Gloss Daily

Privacy Policy

Last updated: 27 June 2026

Gloss Daily is built to be quiet and respectful. We collect only the minimum we need to run the app and keep your words safe across your devices. We use no trackers, no advertising, and no analytics — and we never sell your personal data. This policy explains, in plain English, exactly what we hold, why we hold it, the legal grounds we rely on, who processes it on our behalf, and the choices and rights you have.

The short version

The app works straight away using an anonymous account — no name or email required.
Signing in is optional; only then do we receive your email and name.
Your words, tags, notes, and preferences are stored on your device and synced to our cloud database (Google Firebase).
No advertising, no analytics, no tracking, no sale of your data.
You can export or delete everything at any time.

About This Policy & Who We Are

This policy applies to the Gloss Daily mobile app for iOS (the “app”) and to this privacy page. The person responsible for your personal data — the “data controller” under UK and EU data protection law — is Cheuk (“we”, “us”, “our”), the operator of Gloss Daily, based in the United Kingdom.

If you have any questions about this policy or how we handle your data, you can reach us at any time at cheuk.coding@gmail.com.

Information We Collect

We only collect what the app needs to work for you. In practice, this falls into a small number of categories.

Account identifier (automatic)

When you first open the app, it creates an anonymous account for you — a randomly generated account ID. This lets the app work instantly with no sign-up. At this stage we do not collect your name or email address; the random ID is not linked to your real-world identity.

Content you create

The information you put into the app:

Words you save and custom words you add yourself
Tags and short notes you attach to words
Your preferences, such as reading level and reminder time

Because this content is stored as records under your account ID, those records may include basic technical details inherent to storing data, such as the time an item was created or last changed.

Sign-in details (only if you choose to sign in)

Signing in with Sign in with Apple or Sign in with Google is optional. It links your data to that identity so your words sync across your devices. Only if you sign in do we receive your email address and your name (if the provider shares it). With Sign in with Apple you can choose Hide My Email, in which case we only ever see a private Apple relay address rather than your real one.

What we do NOT collect

Precise location
Contacts
Photos or your photo library
Health or fitness data
Payment or financial information
Advertising identifiers (e.g. the iOS IDFA)
Analytics, tracking, or crash-reporting data — we use no such SDKs
Push notification tokens (the daily reminder is on-device only)
Special category data (e.g. data about health, race, religion, or beliefs)

How We Use Your Information

We use the information above only to provide the app to you:

To create and maintain your account (including the anonymous account)
To store and sync your words, tags, notes, and preferences
To restore your content across your devices when you sign in
To deliver the once-a-day on-device reminder, if you turn it on
To keep your account and data secure and to prevent misuse
To respond to your requests and support enquiries

We do not use your information for advertising, profiling, or any form of automated decision-making that produces legal or similarly significant effects.

Legal Bases for Processing

If you are in the United Kingdom or the European Economic Area, the UK GDPR and EU GDPR require us to have a lawful basis for each use of your data. We rely on the following:

Performance of a contract (Art. 6(1)(b)) — to provide the app you have asked to use: creating your account, and storing and syncing your words, tags, notes, and preferences across your devices.
Consent (Art. 6(1)(a)) — for optional features you switch on yourself: signing in to link your identity, and enabling the on-device daily reminder (which uses the notification permission you grant). You can withdraw consent at any time by signing out or turning the reminder off.
Legitimate interests (Art. 6(1)(f)) — to keep accounts and data secure, prevent abuse, and maintain and improve the reliability of the app. We balance these interests against your rights and freedoms.

Service Providers & Sub-processors

We do not run our own servers. We use a small number of trusted providers who process data on our behalf, under contract and only on our instructions:

Google Firebase — our data processor for Firebase Authentication (which manages accounts, including anonymous sign-in) and Cloud Firestore (the cloud database that stores your content under your account ID).
Apple — only if you choose Sign in with Apple, Apple processes that sign-in to verify your identity and, where you use “Hide My Email”, provides the private relay address.
Google Sign-In — only if you choose to sign in with Google, Google processes that sign-in to verify your identity.

We do not sell your personal data, and we do not share it with third parties for their own marketing. You can read these providers’ privacy policies here: Apple’s Privacy Policy, Google’s Privacy Policy, and Firebase’s Privacy and Security information.

How & Where Your Data Is Stored

Your content is stored in two places, so you don’t lose it:

On your device — locally, so the app works quickly and offline.
In our cloud database — Cloud Firestore (Google Firebase), under your account ID, so your words sync across your devices.

Data is transmitted between the app and our cloud database over encrypted connections (HTTPS/TLS). See International Users & Transfers for where this data may physically be processed.

Cookies & Similar Technologies

The app does not use tracking cookies or advertising technologies. It stores data on your device only to make the app function (for example, keeping your words available offline) — not to track you.

This privacy page itself sets no cookies and runs no analytics or third-party scripts. The only external request it makes is to load the Google Fonts used for its typography.

Data Retention

We keep your data only for as long as your account exists — that is, until you delete your account or ask us to delete it (see Deleting Your Account & Data). When you delete your account, your associated data is removed from our cloud database; residual copies in routine technical backups are overwritten in the normal course of operations within a reasonable period.

Signing out does not delete your data — it simply returns the app to a fresh anonymous state.

Your Rights & Choices

You are in control of your data. Within the app you can access, edit, or export the words, tags, and notes you’ve created, turn the daily reminder off, sign out, and delete your account entirely.

If you are in the UK or EU

Under the UK GDPR and EU GDPR you have the right to:

Access the personal data we hold about you
Rectify data that is inaccurate or incomplete
Erase your data (“right to be forgotten”)
Restrict or object to certain processing
Port your data — receive it in a portable format
Withdraw consent at any time, where we rely on consent

To exercise any of these, email cheuk.coding@gmail.com. We will respond within one month, as required by law, and we will not charge you for a routine request. You also have the right to lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ICO) — though we’d appreciate the chance to help first.

If you are in California

Under the CCPA/CPRA you have the right to know what personal information we collect and how we use it, to access and delete it, to correct inaccurate information, and not to be discriminated against for exercising these rights. We do not sell your personal information and we do not share it for cross-context behavioural advertising. You may use an authorised agent to make a request. To exercise these rights, contact us at the email above.

Deleting Your Account & Data

You can permanently delete your account and everything associated with it in one of two ways:

1. In the app

Go to Settings → Account → Delete account. This permanently removes your account and all associated data, both in the cloud and on your device.

2. By email

Email us at cheuk.coding@gmail.com and we will delete your account and data within 30 days.

Please note: signing out alone does not delete your data — it simply returns the app to a fresh anonymous state.

Security

We use reasonable technical and organisational measures to protect your data. These include encrypted transport over HTTPS/TLS between the app and our cloud database, and access rules in Firebase that restrict each account’s data to that account. We rely on Google Firebase’s established infrastructure for storage and authentication.

No method of transmission or storage is ever 100% secure. If a data breach occurs that affects your personal data, we will notify you and the relevant authorities where required by applicable law.

Children’s Privacy

Gloss Daily is not directed to children under 13 (or the minimum age of digital consent in your country, which can be up to 16 in parts of the EU), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

International Users & Transfers

Because we use Google Firebase, your data may be processed on Google servers located outside the United Kingdom and the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards required by UK and EU data protection law — such as the UK International Data Transfer Agreement (or Addendum), the European Commission’s Standard Contractual Clauses, or an adequacy decision — as implemented by our providers.

Changes to This Policy

If we update this policy, we will change the “Last updated” date at the top. For material changes, we will also note them inside the app. We encourage you to review this page from time to time.

Contact

This app is operated by Cheuk. If you have any questions about this policy, your data, or to exercise any of your rights, please get in touch:

Email: cheuk.coding@gmail.com
Data controller: Cheuk, operator of Gloss Daily
Region: United Kingdom

UK and EU users also have the right to complain to a data protection authority. In the UK this is the Information Commissioner’s Office (ICO), ico.org.uk.