Gloam

Privacy Policy

Effective date: 15 July 2026 · Last updated: 15 July 2026

App: Gloam
Provider: ADV IT Solutions SRL ("ADV IT Solutions", "we", "us", "our")

ADV IT Solutions SRL, a company registered in Romania, RO44665006, and is the data controller for the limited personal data processed through Gloam ("the App").

Gloam is a private, on-device voice-journaling app. This policy explains what we do and — just as importantly — what we deliberately don't do with your data. Our guiding principle is simple: your journal belongs to you. Your recordings stay on your device, and nothing about what you say or how you feel is ever sold, shared for advertising, or used to profile you.

1. A one-minute summary

2. Data stored on your device (not sent to us)

Everything below stays local to your device and is never transmitted to us in the course of normal use:

This data is stored in an encrypted local database (SQLCipher) with the encryption key held in your device's secure storage (Android Keystore / iOS Keychain). If you enable the optional app lock, access is further gated behind your device biometrics or screen lock. Biometric verification happens on your device through the operating system; we never receive your fingerprint, face data, or PIN.

You can permanently erase all of this at any time via Settings → Delete everything.

3. Data that leaves your device — only with your consent

Gloam works fully offline. Two optional features send data to our backend, and each is off until you turn it on.

3.1 Cloud transcription (optional)

If you choose cloud transcription in Settings, the audio of an entry is uploaded through our backend to OpenAI (using OpenAI's Whisper whisper-1 speech-to-text model) to be converted into text. If you instead keep on-device transcription (the private default), your audio is transcribed locally and never leaves your phone.

3.2 Reflections (optional)

If you enable "Send transcripts for reflection" in Settings, the text transcript of an entry is sent through our backend to OpenAI (using OpenAI's gpt-4o-mini model) to generate a short written reflection and a follow-up question. Your audio is never sent for reflections — only the text.

You can turn either feature off at any time in Settings. When off, no audio or transcript is sent for that purpose.

3.3 Protection at this third party

OpenAI processes the data described above only to fulfil your request (transcription or reflection, respectively), under contractual terms that prohibit using it to train OpenAI's models and require it to protect the data with safeguards equivalent to those described in this policy. We selected OpenAI on that basis and review its published privacy and API-use terms before relying on it.

4. Analytics and app operation

To keep Gloam reliable and understand how it's used (including to measure the effectiveness of our own advertising), we use a small set of Google/Firebase services:

These providers process data as described in their own privacy policies:

5. Subscriptions and payments

Gloam offers an optional Gloam PRO subscription. Purchases are handled entirely by the app store (e.g. Google Play). We do not receive or store your payment card details. The app store shares with us only the information needed to grant your entitlement (e.g. whether an active subscription exists). Please refer to your app store's privacy policy for how it processes payments.

6. Notifications

If you enable daily reminders (or the app schedules periodic report nudges), these are local notifications generated on your device using your chosen time and time zone. They are not sent through a server and involve no message about your journal content.

7. What we do NOT do

8. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on:

9. Your rights

Under the GDPR and Romanian data-protection law, you have the rights to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. Because most of your data is stored only on your device:

To exercise any right regarding data we act as controller for, or to ask a question, contact us at advitsolutionsro@gmail.com. You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP) — https://www.dataprotection.ro.

10. International transfers

Some of our service providers (e.g. Google/Firebase and the AI/transcription providers used by our backend) may process data on servers outside the European Economic Area. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Data retention

12. Children

Gloam is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country) to use the App. We do not knowingly collect data from children under this age.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Continued use of the App after changes take effect means you accept the revised policy.

14. Contact

ADV IT Solutions SRL
Email: advitsolutionsro@gmail.com
Romania