Privacy policy
GLP-Done is built to collect as little as possible. This page explains, in plain terms, what stays on your device and what the website does.
Last updated: June 2026
The short version
GLP-Done is private by design. The iOS app does not require an account, and in its first version it does not collect your data: your information stays on your device. We do not sell data, and we do not run ad tracking. The sections below describe the details.
The iOS app
The app is private by default. There is no account to create and no login, which means there is no central profile of you to begin with. In version 1, the app does not collect your personal data. The things you track stay on your device.
- No account, no sign-in, no user profile in version 1.
- Your data is stored on your device by default.
- Optional iCloud sync for Pro uses Apple's encrypted CloudKit, which GLP-Done cannot read.
If you turn on optional iCloud sync as a Pro user, your data is synced through Apple's CloudKit using Apple's encryption. That sync exists so your information can move between your own devices. It is handled by Apple, and GLP-Done cannot read the synced contents.
The website
This website uses privacy-respecting analytics through Vercel Analytics. These analytics are aggregate: they help us understand which pages are useful and how the site performs, without building personal profiles of individual visitors.
If you sign up for the newsletter, the form stores only the email address you submit. We use it to send you the newsletter, and nothing more. You can ask us to remove it at any time.
- Aggregate analytics only, with no personal profiles.
- The newsletter form stores only the email you provide.
- No selling of data, and no advertising trackers.
Cookies
We keep cookies minimal, and we do not use them to track you across the web. Any cookies present are limited to what is essential for the site to function. We do not use cookies for advertising.
Sharing and selling
We do not sell your data, and we do not share it for advertising purposes. The only third parties involved are the infrastructure providers described above (Apple for optional sync, Vercel for hosting and aggregate analytics), each handling data only as needed to provide their service.
Changes and contact
This policy is general and written to be readable rather than exhaustive. If we make meaningful changes, we will update the date at the top of this page. If you have a question about your privacy, or want your newsletter email removed, please reach out at iancmaccallum@gmail.com.