnostics.
- Sentry (Functional Software, Inc.): crash reports, stored in the EU (Frankfurt), with IP address storage turned off.
- Resend: emails the site and app send you (sign-in codes, receipts, ticket updates).
- Cloudflare Email Routing, Gmail and Brevo: receiving the email you send us, and our replies.
We may also disclose data where required by law or a valid legal order, to protect the rights and safety of users or others, or as part of a merger or sale of our business, in which case this policy will continue to apply.
7. International transfers
Our providers may process data outside your country, including in the United States, the European Union and India. Where required, we rely on appropriate safeguards such as standard contractual clauses.
8. Retention
Footage retention is controlled by you in the app (by default, continuous recordings 7 days, events 30 days, starred clips until you delete them). Website visit totals are kept; the daily value used to count visitors is deleted after a day. Crash reports are kept for up to 90 days. Diagnostics are kept for 90 days (error details and log lines for 30 days), totals that don't identify anyone are kept, and diagnostics linked to your beta account are deleted when you withdraw consent, ask us, or delete your account. We keep account and support records while you have an account and for up to 2 years after your last activity, waitlist entries until you unsubscribe or ask us to delete them, and invoice and transaction records for as long as tax law requires (in India, generally 8 years).
9. Security
We use end-to-end encryption, least-privilege access, encrypted transport (TLS) and regular security review. No system is completely secure. If we become aware of a personal data breach affecting you, we will notify you and the relevant authorities as the law requires.
10. Your rights
To stop crash reports and diagnostics, turn them off in Settings → Privacy & security. To delete diagnostics linked to your beta account, use Leave beta on the billing page or email us; we delete everything linked to your account. Anonymous reports can't be traced back to you, so we can't pick yours out, but they are deleted after 90 days. Website visits are only kept as totals that no one can be picked out of, so there is nothing personal to delete.
Depending on where you live (for example under India’s Digital Personal Data Protection Act 2023, the GDPR or US state laws), you can ask to access, correct, update, export or delete your personal data, withdraw consent, object to or restrict processing, and nominate someone to exercise your rights on your behalf. Email support@glimpo.si from your account email; we respond within 30 days. You can also complain to your data protection authority. To delete your Glimpo account and the personal data tied to it yourself, sign in at glimpo.si/account/delete; it takes effect at once (invoice and transaction records stay for as long as tax law requires, as in section 8).
11. Cookies
Our website uses only strictly necessary cookies, such as the secure session cookie that keeps you signed in to support. We do not use advertising or cross-site tracking cookies, or any third-party analytics. The visit counting described in section 4 uses no cookies or local storage and respects Do Not Track and Global Privacy Control.
12. Children
Glimpo is not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
13. Recording others
You decide what your cameras record and are responsible for complying with local privacy, surveillance and consent laws, as described in our Terms of Service.
14. Grievance Officer
In line with the Information Technology Act 2000 and the DPDP Act 2023, our Grievance Officer is Abhishek Pandey, Designated Partner, Trill Brands LLP, 677, 27th Main Road, Sector 1, HSR Layout, Bengaluru, Karnataka 560102, India. Email: support@glimpo.si. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.
15. Changes
We will post updates here with a new date and notify you in the app or by email of material changes before they take effect.