Glass Keep Privacy Policy

Information the app handles

Content and local state. The app stores and processes your notes, checklists, images, drawings, related metadata, pending offline changes, and recovery copies so you can create, view, edit, and synchronize your content.

Account and connection information. The app uses your server address, username, password, authentication tokens, account details, and optional Cloudflare Access credentials to connect and sign in. It may retain your password on the device to authenticate again when needed.

Synchronization and sharing

When you connect, the app sends authentication information, content, and changes to your configured server and receives updates from it. Synchronization can also run in the background. The server and its network infrastructure receive connection information, such as your IP address, as part of these requests.

Your server operator and its hosting or infrastructure providers may be able to access information processed by that server. Shared notes are available to collaborators according to the server’s sharing controls. The operator’s access, logging, backup, and retention practices depend on the server you use.

Photos and camera

The app uses Android’s system image picker to access images you select. To take a photo, it opens a camera app and grants access to the individual output file. Glass Keep does not request broad storage access or direct camera permission. Images you add become part of your content and may be synchronized to your configured server, together with their file names.

Storage and security

Saved credentials are held in encrypted device preferences protected using Android Keystore. Notes, media, and recovery copies are held in the app’s private database and files. Those content files do not have additional app-level encryption.

Server connections use HTTPS. This protects data in transit, but Glass Keep does not provide end-to-end encryption: the configured server can read the information it processes. Protect your device and credentials and use a server operator you trust.

The app disables Android’s standard app backup setting. Device manufacturers’ transfer or migration behavior may vary, so this is not a guarantee that no device-to-device copy can occur.

Retention and deletion

Local content is retained to provide offline access and synchronization. Signing out clears saved credentials and cached synchronized data, but unresolved offline changes and recovery copies can remain. The app’s explicit discard action removes the account’s local data, including those retained copies.

Deleting a note requests deletion from the configured server. Local recovery copies may remain until discarded. Clearing the app’s storage or uninstalling it removes its local app data; it does not request deletion of your server account or server content.

Server records, logs, and backups are controlled by your server operator. Contact the operator for its retention periods and for deletion of server content or your account. Removing data locally does not necessarily remove server copies or copies already received by collaborators.

Advertising and diagnostics

The Android app does not include advertising, analytics, or third-party crash-reporting SDKs. Release builds disable network request logging in the app. Your server operator may maintain its own operational logs.

Accounts and questions

The Android app signs in to an existing server account. It does not provide account registration or an in-app account deletion control. Account administration and server-side deletion are handled by your server operator.

For questions about this policy or how the Android app handles your information, contact admin@gpf2ez.com. For questions about a separately operated server, contact that server’s operator.

Changes to this policy

The policy may be updated as the app’s data practices change. The effective date above identifies the current version.