Privacy Policy
Last updated: 17 October 2026
This policy explains what personal data Glas handles, why, and for how long. "Glas" means the Mac app, the getglas.app website and the Glas server.
1. Who is responsible
1PROPERTY GROUP LLC, 300 NE 12th Ave., Apt 107, Hallandale Beach, FL 33009, United States, is responsible for your personal data. Contact: [email protected].
2. What stays on your Mac
- Your dictation history (the last 1,000 dictations) and your notes, transcripts and summaries are stored only on your Mac, in your user folder, readable only by your user. History can be turned off in Settings ("Keep dictation history on this Mac").
- Your calendar, if you connect it: Glas reads today's events on your Mac to show your meetings and remind you of them. Events are not sent to us. When you record a meeting, its title and the attendees' names go into that note.
- Password fields: Glas never reads them. Dictation into a password field is recognized on your Mac and never leaves it.
- Glas's log on your Mac records times, lengths and settings, never what you said.
3. What we receive
Your account. Your email address, to sign you in (we email you a link that works once, for 15 minutes), to tell you about your account and to connect your subscription.
Your Macs. The name of each Mac you sign in on (for example "Anna's MacBook Air"), a one-way hash of its hardware identifier (so each Mac gets one trial), the Glas version and when it was last used.
Speech and text, to process them.
- On Pro and during the trial, your recording goes to our server, which sends it to OpenAI to turn it into text, and the text is cleaned up by an OpenAI model.
- On Free, your speech is recognized on your Mac, and the text goes to our server for cleanup.
- With each dictation or command, Glas sends what helps the text fit where you are writing: the app's name, the window title, the text just before and after the cursor (up to 1,500 and 300 characters), the selected text for a command, and the words in your dictionary. With "Read the app and the text around the cursor" turned off in Settings, only the app's name is sent.
- For notes: when you ask for a summary or ask a question, the transcript and your own notes go to our server and to OpenAI.
Our server does not store your audio or text. It passes them to OpenAI and returns the result. We keep only numbers: how many words and seconds of audio, when, which model, and how long it took. We use them to apply the limits of your plan and to watch our costs.
Payments. At checkout, Link (Stripe) collects your payment details, name and billing address; we never see your card. We receive your Stripe customer ID and your subscription's status, plan and renewal date. Link handles the payment under its own privacy policy.
Website and update checks. When you visit getglas.app, and when Glas checks for updates (about once an hour), our web server records your IP address, the time, the address requested and your browser or Glas version.
Cookies. getglas.app sets only the cookies its pages need to work: a session cookie and a security token. There are no analytics, advertising or tracking cookies. Update checks carry no cookie.
We do not sell your personal data, and we do not share it for advertising.
4. Who processes data for us
- OpenAI (United States): speech recognition and text cleanup. OpenAI handles the data under its API data policy.
- Stripe and Link (United States, Ireland): payments, tax and receipts.
- Hetzner (Germany): our server and database.
- Cloudflare: the network in front of our server, DNS, email delivery backup, and storage of our database backups in the EU.
- Amazon Web Services (SES): sending the sign-in emails from our email service.
Our server and database are in Germany. OpenAI and Stripe process data in the United States.
5. Legal bases (EU and UK)
- To provide Glas under our agreement with you: your account, processing your dictations and notes, your subscription.
- Our legitimate interests: applying plan limits, preventing abuse, keeping Glas secure, server logs.
6. How long we keep it
- Account data: while you have an account. When you ask us to delete it, we do so within 30 days.
- Per-request records (words, seconds, timing): 90 days. Monthly totals stay with the account.
- Sign-in requests: deleted a day after they expire.
- Web server logs: 7 days. Server error logs: 14 days; they never contain your audio or text.
- Backups: we back up the database every day and keep 7 days of backups, so deleted data leaves them within 7 days.
- Payment records: kept by Stripe and Link for as long as the law requires.
7. Your rights
You can ask to see the personal data we hold about you, to correct it, to delete it, to receive it in a portable form, or to object to or restrict how we use it. Write to [email protected] from your account's email address. We answer within one month. If you are in the EU or the UK, you can also complain to your data protection authority.
If you are a California resident, you have the right to know, correct and delete your personal information, and we will not treat you differently for using these rights. We do not sell or share personal information as California law defines those terms.
8. Children
Glas is for people 18 and older and is not directed at children. If you believe a child has given us personal data, write to us and we will delete it.
9. Security
Everything between Glas and our server is encrypted in transit. Sign-in links and the keys of your Macs are stored only as hashes, and sign-in links work once. On your Mac, your history, notes and account key are readable only by your user.
10. Changes
We will post changes here with their date and, for a material change, tell you by email.