Last updated 25 September 2026
English · Svenska · Norsk · Dansk · Deutsch
Glenn is a family of small apps: Glenn Pack keeps a record of what you own and where you put it, Glenn Drive keeps your driving log, Glenn Proof keeps your receipts, and Glenn Archive remembers which folder each of your papers is in (each app is named in your language; in Swedish, for example, Glenn Lagra, Glenn Köra, Glenn Inköp and Glenn Arkiv). One account works in all of them, and this page covers all of them. What you record is yours. We don't sell it, we don't advertise against it, and we store as little around it as we can.
Your email address, and a display name if you set one. Authentication is handled by Supabase Auth; passwords are stored only as hashes, and if you sign in with an email link we never see a password at all.
The places, boxes and things you add — box codes, names, quantities, details, and the notes you write. Also a history of changes (who changed what, and when) so that people sharing a place can see how it got that way, and records of the QR labels you have generated so you can reprint them.
Box photos are stored in private storage at Supabase. They are never public: the app loads them through short-lived signed links, and only people you have invited to that place can see them. When you remove or replace a photo, the file is deleted too, not just hidden.
The cars you add (a name, and the registration number if you give it) and your trips: the day, where you drove from and to, the errand, who you visited, whether it was for work, odometer readings, kilometres and your notes. Every change to a trip after it was saved (what it was, what it became, and when) is recorded by the database and shown in your yearly log, because tax offices ask for a log that isn't rewritten afterwards; you can read these records but not change them, and they go when your account does. A driving log shows where you have been, so it is kept private to you: Glenn Drive has no sharing, and nobody else can read your trips.
The details of each receipt: the shop, what you bought, the day, the amount, how you paid (only the kind, such as card, Swish, Vipps or MobilePay; never a card number), whether you bought it in a shop, online, by phone or at the door and the day it arrived, the dates that matter for it (open purchase, the 14 days to change your mind, the shop's or maker's warranty, an extended warranty, and the time to complain under the law of the country you bought it in), the country, whether it is meant to last many years (asked in Norway only), whether you bought it from a private person, and your notes. When you delete a receipt it is kept for 30 days in Recently deleted, so you can bring it back, and then removed for good. These details are readable by our systems, so the app can list, find and remind you about them. Glenn Proof has no sharing.
A picture you keep with a receipt is encrypted on your phone before it is uploaded, together with a small thumbnail. We store only the encrypted files. We do not have the key, so we cannot open them, and neither can anyone who gets hold of our storage. See “Pictures of receipts” below.
Glenn Archive remembers where your papers are; the papers themselves stay in their folders at home. For each folder: its name and where it is kept (“the blue folder in the hall cupboard”). For each paper: what it is (such as “House insurance”), its kind (insurance, contract, ID and passport, home, car, bank and pension, tax, warranty and manual, or other), who issued it, the dates that matter for it (when it expires or renews, the last day to cancel, or a date in your own words), which folder it is in, and your notes. These details are readable by our systems, so the app can find your papers, show you what is coming up and make your spreadsheet. When you delete a paper it is kept for 30 days in Recently deleted, with its copies, so you can bring it back, and then removed for good. A folder you delete does not go to Recently deleted: its papers stay, under Not in a folder, and the folder itself is removed for good 30 days later. Glenn Archive has no sharing.
Glenn never keeps an identity number (such as a Swedish personnummer, a Norwegian fødselsnummer, a Danish CPR number or the number of a German ID card), an account number or a card number as a detail of a paper: long numbers are removed from what it hears. Glenn Archive has nothing made for health papers. You can note where one is kept, but its details are your own words, so keep them to what helps you find it, and rely on the paper itself for what it says.
If you add a copy of a paper, the picture is encrypted on your phone before it is uploaded, with the same key as your receipt pictures in Glenn Proof (one key for both apps). Glenn Archive never reads a copy: it is sealed on your phone and sent only sealed. We store only the encrypted files, so we never see what is on a copy, including anything sensitive such as health details or an identity number. What we can see is that a copy exists, its size, when it was added and which paper it belongs to. See “Copies of papers” below.
For each app, and for the subscription that covers every Glenn app: whether you have one, which product, and when it renews or expires. Payments are handled by Apple or Google — we never see your card details.
This is the part worth being precise about, because it is unusual.
When you describe a box (Glenn Pack), a drive (Glenn Drive), a purchase (Glenn Proof) or a paper (Glenn Archive) out loud, or tell Glenn more about a receipt, the recording is sent to our server function, transcribed to text, and the text is turned into a list of the things you mentioned, the trips you described, the details of the purchase or the details of your papers. Then both the audio and the transcript are gone. They exist only in memory for the length of that one request — they are never written to a database, never written to a file, and never logged. What is saved is what you check on screen and choose to keep.
During that request, the audio and the resulting text are processed by OpenAI, which acts as our processor for transcription and extraction. OpenAI keeps no copy of the audio. The text it turns into a list may stay in OpenAI's abuse-monitoring logs for up to 30 days (longer only if the law requires it) and is then deleted. OpenAI does not use any of it to train its models.
We keep a status record of the job (queued, done, failed, how long the audio was, how many things, trips, receipts or papers came out) so the app can show you progress and we can fix failures. That record contains no audio and no transcript.
When you take a picture of a receipt, a smaller reading copy is sent to our server function, which has the shop, the date and the amounts read from it and sends them back to your phone. The reading copy exists only in memory for that one request and is never written to a database or a file. What is saved is what you check on screen and choose to keep.
The picture you keep is encrypted on your phone (AES-256) with a key made on your phone. Your key is kept on your devices: on an iPhone in iCloud Keychain, which Apple encrypts end to end; on Android and in a web browser, on that device only, and in a browser only until you sign out. You can make a key page, a code and 12 words, to bring your pictures back on a new phone. It is shown to you once; we keep only a copy of your key locked with those words, which we cannot open. Nobody else takes part: we never hold a usable copy of your key, so we cannot help you open your pictures without it. If every copy of your key is lost, the pictures cannot be opened by anyone, but the details of every receipt stay.
During the reading request the picture is processed by OpenAI, which acts as our processor. OpenAI may keep the picture and the details it read in its abuse-monitoring logs for up to 30 days (longer only if the law requires it), and then deletes them. OpenAI does not use them to train its models.
Unlike a picture of a receipt, a copy of a paper in Glenn Archive is never read: not by our server, not by OpenAI, not by anyone. It is encrypted on your phone (AES-256) with your key, the same key and key page as in Glenn Proof (see above), and only the sealed file leaves your phone. Because we cannot read a copy, we do not process what is on it, including any health details, identity numbers or other sensitive information it may show. We store the sealed file and a few facts about it (that it exists, its size, when it was added and which paper it belongs to), and it goes when its paper does (see “How long we keep things”). If every copy of your key is lost, the copies cannot be opened by anyone, but the details of every paper stay.
A copy of an ID paper (a passport, an ID card or a driving licence) is marked “Copy” across the picture on your phone before it is sealed, so a copy can always be told from the original. German law asks for this (PAuswG § 20); Glenn does it in every country.
Only the copy is sealed. What you tell Glenn about a paper, such as its name, its folder and your notes, is an ordinary detail that our systems can read.
| Who | What they do |
|---|---|
| Supabase | Database, authentication, file storage, server functions, email for sign-in links |
| OpenAI | Transcribes a recording and lists the things, trips, purchases or papers in it, and reads a picture of a receipt once. Keeps no audio; may keep the text, and a receipt picture, up to 30 days to detect abuse. Never receives a copy of a paper |
| RevenueCat, Apple, Google | Subscriptions and payments |
| Vercel | Serves the web versions of the apps |
Each of these acts on our instructions for the purpose above, and nothing else. We do not sell or share personal data for advertising.
In Glenn Pack: you, and the people you invite to a place, with the role you give them. In Glenn Drive, Glenn Proof and Glenn Archive: only you, and not even we can open the pictures of your receipts or the copies of your papers. Access is enforced in the database itself, not only in the app, so nothing you have not shared is readable by anyone else.
We can technically access data in order to run and repair the service. We do so only when it is necessary for that purpose.
Glenn Drive does not use your location. Trips are what you say or type, nothing is tracked.
You can refuse any of these and still use the rest of the app. Nothing is recorded in the background, ever.
Download a copy. In Glenn Pack, Me → Download a copy gives you your places, boxes and things as an Excel spreadsheet or a data file, and your box photos as a zip file. In Glenn Drive, Me → Download the year’s log gives you every trip, its totals and every change to it as a spreadsheet. In Glenn Proof, Me → Download a spreadsheet gives you every receipt’s details, and any receipt picture can be saved from the receipt itself. In Glenn Archive, Me → Download a spreadsheet gives you every paper’s details, and any copy of a paper can be saved from the paper itself (Show the copy, then Save a copy). No request needed, no waiting. The download is part of Unlimited, and stays yours if you have ever subscribed. On the free plan, email support@oyster.tech and we will send you the same copy, free of charge.
Deletion. Me → Account → Delete my account, in any of the apps, removes everything in every Glenn app: your photos, your places and everything in them, your cars and trips, your receipts and their pictures, your papers, folders and copies, your key, your invitations, and your login. It is immediate and it cannot be undone. If you would rather ask us to do it, email support@oyster.tech.
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask us to restrict that use. Downloading a copy and deleting are built into the app so you don't have to ask; for anything else, email support@oyster.tech and we will answer within 30 days.
If you are in the EU or EEA, you can also complain to a data protection authority. Ours is Sweden's Integritetsskyddsmyndigheten (IMY), imy.se, which leads for our processing everywhere in the EU. You can always complain to the authority where you live instead: in Norway Datatilsynet, datatilsynet.no; in Denmark Datatilsynet, datatilsynet.dk; in Germany the data protection authority of your state (Land), listed at datenschutzkonferenz-online.de.
We process your data to provide the service you asked for (performing our agreement with you), to keep it secure, and to meet legal obligations such as accounting.
Everything travels over encrypted connections. Access rules live in the database, so they apply no matter how data is requested. Photos are stored privately and shown only through links that expire. Receipt pictures and copies of papers are encrypted on your device with a key we never hold. Secrets — including the keys for transcription — exist only on the server and are never shipped inside the apps.
The Glenn apps are not directed at children and we do not knowingly collect data from children under 13.
Your account and everything you record in the apps, including photos, are stored in the EU, in Ireland, by Supabase.
Some of the services listed above are based in the United States: OpenAI (while a recording or a receipt picture is being read), RevenueCat (your subscription status) and Vercel (which serves the web version). When your data passes to them, the transfer relies on the safeguards in their data processing terms, such as the EU Standard Contractual Clauses.
If we change how any of this works, we will update this page and change the date at the top. If a change is significant, we will tell you in the app.