Privacy Policy
Last updated 8 September 2026
The short version. Afterglance has no app account or sign-up. Your collection, taste profile, looking history, and location stay on your phone. A painting conversation must travel to our AI provider to receive a reply. We also collect limited pseudonymous product events to understand failures and improve the app and quiz. A web purchase is handled by Stripe. The confirmation page and our welcome email provide links to activate access and manage the subscription.
Who we are
Afterglance is an independent app made and operated by Grappes LLC. If you have a question about anything here, write to support@afterglance.app.
No account, no profile
You do not create an account to use the app, and we do not ask for your name or phone number. If you buy Patron on the web, the checkout asks for an email so we can send your receipt, the link that unlocks your purchase, and the link that cancels it. That address is used for those emails and for your payment record; it is not used to build your taste profile. Deleting the app removes what it remembered locally, but does not cancel a subscription or erase records a payment provider must retain.
What stays on your device
The following is stored only in the app's private storage on your phone. We never receive it, and it is never uploaded:
- Which artworks you met, stayed with, dismissed, or returned to
- How long you looked
- The taste profile the app builds from that behaviour
- Cached artwork images and details, so the app works offline
- Your notification schedule
Location
If you allow it, Afterglance reads your approximate location once, in the foreground, to sort museums by how far they are from you. The distance is calculated on your device. Your coordinates are never transmitted to us or to anyone else. You can refuse, and the app works fine — the museums simply appear unsorted. You can revoke the permission at any time in your phone's Settings.
Conversations with paintings
When you talk with a painting, the message you type is sent to our server, which forwards it — together with public facts about that artwork, such as its title, artist, and materials — to Anthropic, whose Claude model writes the reply in the painting's voice. This is the only feature that sends anything you write off your device.
- We do not store your messages. Our server passes them through and keeps no copy. Anthropic processes them to produce the reply and may retain them briefly for safety purposes under its own privacy policy.
- Your message is not linked to your identity, because we do not have one for you.
- As with any request to any server, your IP address reaches ours. We do not store it. We keep a shortened one-way hash of it for up to 48 hours, purely to stop one person from flooding the service.
- Please do not type sensitive personal information into a conversation with a painting. It has nowhere useful to put it.
Subscriptions
Patron subscriptions may be sold through Apple, Google Play, or our web checkout and are managed for us by RevenueCat. RevenueCat receives a pseudonymous app identifier, purchase and entitlement information, and basic device and country information. A web checkout is processed for us by Stripe, which receives your email and card details in order to take the payment, send receipts, and run your subscription settings page; RevenueCat is then told that the subscription exists so the app can unlock. Grappes LLC never receives your full card number or security code. Store and payment providers keep transaction records under their own policies and legal duties.
Purchase emails and recovery
We use Resend to send the welcome email to your checkout address, with links to activate Patron and manage your subscription. It receives your address and that email’s content. Our payment support log records subscription identifiers, email, plan, amount, and delivery or activation failures so we can resolve purchase problems. The browser tab saves the current checkout attempt and access link to recover after a refresh or bank redirect. The app temporarily stores a pending activation link to retry after a connection failure. Access and management links are private: anyone holding a link can use it.
Artwork images
The app includes an offline editorial collection and may request additional public artwork metadata through our feed service. Painting images are fetched from Wikimedia Commons, which receives your IP address as part of the request, as any image host would, and handles it under the Wikimedia Foundation's privacy policy.
Analytics and crash reports
The app sends limited product and reliability events to our first-party analytics endpoint. These can include a random installation and session identifier, the screen or action, an artwork identifier, timing, purchase outcome, and technical error details. The website quiz sends its room, answer outcome, result type, offer and checkout steps with a random identifier that lasts only for the browser tab. Quiz progress also stays in that tab's session storage so an accidental refresh does not erase it. We do not send conversation text, coordinates, your taste profile, or payment details to analytics. Analytics data is used for product decisions, fraud prevention, and debugging; access is limited to the operator of Afterglance.
Advertising on the website
When we advertise Afterglance, the website (including the quiz) asks whether you allow advertising measurement before using the Meta Pixel and Meta's Conversions API so that Meta can measure whether an ad led to a visit or a purchase. Meta may receive: the pages you visited on our site, quiz and checkout milestones, a purchase amount, technical identifiers set by Meta's own cookies, your IP address, and — when you start checkout after allowing advertising measurement — a one-way hash of your email address. Meta never receives your email in readable form, and your card details are entered inside our payment provider's own frame, which the pixel cannot read. This is used for ad measurement and to find similar audiences, under Meta's privacy policy. The app contains no advertising SDKs and none of this applies inside it. You can decline or change your choice using Advertising preferences in the quiz footer. We also respect Global Privacy Control and Do Not Track. Declining does not block the quiz, payment or access. Essential checkout storage and limited first-party reliability events remain available.
Notifications
Notifications are scheduled and delivered by your own device. Afterglance has no push server and holds no push token, so no notification you receive has travelled through us.
Children
Afterglance is not directed at children. Its collection includes works of classical art that depict the nude human figure, as museums do. Please see the age rating in the store where you downloaded the app.
Your choices
- Delete everything: uninstall the app. All local data is removed with it.
- Stop sharing location: revoke the permission in your phone's Settings.
- Stop sending messages: do not use the conversation feature.
- Manage your subscription: through Apple, Google Play, or — for a web purchase — the Manage or cancel link in your welcome email, depending on where you bought it.
If you have a privacy request about analytics or a web purchase, write to us with enough information to locate the relevant record. We may need to direct payment-record requests to the store or payment provider that controls them.
Changes
If this policy changes, the date at the top changes with it. Material changes will be announced in the app.