Privacy Policy
Last updated 6 October 2026
The short version. Afterglance has no app account or sign-up. Your collection and taste profile are stored on your phone, and your coordinates stay on your phone. A painting conversation and a short summary of previous encounters with that painting travel to our AI provider to receive a reply. If you report an AI reply, we keep the selected reply for safety review for up to 30 days. We also collect limited pseudonymous product events to understand failures and improve the app and quiz. A web purchase is handled by Stripe. The confirmation page and our welcome email provide links to activate access and manage the subscription.
Who we are
Afterglance is an independent app made and operated by Grappes LLC. If you have a question about anything here, write to [email protected].
No account, no profile
You do not create an account to use the app, and we do not ask for your name or phone number. If you buy Patron on the web, the checkout asks for an email so we can send your receipt, the link that unlocks your purchase, and the link that cancels it. That address is used for those emails and for your payment record; it is not used to build your taste profile. Deleting the app removes what it remembered locally, but does not cancel a subscription or erase records a payment provider must retain.
What stays on your device
The app keeps the following in its private storage on your phone. We do not upload a copy of your collection or taste profile. Limited interaction events and, when you use AI conversations, an encounter summary are transmitted as described below:
- Which artworks you met, stayed with, dismissed, or returned to
- How long you looked
- The taste profile the app builds from that behaviour
- Cached artwork images and details, so the app works offline
- Your notification schedule
Location
If you allow it, Afterglance reads your approximate location once, in the foreground, to sort museums by how far they are from you. The distance is calculated on your device. Your coordinates are never transmitted to us or to anyone else. You can refuse, and the app works fine — the museums simply appear unsorted. You can revoke the permission at any time in your phone's Settings.
Conversations with paintings
When you talk with a painting, the message you type is sent to our server, which forwards it — together with public facts about that artwork, such as its title, artist, and materials — to Anthropic, whose Claude model writes the reply in the painting's voice. This is the only feature that sends anything you write off your device.
- We do not store ordinary conversations. Our server passes them through and keeps no copy. Anthropic processes them to produce the reply and may retain them briefly for safety purposes under its own privacy policy. If you choose to report an AI reply, we store that reply, the artwork identifier, a report identifier and the submission time for up to 30 days for safety review. A reported reply may include information you shared with the AI; the confirmation explains this before you submit. We do not attach the rest of the conversation or your account identifier to a report.
- To personalize a conversation, the app may include a short summary of your previous visits to that painting, time spent looking and the feelings you selected before and after an encounter. This summary is sent only when you use the conversation feature.
- Your message is not linked to your identity, because we do not have one for you.
- As with any request to any server, your IP address reaches ours. We do not store it. We keep a shortened one-way hash of it for up to 48 hours, purely to stop one person from flooding the service.
- Please do not type sensitive personal information into a conversation with a painting. It has nowhere useful to put it.
Subscriptions
Patron subscriptions may be sold through Apple, Google Play, or our web checkout and are managed for us by RevenueCat. RevenueCat receives a pseudonymous app identifier, purchase and entitlement information, and basic device and country information. A web checkout is processed for us by Stripe, which receives your email and card details in order to take the payment, send receipts, and run your subscription settings page; RevenueCat is then told that the subscription exists so the app can unlock. Grappes LLC never receives your full card number or security code. Store and payment providers keep transaction records under their own policies and legal duties.
Purchase emails and recovery
We use Resend to send the welcome email to your checkout address, with links to activate Patron and manage your subscription. It receives your address and that email’s content. Our payment support log records subscription identifiers, email, plan, amount, and delivery or activation failures so we can resolve purchase problems. The browser tab saves the current checkout attempt and access link to recover after a refresh or bank redirect. The app temporarily stores a pending activation link to retry after a connection failure. Access and management links are private: anyone holding a link can use it.
Artwork images
The app includes an offline editorial collection and may request additional public artwork metadata through our feed service. Painting images are fetched from Wikimedia Commons, which receives your IP address as part of the request, as any image host would, and handles it under the Wikimedia Foundation's privacy policy.
Analytics and crash reports
The app sends limited product and reliability events to our first-party analytics endpoint. These can include a random installation and session identifier, the screen or action, an artwork identifier, timing, purchase outcome, and technical error details. The website quiz sends its room, answer outcome, result type, offer and checkout steps with a random identifier that lasts only for the browser tab. Quiz progress also stays in that tab's session storage so an accidental refresh does not erase it. We do not send conversation text, coordinates, your taste profile, or payment details to analytics. Analytics data is used for product decisions, fraud prevention, and debugging; access is limited to the operator of Afterglance.
Advertising on the website
When we advertise Afterglance, the website (including the quiz) uses the Meta Pixel and Meta's Conversions API to measure ads and find similar audiences. In the United States, New Zealand and Canadian provinces and territories other than Quebec, we show an advertising notice and enable measurement unless you turn it off. In other locations, including Germany, Italy and Quebec, or when we cannot determine the location, we ask for your permission before enabling it. We use Cloudflare's approximate country and region information to choose this setting; this does not require access to your device's precise location. An earlier refusal remains effective. You can turn measurement off or change your choice using Advertising preferences in the quiz footer. We also respect Global Privacy Control and Do Not Track.
When advertising measurement is enabled, Meta may receive the pages you visit, quiz and checkout milestones, purchase amounts, Meta cookie identifiers, your IP address and browser information, and a one-way hash of your email address when you start checkout. Meta does not receive your email in readable form. Card details are entered inside our payment provider's frame. See Meta's privacy policy. Private access pages do not load the advertising pixel. The app contains no advertising SDKs. Turning measurement off does not block the quiz, payment or access. Essential checkout storage and limited first-party reliability events remain available.
Notifications
Notifications are scheduled and delivered by your own device. Afterglance has no push server and holds no push token, so no notification you receive has travelled through us.
Children
Afterglance is not directed at children. Its collection includes works of classical art that depict the nude human figure, as museums do. Please see the age rating in the store where you downloaded the app.
Your choices
- Delete everything: uninstall the app. All local data is removed with it.
- Stop sharing location: revoke the permission in your phone's Settings.
- Stop sending messages: do not use the conversation feature.
- Manage your subscription: through Apple, Google Play, or — for a web purchase — the Manage or cancel link in your welcome email, depending on where you bought it.
If you have a privacy request about analytics or a web purchase, write to us with enough information to locate the relevant record. We may need to direct payment-record requests to the store or payment provider that controls them.
Changes
If this policy changes, the date at the top changes with it. Material changes will be announced in the app.