Privacy
Policy.

1. Scope and local-first design

This policy applies to the Glow With Time Android app (“GloWT”) and the GloWT online services operated by Nic of Time Apps. GloWT is a collectible-glass companion for documenting pieces, evidence, identification research, provenance, condition, measurements, user-recorded radiation readings, photographs, seller outputs and transfer records.

You can use the core local collection without creating a GloWT cloud account. Online features are optional and are not required to view, edit, back up, restore or export your local collection.

2. Information stored on your device

Depending on what you choose to record, local app data can include:

• piece titles, descriptions, categories, maker/pattern/era notes and identification assessments;
• photos and capture labels, UV wavelength observations, condition evidence and measurement sets;
• user-entered radiation readings and measurement context such as instrument, distance, background and geometry;
• provenance, ownership history, acquisition details, seller/source/contact information, purchase price or costs, receipts, private notes and general or precise/private location labels;
• favourites, Glow Hutch placement, lifecycle/history events, Seller Kit drafts, transaction handoff records and app settings;
• local backup, restore and export metadata.

Nic of Time Apps does not receive this local collection data merely because it exists on your device. Clearing app storage, uninstalling the app, or losing the device can remove local records that have not been separately backed up.

3. Optional Google-connected GloWT cloud account

If you choose to connect a cloud account, GloWT uses Google Sign-In to establish your identity. Google provides an identity proof and account information needed for authentication. GloWT’s backend associates online data with a provider-derived account identifier. The app may also keep the account label (such as the connected Google email address) with protected session information on your device.

After initial sign-in, GloWT uses short-lived and refreshable GloWT session credentials for its own cloud services. Signing out clears GloWT’s protected local cloud session, but does not by itself delete local collection data or previously stored cloud data.

4. Cloud record sync and private cloud media

Cloud features are opt-in and account-scoped.

Core record sync

The current cloud-record contract is deliberately narrower than the full local Vault. It can include core item and identification-description fields such as title, category, lifecycle/ownership state, maker, pattern, era, region, glass characteristics, marks, labels, confidence/status fields and timestamps.

The core sync payload is designed to exclude photos, local file paths, purchase/acquisition private data, seller/contact details, precise/private location fields and unrelated free-form private notes.

Private cloud media

When private cloud media is enabled and an eligible upload is explicitly performed, an app-managed original photo can be transmitted to private account-scoped cloud storage. GloWT verifies the media identity/integrity before transport. Cloud media does not create a public photo link.

5. Connected AI/search and selected photos

Connected Scan and evidence-reassessment features are optional. Before a connected analysis, GloWT presents an acknowledgement describing what will be sent.

For Fast Hunt, GloWT sends the one selected Scan photo plus minimal request metadata through the GloWT analysis backend to OpenAI for a visual estimate. Fast Hunt does not browse the web. If you later choose deeper research, a separate request may use hosted web and image search to retrieve public third-party results for comparison.

For a reassessment, GloWT can send the baseline photo, only the verification/follow-up photos you select, and existing grounded candidate summaries. The request contract is designed to exclude unrelated collection ownership data, purchase details, precise/private location notes, meter readings, detailed measurements, unrelated personal notes and unselected photos.

The GloWT backend code does not write connected-analysis photo bytes to persistent backend storage. OpenAI processes the submitted content as a service provider. The app’s current disclosure states that OpenAI API data is not used to train models by default and that standard abuse-monitoring logs may retain customer content for up to 30 days.

Original image files may contain embedded metadata created by the camera or another app. GloWT’s generated share images are designed not to copy source-photo metadata, but original photos sent for connected analysis or private cloud-media storage may retain metadata present in the original file.

6. Collector Pro and Google Play billing

Collector Pro is billed through Google Play. Google handles payment methods and payment processing. GloWT receives purchase/subscription information needed to start, restore and manage the subscription, and sends the Google Play purchase token to the authenticated GloWT backend for verification.

The backend can store account-scoped entitlement state and recurring-service usage records so it can authorize paid online services. Nic of Time Apps does not receive your full payment-card details from Google Play.

See the Collector Pro subscription terms for renewal and cancellation information.

7. Backups, exports, sharing and Glass Passport

GloWT lets you create or share backups and readable exports such as CSV, JSON, images or media packages. Once you export or share a file, it leaves GloWT’s protected local environment. The storage provider, messaging app, email provider or other service you choose may then process the file under its own privacy terms.

Privacy-filtered share outputs and Glass Passport workflows are designed to require deliberate inclusion of shareable information and to avoid exposing private purchase price, precise/private location, seller/contact details or unrelated private notes by default.

The Glass Passport web handoff places its transfer payload in the URL fragment after the #. Browsers do not send that fragment as part of the ordinary webpage request. Passport acceptance occurs inside GloWT after review; visiting the handoff webpage does not itself accept ownership.

8. Service providers and disclosures

When you choose features that need them, GloWT currently relies on:

• Google for Google Sign-In and Google Play billing/subscription management;
• Cloudflare infrastructure for the GloWT backend, account-scoped database functions and private cloud-media storage;
• OpenAI for connected AI-assisted image analysis and, when requested, deeper web/image research.

These providers process data needed to deliver their part of the service and may generate security, fraud-prevention, billing or operational logs under their own policies. GloWT does not sell your personal information or collection data.

The current app build does not include advertising SDKs, advertising identifiers or third-party behavioural analytics SDKs.

9. Security

GloWT uses authenticated account-scoped requests, protected device credential storage, server-side identity and subscription verification, bounded cloud operations and private media object controls. No system can guarantee absolute security, so you should still protect your device, Google account and any exported backups or files.

10. Retention and deletion

Local data

Local records and managed photos remain on your device until you delete them, clear app storage or uninstall the app. Backups and exports you have saved elsewhere must be deleted from those locations separately.

GloWT cloud data

The in-app cloud deletion flow permanently removes account-scoped core cloud collection records, private cloud-media originals and manifests, recurring-service usage rows, Collector Pro entitlement rows and cloud refresh credentials. A limited security revocation record may be retained for a bounded period where needed to prevent old credentials from being reused.

Deleting GloWT cloud data does not remotely delete the local Vault, local photos, backups or exports on your devices.

Deleting GloWT cloud data does not cancel a Google Play subscription. Cancelling Collector Pro does not automatically delete GloWT cloud data.

See Account & data deletion for both the in-app deletion path and the external deletion-request method.

11. Children

Glow With Time is a general collecting tool and is not specifically directed to children under 13.

12. Changes to this policy

This policy may be updated when GloWT’s data flows, providers, account features, paid services or legal requirements change. The effective date at the top of this page will be updated when material changes are published.

13. Contact

Privacy questions and requests can be sent to nicoftimestudios@gmail.com.