Security & transparency
As of 11 October 2026
Place and time as proof
When you complete a task, Glenby records your location and the time once. That's the proof you were really there.
Outside live sharing there is no ongoing tracking and no movement profile running in the background. When you complete a task, Glenby captures location only in that one moment. If you share your location live, Glenby collects it for as long as the share runs and Glenby is open.
Two terms, explained plainly
End-to-end encryption means your note is encrypted on your device before it ever reaches our servers. Only the device of the person you share it with holds the key to decrypt it, our servers only ever see unreadable data.
GDPR stands for the General Data Protection Regulation, the EU law that governs how companies may handle your data. Three articles matter most to you: Art. 15 gives you the right to access what data we hold about you, Art. 17 the right to erasure, and Art. 12 requires us to respond to both within one month, not as a courtesy, but as a right you're entitled to.
Honest about what we don't know
On-device image recognition can give you a hint at best about what's in your photo. That's a guess, not an identification.
We don't run AI species recognition. Not because we couldn't, but because it would let any proof be invented. GPS and a timestamp can't be faked.
Shared content is moderated
Glenby is only open to adults, 18+. You can report profiles and messages anytime.
We confirm every report, review it, and remove content or suspend accounts when needed.
Encryption, not promises
The database is hosted with Cloudflare with a Western Europe location hint and no read copies in other regions; storage exclusively within the EU is not guaranteed. Encrypted media and chat delivery run on international infrastructure (Cloudflare), every transfer is safeguarded under GDPR and fully listed in the privacy policy.
There's no selling your data and no sharing it with ad networks. Your moments don't train someone else's AI model.
Notes only the two of you can read
Notes you share with someone are end-to-end encrypted. That means: only you and whoever you invite can read them. Not us.
Your data, in your hands anytime
You can export your data or delete your account completely anytime, right in the app or via our deletion page. That's your right, not an exception you have to ask for.
The export follows Art. 20 GDPR, the right to data portability: you get your data in a common, reusable format, not a PDF that's only good for reading.
Where is my data stored?
The database is hosted with Cloudflare with a Western Europe location hint (no guarantee that it stays exclusively within the EU). Encrypted media and delivery run on international infrastructure (Cloudflare), every transfer safeguarded under GDPR. The full list is in the privacy policy.
How does end-to-end encryption work for notes?
Only you and the person you share a note with can read it. The key never leaves your device. Not even we can decrypt your notes.
What is the minimum age for Glenby?
Glenby is only usable from age 18, and it's moderated.
Is Glenby GDPR compliant?
Yes. The database is hosted with Cloudflare with a Western Europe location hint (no guarantee that it stays exclusively within the EU), encrypted media and delivery run on international infrastructure under GDPR safeguards. Your data is never sold or shared with ad networks, and you can export or delete it any time.
How fast is a deletion request handled?
GDPR requires a response within one month (Art. 12 GDPR). In practice, we process deletion requests through our deletion page considerably faster.
How does Glenby protect shared content?
Access from age 18 only, every profile and message can be reported, and shared notes stay end-to-end encrypted.