Privacy Policy

What data Glance handles, how, and why

Pragmatico collects nothing. Glance has no backend, no analytics, no advertising, no crash reporting SDKs, and no user accounts. We have no technical means to see your translations, your images, your API key, or anything else you do in the app. We do not use any identifiers to track you or your device, and we do not share data with data brokers — we never possess your data in the first place.

The app itself handles three kinds of data. Each one is either kept on your device or sent, with your permission, to the AI provider you chose:

• Text you ask Glance to translate. Collected only when you act: typing or pasting it in the app, sharing it to Glance from the iOS share sheet, selecting it with the system translation feature, or tapping Translate in the Glance keyboard. Used to produce the translation you asked for, and saved to your on-device History so you can find it again.
• Photos and screenshots you translate. Collected only when you pick one with Apple's system photo picker or take one with the camera. Used to extract the text to translate — read on your device first, and sent to your provider only if on-device reading fails.
• Screen regions you capture (Mac only). Collected only when you start a capture and drag a box: Glance reads the pixels inside that rectangle and nothing else. Used exactly like a photo — text read on your Mac first, image sent to your provider only if on-device reading fails. See section 06.
• Your API key and settings. Collected when you enter them. The key is used to authenticate you to your provider; settings record your language, model, and retention choices.

Those are all the uses. Glance does not use any of this data for advertising, profiling, tracking, recommendations, or training models — we operate none.

Data processed on your device

The following stays on your device and under your control:

• Translation history. Recent translations (and, for screenshot translations, the image) are stored locally in the app's private container so you can find them again. History is capped, screenshot images are excluded from device backups and are automatically deleted after a retention period you choose in Settings, and you can clear history at any time.
• Your API key. Stored only in the Keychain on your device (iOS or macOS). It is sent only to the provider it belongs to (e.g., OpenRouter) to authenticate your requests.
• Settings. Language preferences, model choices, and similar options are stored locally.
• On-device text recognition. When you translate a photo, a screenshot, or a captured screen region, Glance first reads the text using Apple's on-device Vision framework. In this default path, the image never leaves your device.
• Installed keyboard and system languages. Read locally only to rank language choices; never transmitted.

Data sent to third parties — at your direction

Glance is a "bring your own key" app. Translation is performed by a third-party AI provider that you choose and pay directly. Glance asks for your explicit permission before the first request leaves your device, and sends nothing until you grant it. The following is then sent from your device to that provider:

• Text you translate — typed, pasted, shared via the share sheet, selected via the system translation feature, composed in the Glance keyboard, or read out of a photo or captured screen region.
• Images, only as a fallback. If on-device text recognition cannot read an image — a photo, a screenshot, or a screen region you captured on a Mac — Glance uploads that image to your configured vision model to extract the text. The app tells you when this happens.

Currently supported provider: OpenRouter (openrouter.ai), which routes requests to the AI model you select. That is the only recipient — Glance sends your content to no one else, and there are no ad networks, analytics vendors, or data brokers in the path. Your use of OpenRouter, and of the downstream model providers it routes to, is governed by their terms and privacy policies as well as this one. Review them before use: OpenRouter Privacy Policy.

Equivalent protection. We integrate a provider only after reviewing its published privacy commitments, and only if they protect your content at least as well as this policy does: content processed to fulfil your request, never sold, and never used to build advertising or tracking profiles. OpenRouter is bound by its published privacy policy, and — because the account is yours — it also gives you direct control over how far your data travels: your OpenRouter privacy settings let you refuse routing to any model provider that may train on your inputs, and let you filter providers by their data-retention policy. We will not add a provider that takes those controls away from you. Providers that receive your content act on your instruction, under your own account with them.

Do not translate content you are not permitted to transmit to a third party (for example, confidential or regulated information), as translation inherently requires sending it to your chosen provider.

The Glance keyboard (iPhone and iPad)

The Glance Translate keyboard is designed to be minimally invasive:

• Typing works without Full Access and sends nothing anywhere.
• Full Access is required only for the Translate action, because translation needs network access to reach your provider.
• The keyboard sends only the draft you explicitly tap Translate on. It sends nothing per keystroke, does not read text from the app you are typing in, and does not save drafts or output to History.

Camera and photos (iPhone and iPad)

Camera access is requested only when you choose to photograph text, and each capture is user-initiated. Photo selection uses Apple's system photo picker, which lets you share individual photos without granting Glance access to your photo library. Photos are processed as described in sections 2 and 3 and are never used for any other purpose.

Screen capture (Mac)

On the Mac, Glance can translate a region of your screen. macOS asks for Screen Recording permission the first time you use it, and grants it to Glance until you revoke it in System Settings › Privacy & Security.

• Only when you ask. A capture happens only after you trigger it — the keyboard shortcut or the menu-bar item — and only for the rectangle you then drag. Glance does not record your screen in the background, does not watch other apps, and takes nothing outside that rectangle.
• Read on your Mac first. The captured region is text-recognised locally. It reaches your AI provider only if that fails, exactly like a photo (section 3).
• Nothing else is captured. No audio, no video recording, no window titles or keystrokes from other apps.
• Storage. A captured region is kept only in your local History, where the retention period you choose in Settings deletes the image automatically, and where clearing History removes it immediately.

Your rights and choices

Because we do not collect or hold any personal data, there is nothing for us to access, correct, delete, sell, or port on your behalf:

• To delete local data: clear History in the app, or delete the app. On iPhone and iPad this also removes settings and the app's Keychain entries; on a Mac, remove your API key in Settings first, because macOS keeps Keychain items after an app is deleted.
• For data sent to your AI provider: exercise your rights directly with that provider (e.g., OpenRouter), which acts on your instruction under your account.
• You can stop all third-party data flows at any time: switch off data sharing in Settings › Privacy, remove your API key, or delete the app.

To the extent privacy laws such as the GDPR or CCPA apply, you direct the processing performed by your chosen provider through your own account with them; Glance is the software you use to do so, and we act as neither a data controller nor a data processor for that content.

Children

Glance is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect data from anyone — including children.

Security

Your API key is stored in the Keychain on your device. All network communication with providers uses HTTPS (TLS). No security measure is perfect; you are responsible for keeping your device and your provider account credentials secure.

Changes to this policy

We may update this policy as the app evolves (for example, if new providers are added). Material changes will be reflected by a new effective date, and the current version will always be available at this URL. Continued use of Glance after a change constitutes acceptance of the updated policy.

Contact

Questions about this policy: [email protected]