Privacy Policy
Last updated: April 2026
1. Data Controller
NorseHorse is the data controller for GlazeTrain. Contact: support@glazetrain.com
2. Data We Collect
- Account information: username, email address, password (stored as a bcrypt hash)
- Profile information: display name, avatar photo, bio text
- Content: Glazes you send and receive
- Usage data: app interactions, timestamps, device identifiers
- Push notification tokens (for delivering notifications)
3. How We Use Your Data
- To operate and maintain your GlazeTrain account
- To deliver Glazes between users
- To moderate content using AI (see Section 4)
- To send push notifications about activity on your account
- To enforce our Terms of Service and Community Guidelines
- To prevent abuse and maintain platform safety
4. AI Content Moderation
GlazeTrain uses Anthropic's Claude API to moderate Glaze content. When a Glaze is submitted for moderation:
- ONLY the text content of the Glaze is sent to the API
- NO personal information is included (no usernames, emails, or user IDs)
- The API returns a moderation decision and a "hype level" score
- Anthropic does not store the content beyond the API request lifecycle
- This processing is necessary for the safety of our community
5. Data Sharing
We do not sell your personal data. We share data only with:
- Anthropic (Claude API): Glaze text content only, for moderation
- Apple (APNs): Push notification delivery tokens
- We may share data if required by law or to protect the safety of our users
6. Data Retention
- Active accounts: Data is retained while your account is active
- Deleted accounts: All personal data is removed immediately upon deletion. A minimal audit record (hashed email, no PII) is retained for 90 days for abuse prevention, then permanently purged.
- Backups: Deleted data is rotated out of backups within 30 days
7. Your Rights
You have the right to:
- Access your personal data (via your profile and settings)
- Correct your personal data (via profile editing)
- Delete your account and all associated data (Settings > Account > Delete Account)
- Opt out of anonymous Glazes (Settings > Privacy)
- Restrict who can send you Glazes (Settings > Privacy)
8. Children's Privacy
GlazeTrain is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.
9. International Users (GDPR)
- Lawful basis for processing: consent (provided at registration)
- Data portability: you may request an export of your data by contacting support
- Right to erasure: available via in-app account deletion
10. Cookies and Tracking
GlazeTrain does not use cookies or web tracking technologies. We do not track you across other apps or websites. No data is used for advertising at launch.
11. Security
We use industry-standard security measures to protect your data, including encrypted connections (TLS/SSL), bcrypt password hashing, and access controls on our servers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. You will be notified of material changes within the app and asked to review the updated policy.
Contact: support@glazetrain.com