Privacy Policy

Effective Date: October 3, 2026

Glean is made by QuantaCore Labs ("we," "our," or "us"). This policy explains what the Glean app and its web pages (the "Service") collect, where it goes, and how to delete it. We don't sell your information, we don't show ads, and the app contains no advertising or analytics trackers.

1. Information We Collect

• Account: your email address (or the relay address Apple gives us, if you sign in with Apple and choose to hide your email), the name you enter when registering or that Apple or Google passes on (if any), your Google profile photo if you sign in with Google, and an account ID. You can look for places and crisis lines without an account.
• Profile: the display name you choose, your saved city, dietary preferences, notification preferences, and, if you fill them in, your "standing need" details (household size, hardest day, a note) and your progress through the First 72 Hours checklist.
• Location: if you allow it, your device's precise location, used to find places near you. You can pick a city instead.
• Things you post: items you offer (title, quantity, photo, the meeting place you type, and a map pin taken from your device's location), items you claim, completed handoff records, the list of people you have blocked, the date you agreed to the conduct rules, and abuse reports you file.
• Guide messages: what you type to the Guide, your city and approximate location (to about a kilometre), and the names of the places and posts listed near you. Your name, email and account are not sent, and photos are not sent. Nothing is sent until you confirm in the app that you are 18 or older and agree.
• Online status: while the app is open, your city and the time you were last active, used for the "online now" count.
• Technical: our server sees your IP address and uses it briefly to limit abuse (for example, the number of reports or Guide requests per hour). We don't keep it with your account.

2. How We Use Your Information

• To run your account and show you shelters, food banks and crisis services near you.
• To let people offer and claim surplus food and goods.
• To answer your questions in the Guide.
• To investigate reports and keep people safe.
• To reply when you contact us.

3. Who Can See It and Who Processes It

• Other people using Glean can see items you post (title, photo, display name, the meeting place you typed, and the map pin, which is rounded to about 1 km unless you choose to show the exact spot), your city in the online count, and the account IDs and item titles on handoff records. Posts can be read by anyone, with or without an account. Nobody can see your email address.
• Service providers process data for us so the app can work:
  • Google Firebase (sign-in and database)
  • Google Maps Platform (place listings, photos and maps; your location is sent to find places near you)
  • Google Gemini API (the Guide; what you type, your approximate location and the names of nearby listings are sent, only after you agree in the app)
  • Apple (Sign in with Apple, if you use it)
  • Cloudflare (our server, which forwards map and Guide requests and delivers abuse reports to us by email)
  • OpenStreetMap Nominatim (turns your coordinates into a city name)
  • Open-Meteo (weather for your area; your coordinates are sent)
  These providers handle the data only to provide their service to us, under their own terms, and are expected to protect it at least as well as this policy describes. Google's handling of map data is covered by the Google Privacy Policy.
• By law or to protect people: if we believe disclosure is needed to respond to legal process, to investigate a report, or to protect someone's safety.

How long we keep it

• Your account and profile: until you delete the account.
• Items you post: until you take them down, they are handed over, or you delete the account.
• Online status: removed automatically once it is old.
• Completed handoff records and abuse reports: kept, as described under deletion below.
• The rate-limit counters our server keeps against your IP address: a few hours.

4. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

5. Zero-Tolerance Policy on Child Sexual Abuse and Exploitation (CSAE)

Glean maintains a strict, zero-tolerance policy against any form of Child Sexual Abuse Material (CSAM) or Child Sexual Abuse and Exploitation (CSAE). We are committed to keeping our platform safe and strictly adhere to all international laws and Google Play Developer Policies regarding child safety.

• Prohibited Content: Any content that depicts, encourages, promotes, or facilitates the sexual abuse or exploitation of children is strictly prohibited on the Service.
• Immediate Action: If we become aware of any user uploading, sharing, or engaging with CSAM or CSAE content, we will instantly terminate their account, preserve the associated data, and report the individual to the National Center for Missing & Exploited Children (NCMEC) and relevant law enforcement authorities.
• Reporting Mechanism: If you encounter any content on our platform that you suspect involves the exploitation of a minor, please report it immediately to Support@QuantaCoreLabs.ca or use the in-app reporting tools.

6. Policy for Children

Glean is not directed to children, and the AI Guide is only available to people who confirm they are 18 or older. We do not knowingly solicit information from or market to children under the age of 13. If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.

7. Deleting Your Account and Your Data

You can delete your account at any time, and you do not need to contact us to do it. In the app, open Network Settings, scroll to Danger Zone, and choose Delete Account. You can also make the request from a browser at glean-api.glean-369.workers.dev/delete-account.

Deleted immediately and permanently:

• Your sign-in credentials and account record.
• Your profile, including your node name, saved location and dietary preferences.
• Every surplus item you have cast, and any organization listing or bed availability you published.
• Your presence record on the live network.

Retained, with your identity removed: completed handoff records remain on the impact ledger, which is append-only by design so that donation history cannot be rewritten. These records contain no name, email address or location, only the item's title and account identifiers that no longer correspond to any person once your account is deleted. Abuse reports you filed, or that were filed about your account, are also kept, so that deleting an account cannot be used to escape a report.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by updating the "Effective Date" of this Privacy Policy.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

QuantaCore Labs
Email: Support@QuantaCoreLabs.ca