Effective Date: September 26, 2026
GLOME ("we," "our," or "us") operates the private members community and application landing page located at [Insert Website URL] (the "Site"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, submit an application, or join our community of lifestyle trailblazers.
Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or submit your application.
1. Introduction
Welcome to Glome ("Glome," "we," "us," or "our"). Glome is a private, members-only mobile application designed for solo travelers and globally mobile professionals to discover destinations, plan trips, host and join curated experiences ("Circles" and "Plans"), and connect with like-minded members.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your information when you use the Glome mobile application and any related websites or services (collectively, the "Service").
By creating an account or using the Service, you confirm that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service. This Privacy Policy is incorporated by reference into our Terms of Service.
Contact: Building@glome.club
2. Who This Policy Applies To
This Privacy Policy applies to:
Applicants who submit information to join Glome (whether accepted, waitlisted, or rejected)
Approved members of Glome
Free, Black, and Global tier subscribers
Anyone who interacts with the Service, including through referrals
Age requirement. You must be at least 18 years old to use Glome. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it promptly. See Section 13.
3. Information We Collect
We collect only what we need to operate the Service, keep it safe, and meet our legal obligations.
3.1 Information You Provide During Sign-Up and Onboarding
Account credentials: mobile phone number, one-time password (OTP) verification, and, if you choose, your Google account identifier (via Google Sign-In) or your Apple ID (via Sign in with Apple, including the relay email address Apple provides if you choose to hide your email).
Identity details: full name, gender, date of birth, and email address. We verify that you are 18 years of age or older during sign-up.
Location: your primary (home) city.
Professional background: profession or industry category (for example, Founder, Investor, Creative).
Social presence: Instagram, X (Twitter), or LinkedIn handles and profile URLs that you choose to provide.
Profile photos: up to six photos that you upload from your device camera roll or capture with the camera.
Bio: a short personal description (up to 300 characters).
Travel preferences: destinations you wish to visit, cities you visit frequently, travel frequency, preferred travel class, and preferred accommodation style.
3.2 Identity Verification and Biometric Notice ("Liveness Check")
To protect the community, we require a real-time selfie verification. Using your device's front-facing camera, we capture a short live image and perform on-device blink detection to confirm that a real person is present. We store the resulting selfie image and the verification result on our servers.
Purpose. We use this image solely to:
Verify that the account is operated by a real person.
Match against the profile photos you submit.
Prevent fraud, duplicate accounts, and impersonation.
Biometric notice (Illinois BIPA, Texas CUBI, Washington H.B. 1493, and similar laws).
We process facial geometry only transiently and on-device for blink/liveness detection. We do not create or store a persistent biometric template or facial-recognition vector on our servers.
The selfie image itself is stored encrypted at rest and is treated as biometric information under applicable U.S. state laws.
We do not sell, lease, trade, or otherwise profit from biometric information.
We do not disclose biometric information to any third party except (i) the sub-processors listed in Section 7.2 that host our infrastructure, (ii) where required by law, or (iii) with your written consent.
Retention. The selfie image is retained for the lifetime of your account and deleted within 30 days of account deletion, or sooner upon verified request. The transient on-device face-geometry data is discarded as soon as the liveness check finishes.
By completing the liveness check, you provide written consent to the collection, storage, and use of this biometric information for the purposes above.
3.3 Information You Generate by Using the Service
Trips and Plans you create: destination, dates, time, guest limit, category (for example, Wine, Art, Sports), description, and photos.
Circles you create or join: circle name, description, photos, member list, payment status (if the circle has a paid component), and chat messages.
Messages: direct messages, Plan group chats, and Circle group chats, including text, timestamps, read receipts, and any media you choose to send. Messages are delivered in real time over an authenticated, encrypted WebSocket connection.
Bookmarks: Circles, Plans, and Places you save for later.
Connections and discovery activity: the profiles you view, swipe through, or interact with in the People tab and the Places you explore.
3.4 Location Information
City-level location: the city you select as your primary city.
Precise location (latitude and longitude): collected only while you are actively using the app and only when you grant the "While Using the App" permission. We use it for map-based features in the Places and People tabs and for distance-based matching.
Periodic refresh while the app is in use: while you have the app open or in the foreground, we refresh your last known precise location approximately every three hours so we can show you locally relevant members, places, and experiences. We do not track your location in the background and do not request "Always Allow" location permission.
You can revoke location permission at any time in your device settings. Some features (map-based discovery, distance-based matching) will not work without it.
3.5 Payment Information
Paid features in Glome (for example, Glome Black and Glome Global membership tiers, paid Circles, and host fees for Plans) are processed exclusively through the mobile platform's official billing system:
Apple In-App Purchase on iOS, operated by Apple Inc.
Google Play Billing on Android, operated by Google LLC.
Your payment card number, CVC, and bank-account credentials are entered into and handled by Apple or Google. Glome never sees or stores your full payment card details. From the platform we receive only the transaction identifier, product identifier, purchase and renewal dates, country of purchase, and subscription status, which we use to unlock the corresponding features on your account, manage renewals, apply referral credits, and meet our tax and accounting obligations.
We retain transaction and tax records for the period required by applicable tax and financial-services laws (typically up to seven years). We do not use any third-party payment processor outside of the platform billing systems described above.
3.6 Referral Information
If you enter an invite code, we record the code, the referrer's account, and the link between you and the referrer so we can credit successful referrals. Glome does not access your phone contacts to identify, match, or invite people.
3.7 Device and Technical Information
Device model, operating system and version, app version, language, time zone.
Mobile network and general connectivity information.
Push notification token issued by Apple Push Notification service (APNs) and/or Firebase Cloud Messaging (FCM), used to deliver notifications.
IP address (collected by our backend and by infrastructure providers for security and abuse prevention).
In-app events (screens viewed, taps, sessions) used to improve product quality and detect abuse. These events are stored on our own backend; we do not use third-party analytics or advertising SDKs.
3.8 Communications with Us
When you contact Building@glome.club, our in-app support, or respond to surveys, we keep the contents of those messages and any attachments for as long as needed to respond and to maintain a service record.
4. Information We Do Not Collect
We do not access your phone contacts.
We do not access your microphone.
We do not access HealthKit, Google Fit, fitness, or health information.
We do not access your calendar.
We do not access SMS or call logs.
We do not collect precise location in the background.
We do not use third-party advertising identifiers (IDFA / Android Advertising ID) and do not display third-party advertising in the Service.
We do not use your personal information, messages, or photos to train artificial-intelligence models for ourselves or any third party.
We do not knowingly collect data from anyone under 18.
5. How We Use Your Information
We use your information to:
Create and manage your account, review your membership application, and operate the waitlist.
Verify identity and prevent fake, duplicate, or fraudulent accounts.
Match you with relevant members, Circles, Plans, and Places based on city, travel preferences, profession, and activity.
Deliver messages, notifications, and updates that are relevant to your membership.
Process payments, manage subscriptions, and apply referral credits.
Provide customer support and respond to your requests.
Detect, investigate, and prevent fraud, harassment, spam, security incidents, and violations of our Terms of Service.
Comply with legal obligations, including responding to lawful requests from public authorities.
Improve and develop the Service, including measuring feature performance and fixing bugs.
We do not sell your personal information. We do not "share" it for cross-context behavioral advertising as those terms are defined under California law.
6. Legal Bases for Processing (EEA, UK, Switzerland)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on these legal bases:
Performance of a contract — to provide the Service you signed up for.
Consent — for camera, photo library, precise location, push notifications, and identity verification (selfie / biometric processing). You may withdraw consent at any time.
Legitimate interests — to keep the Service safe, prevent fraud, improve our product, and operate our business, balanced against your rights.
Legal obligation — to comply with applicable laws, including tax, anti-money-laundering, and lawful-disclosure obligations.
7. How We Share Your Information
We share information only as described below. We never sell personal information, and we never share it for cross-context behavioral advertising.
7.1 With Other Members
The following profile information is visible to other members in contexts where you are discoverable (for example, the People tab, Circles, Plans, Messages):
Your first name, gender, profession, primary city, and profile photos.
Your bio and any social handles you have added to your profile.
The travel preferences and city interests you have entered.
The Circles and Plans you have created or joined (within those groups).
Messages you send to a member, Circle, or Plan are visible to recipients.
You control what appears on your profile by editing it in the Manage Account screen.
7.2 With Service Providers (Sub-Processors)
We share information with vetted third parties that help us operate the Service. They are contractually required to use the information only for the purposes we specify and to maintain industry-standard security.
Apple Inc.
Purpose: Sign in with Apple; In-App Purchase processing for iOS digital subscriptions and paid features; Push Notification service (APNs).
Data shared: Apple account identifier (including private relay email if you choose), transaction identifiers, subscription status, push token.
Google LLC — Google Play Billing
Purpose: In-App Purchase processing for Android digital subscriptions and paid features.
Data shared: Transaction identifiers, subscription status.
Google LLC — Sign-In, Maps, Places
Purpose: Google Sign-In; map tiles and place search.
Data shared: Google account identifier, location queries, map interactions.
Firebase Cloud Messaging (Google LLC)
Purpose: Push notification delivery.
Data shared: Device push token, basic device metadata.
Cloud hosting, storage, and database providers
Purpose: Backend hosting, file storage (including profile photos and verification selfies), real-time chat delivery.
Data shared: All data necessary to operate the Service.
A current list of significant sub-processors is available on request at Building@glome.club.
7.3 For Legal Reasons
We may disclose information if we believe in good faith that disclosure is required to:
Comply with a court order, subpoena, search warrant, or other legal process.
Enforce our Terms of Service or investigate possible violations.
Protect the rights, safety, or property of Glome, our members, or the public.
Prevent or address fraud, security, or technical issues.
7.4 Business Transfers
If Glome is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections. We will notify you in-app or by email of any change in ownership or use of your information.
7.5 With Your Consent
We may share information for any other purpose with your explicit consent.
8. International Data Transfers
Glome operates globally. Your information may be transferred to, stored, and processed in countries other than the one in which you live, including the United States, India, and other jurisdictions where our service providers operate.
Where required by law, we use appropriate safeguards for international transfers, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and equivalent mechanisms in Switzerland.
9. Data Retention
We keep your information for as long as your account is active and for the period needed to provide the Service. After you delete your account:
Profile information (name, bio, photos, travel preferences): deleted from active systems within 30 days.
Liveness verification selfie and verification result: deleted from active systems within 30 days.
Chat messages: remain visible to other participants of the conversation as part of their own message history, but are dissociated from your deleted profile.
Transaction, billing, and tax records: retained as required by tax and financial-services laws (typically up to 7 years).
Fraud-prevention, security-investigation, or legal-defense records: retained in restricted systems only as long as necessary.
Backup copies: purged on our standard backup rotation cycle (no later than 90 days after deletion from active systems).
10. Your Privacy Rights
Depending on where you live, you may have the following rights:
Access — request a copy of the personal information we hold about you.
Correction — ask us to correct inaccurate or incomplete data. Most fields can be updated directly in the Manage Account screen.
Deletion — request that we delete your personal information. You can delete your account at any time directly inside the app from Profile → Manage Account → Delete Account. This deletes your account and personal data subject to Section 9.
Portability — request a copy of your data in a structured, machine-readable format.
Objection or restriction — object to, or ask us to restrict, certain processing.
Withdraw consent — where we rely on consent, you may withdraw it at any time (this does not affect the lawfulness of prior processing).
Lodge a complaint — with your local data protection authority. In the EU, you may contact your national supervisory authority; in the UK, the ICO; in Switzerland, the FDPIC.
To exercise any of these rights, email Building@glome.club from the email address on your Glome account, or use the in-app account deletion option. We will respond within the timeframes required by applicable law (typically 30 days, extendable by an additional 60 days where permitted).
10.1 California Residents (CCPA / CPRA)
If you live in California, you have the right to:
Know what categories and specific pieces of personal information we collect, use, disclose, and (if applicable) sell or share.
Request deletion of personal information we have collected from you.
Request correction of inaccurate personal information.
Limit the use and disclosure of sensitive personal information (we do not use sensitive personal information beyond the purposes permitted by the CPRA without your consent).
Opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CPRA.
Be free from discrimination or retaliation for exercising these rights.
We honor Global Privacy Control (GPC) signals received through supported browsers as a valid opt-out of sale/sharing where applicable.
Submit California requests via Building@glome.club. You may designate an authorized agent to make a request on your behalf; we will require reasonable verification.
We do not knowingly collect or "sell" the personal information of consumers under 16.
10.2 Other U.S. State Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have rights substantially similar to those described in Section 10.1, including the right to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, or certain profiling. We do not engage in targeted advertising or in profiling that produces legal or similarly significant effects. To exercise these rights, contact Building@glome.club. You may appeal a denial of your request by replying to our decision; we will respond within 60 days.
10.3 Brazil (LGPD), Australia, Canada, and Other Jurisdictions
We honor equivalent rights under the Brazilian LGPD, the Australian Privacy Act, Canadian PIPEDA and provincial laws, and similar regimes. Contact Building@glome.club to exercise these rights.
11. Security and Breach Notification
We use technical and organizational measures designed to protect your information, including:
TLS encryption of data in transit.
Encryption at rest for sensitive information, including verification selfies.
Access controls limiting employee access to personal data on a need-to-know basis.
Authenticated WebSocket connections for real-time chat.
Regular review of our systems for vulnerabilities and timely patching.
No internet transmission or storage system is fully secure. We cannot guarantee absolute security, but we work hard to protect your information. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the appropriate supervisory authority without undue delay and within the timeframes required by applicable law (for example, 72 hours under the GDPR).
12. Permissions on Your Device
You will be asked to grant the following permissions when relevant features are first used. You can change these at any time in your device settings, and the corresponding feature will continue to work in a degraded mode or be disabled.
Camera — for profile photos, Plan/Circle photos, and the liveness verification selfie.
Photo Library — to select existing photos for your profile, Plans, or Circles.
Location (While Using the App) — for map-based discovery, distance-based matching, and city-relevant recommendations. We do not request "Always Allow" location.
Notifications — to deliver real-time alerts about messages, Circle activity, Plan updates, and membership status. You can disable notifications at any time in your device settings or in the Glome app's notification preferences.
13. Children's Privacy (COPPA and Similar Laws)
The Service is intended for adults aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18, and we do not knowingly create profiles for or market to children. We comply with the U.S. Children's Online Privacy Protection Act (COPPA), the UK Children's Code, and equivalent frameworks. If you are a parent or guardian and believe a minor has provided us with personal information, please contact Building@glome.club so we can delete it.
14. Third-Party Links and Services
The Service may contain links to third-party websites, apps, or services (for example, links to social profiles you add). This Privacy Policy does not apply to those third parties. We encourage you to read their privacy policies before providing any information.
15. Automated Decision-Making
We use automated systems to detect fraud, spam, and abuse, and to rank discovery results in the People, Places, and Circles tabs. These systems do not produce legal or similarly significant effects on you. You may contact Building@glome.club to ask for human review of any account decision that materially affects your access to the Service.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app, by email, or by another reasonable method, and update the "Last Updated" date at the top of this policy. For material changes, we will provide at least 14 days' notice before the change takes effect. Your continued use of the Service after the update means you accept the updated policy. Prior versions are available on request.
17. Contact Us
If you have questions, concerns, or requests about this Privacy Policy or how we handle your information, please contact:
Glome Email: Building@glome.club
For privacy-specific requests (access, deletion, correction, portability, biometric data, California / EU / state rights), please include "Privacy Request" in the subject line so we can route your message promptly.