Privacy Policy

This Privacy Policy explains how TUPOE Ltd and its affiliates and related entities operating the Glorify brand ("Glorify," "we," "us," or "our") collect, use, disclose, retain, and protect personal information when you access or use Glorify services.

This Policy applies to the Glorify websites, Glorify mobile application, Glorify Ring, charging case, sizing kit, firmware, account services, Voice Prayer Journal, prayer and devotional features, Membership, pre-orders, purchases, referrals, promotional credits, support, surveys, community features, and related online or offline services (collectively, the "Services").

This Policy applies to users located in the United States, Canada (excluding Quebec French-language requirements where a separate French-language notice applies), and Mexico. If you access the Services from another country, the local notice or addendum published by Glorify for your region will apply where one exists. Where no local notice exists, this Policy governs.

Glorify Ring and the app are faith-support, wellness, and personal reflection tools. They are not medical devices, clinical services, emergency services, therapy services, or substitutes for professional medical, mental-health, pastoral, legal, or other professional advice. The Ring sensors collect wellness signals (such as sleep patterns, movement, heart rate, blood oxygen, and body temperature) for personal reflection and faith-support purposes, not for health diagnosis, medical monitoring, or clinical use.

The categories below describe personal information we may collect, process, or receive. We do not collect every item from every user. The information collected depends on your device, region, settings, permissions, purchases, Membership status, and features used.

We collect information directly from you when you create an account, place an order, confirm a ring size, use the app, record a prayer, post or share content, join Membership, contact support, respond to surveys, or use referrals or promotional credits.

We collect information automatically from the Ring, charging case, app, website, cookies, device sensors, firmware, and service logs when you use the Services. The Ring uses an accelerometer, photoplethysmography (PPG) sensor, SpO2 sensor, and temperature sensors to collect movement, heart rate, blood oxygen, and body temperature signals. We may receive information from payment processors, commerce platforms, app stores, shipping carriers, analytics providers, fraud-prevention vendors, customer-support tools, email providers, referral partners, and other service providers. We may also receive information from optional third-party integrations you choose to connect, such as wellness platforms, wearable platforms, churches, ministry partners, or other apps. Website hosting and content delivery are provided by Vercel Corp., which may process IP addresses and request logs for performance and security purposes. Membership subscription management is provided by RevenueCat, which processes subscription status, receipt validation, and billing data. Backend and database hosting are provided by Supabase Inc., which stores and processes account, device, application, and service data. Product analytics are provided by PostHog Inc., which processes product-usage events and performance metrics. Content management is provided by Sanity Inc., which hosts editorial and configuration content.

We use personal information for the following purposes:

Certain Services may process information that is sensitive under privacy laws or that deserves heightened care because of its personal nature. This may include religious or spiritual beliefs, prayer life, private voice recordings, journal content, family or relationship details, emotional state, wellness-related context, body signals, sleep, stress, mood, emotion, heart rate, blood oxygen, temperature, and similar inferences.

Where applicable law requires consent, explicit consent, or a separate authorization for sensitive information, consumer wellness data, audio recording, biometric-like signals, religious information, or special category data, we will request that permission before the relevant processing begins. For Voice Prayer Journal and other features that process religious or spiritual content, emotional state, or wellness-related inferences, Glorify will request consent separately from acceptance of the Terms of Service, before recording, transcription, cloud processing, or AI analysis begins. You may withdraw consent through available settings or by contacting us, but withdrawal may limit or disable features that rely on that information.

Private journal entries, Voice Prayer Journal content, prayer content, and private Ring insights are not visible to other users unless you choose to share them or use a feature that posts or sends them. Community features may allow you to set visibility for prayer requests, testimonies, groups, friends, or self-only views. You are responsible for what you choose to share, and other users may save, copy, or re-share content outside the Services.

Voice Prayer Journal may process audio recordings, transcripts, metadata, AI summaries, themes, tags, labels, prompts, and related journal content. Some features may use cloud processing, transcription providers, AI systems, analytics systems, or infrastructure providers to operate, secure, and improve the feature.

AI-generated transcripts, summaries, reflections, recommendations, mood labels, themes, scripture suggestions, devotional materials, or prompts may be inaccurate, incomplete, delayed, or inappropriate. They are provided for personal faith-support and wellness purposes only and should be reviewed by you before reliance.

We do not use private prayer content, Voice Prayer Journal recordings or transcripts, private journal entries, Ring body signals, or consumer wellness data to train third-party foundation models unless you clearly agree through a separate consent or opt-in notice. We may use de-identified, aggregated, or otherwise privacy-protected information to improve reliability, safety, analytics, and product performance where permitted by law.

Human access to sensitive content is limited to authorized personnel and service providers with a legitimate need, such as support you request, troubleshooting, security, safety, legal compliance, abuse review, or enforcing applicable terms.

When recording is active, Glorify will provide an in-product recording indicator and a control to stop recording. The Services will also provide an in-product control to delete a recording and its associated transcript or generated summary from active systems, subject to the retention, backup, security, fraud-prevention, and legal exceptions described in this Policy.

We may disclose personal information as described below:

We do not disclose private prayer content, Voice Prayer Journal content, Ring body signals, consumer wellness data, or faith-related activity to third-party advertising platforms for cross-context behavioral advertising, retargeting, or lookalike audience creation.

We and our service providers may use cookies, pixels, SDKs, local storage, mobile identifiers, analytics tags, and similar technologies to operate the website and app, remember preferences, secure sessions, measure performance, understand feature use, prevent fraud, and market Glorify services.

Where permitted, we may use website or app advertising identifiers, hashed contact data, cookie data, or campaign data to measure or improve advertising. We do not use private prayer content, Voice Prayer Journal content, Ring body signals, sleep, stress, mood, emotion, wellness-related signals, or faith-related activity for third-party targeted advertising.

You may manage cookies through our cookie tools where available, your browser settings, device settings, app permissions, mobile advertising settings, and unsubscribe links. Where required by law, we will honor recognized opt-out preference signals, such as Global Privacy Control, for the browser or device that sends the signal.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining your account, operating Ring and app features, keeping transaction records, meeting legal obligations, resolving disputes, enforcing agreements, preventing fraud, maintaining security, supporting warranty and support obligations, and improving the Services.

You may delete certain Voice Prayer Journal entries, prayers, reflections, recordings, transcripts, or journal content in the app where available. When you delete content, we will remove it from active systems within a reasonable period, except where retention is required or permitted for legal, security, backup, fraud-prevention, dispute, financial, product-safety, or compliance reasons.

Order, payment, tax, chargeback, fraud-prevention, warranty, legal, and security records may be retained longer than app content. Backups and archives may persist for a limited period before deletion or overwriting. Aggregated, de-identified, or anonymized information may be retained where it no longer identifies you and where permitted by law.

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction. These measures may include encryption in transit, access controls, authentication, monitoring, logging, vendor review, incident response, and limitations on access to sensitive information.

No service, device, app, cloud system, or transmission method is completely secure. You should protect your account credentials, phone, Ring, app access, email account, and device permissions, and contact us promptly if you believe your account or data has been compromised.

Depending on your location and applicable law, you may have rights to request access, confirmation, portability, correction, deletion, restriction, objection, withdrawal of consent, opt-out of certain sales, sharing, targeted advertising, profiling, or appeal of a denied privacy request.

You may also control certain processing through app settings, device permissions, notification settings, community visibility settings, cookie preferences, marketing unsubscribe links, account deletion tools, and feature-level consent screens. Deleting the app or deleting your account does not automatically cancel a Membership, refund a purchase, delete transaction records, or remove information we must keep for legal, tax, accounting, security, fraud-prevention, warranty, dispute, or compliance purposes.

To make a privacy request or appeal a privacy decision, contact Glorify Support at support@glorify.global. We may need to verify your identity and authority before responding. Authorized agents may submit requests where permitted by law, and we may ask for proof of authorization.

This section applies where U.S. state privacy laws, including California privacy law, give you rights regarding personal information. The categories of personal information we collect, sources, purposes, and disclosures are described in Sections 3 through 8 above.

We do not sell personal information for money. We may process or disclose website, app, cookie, advertising, or hashed contact information in a way that may be considered a "sale," "sharing," or "targeted advertising" under some state laws. We do not sell or share private prayer content, Voice Prayer Journal content, private journal content, Ring body signals, consumer wellness data, or faith-related activity for cross-context behavioral advertising.

Subject to applicable law and verification, residents of certain states may request to know, access, correct, delete, obtain a copy of, or opt out of certain uses or disclosures of personal information. You may also have the right to limit certain uses of sensitive personal information, opt out of targeted advertising or profiling, and appeal a denial. We will not discriminate against you for exercising privacy rights, although some features may be unavailable if required data cannot be processed.

California residents may also request information about categories of personal information collected, disclosed, sold, or shared, the categories of recipients, business or commercial purposes, and retention criteria. If we offer a "Do Not Sell or Share" or similar mechanism, you may use that mechanism in addition to contacting support.

Glorify Ring collects wellness signals from on-device sensors, including sleep patterns, movement and activity, heart rate, blood oxygen (SpO2), body temperature, stress or emotion-related signals, mood or wellness inferences, and wearing state. These signals are collected for personal reflection, faith-support, and wellness purposes only. Glorify Ring is not a medical device and does not diagnose, treat, monitor, or prevent any health condition.

Where consumer wellness or health privacy laws apply (such as Washington My Health My Data Act, Nevada SB 370, or similar state laws), wellness data may include information linked or reasonably linkable to you that identifies or is used to infer your physical or mental wellness status. For Glorify, this may include sleep, activity, heart rate, blood oxygen, body temperature, stress or emotion-related signals, mood or wellness inferences, wearing state, wellness-related journal context, and related Ring or app data.

We collect and use wellness data to provide and personalize Ring and app features, display wellness and faith-support insights, support Voice Prayer Journal and devotional experiences, troubleshoot, secure the Services, prevent fraud, comply with law, and improve the Services as described in this Policy.

We may disclose wellness data to service providers and processors that help us operate the Services, including cloud hosting, analytics, AI or transcription, security, support, and infrastructure vendors, subject to appropriate restrictions. We may also disclose wellness data when you direct us to share it, where necessary to protect safety or security, or where required by law. We do not sell wellness data without a valid authorization where such authorization is required.

You may have rights to confirm whether we collect, share, or sell wellness data, access that data, withdraw consent, request deletion, and appeal a denial. You may exercise these rights by contacting support@glorify.global.

This section applies to users in Canada. Glorify collects, uses, and discloses personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including the British Columbia Personal Information Protection Act (BC PIPA), the Alberta Personal Information Protection Act (AB PIPA), and Quebec Law 25 (subject to a separate French-language notice where required).

Our privacy obligations under PIPEDA include: (a) identifying the purposes for which personal information is collected at or before the time of collection; (b) obtaining meaningful consent for the collection, use, or disclosure of personal information; (c) limiting collection to information that is necessary for the identified purposes; (d) limiting use, disclosure, and retention to those purposes; (e) ensuring accuracy; (f) using appropriate security safeguards; (g) being open about our privacy policies and practices; and (h) providing individuals with access to their personal information and the right to challenge its accuracy.

As a Glorify user in Canada, you have the right to: (a) access your personal information; (b) request correction of inaccurate or incomplete personal information; (c) withdraw consent for the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions; and (d) file a complaint with the Privacy Commissioner of Canada if you believe we have not respected your privacy rights.

Glorify may transfer personal information to service providers located in the United States or other countries for processing. Canadian users should be aware that their personal information may be subject to the laws of the country where it is processed, including lawful access requests by government authorities. We use appropriate safeguards, including contractual commitments, for cross-border transfers.

To exercise your privacy rights in Canada, contact support@glorify.global. If you are not satisfied with our response, you may contact the Privacy Commissioner of Canada at www.priv.gc.ca or by phone at 1-800-282-1376.

This section applies to users in Mexico. Glorify collects, uses, and discloses personal information in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Proteccion de Datos Personales en Posesion de los Particulares, "LFPDPPP") and its implementing regulations.

In accordance with the LFPDPPP, Glorify informs you that:

Your ARCO rights include: (i) Access — confirm whether Glorify holds your personal data and access it; (ii) Rectification — correct inaccurate or incomplete personal data; (iii) Cancellation — request deletion of your personal data, subject to legal retention obligations; (iv) Opposition — object to the processing of your personal data for specific purposes.

Glorify will respond to your ARCO rights request within 20 business days (access, rectification, cancellation) or 20 business days (opposition) as required by the LFPDPPP. If you are not satisfied with our response, you may submit a data protection request to the Secretaría Anticorrupción y Buen Gobierno, through its Unidad de Protección de Datos Personales and the channels or electronic system it provides under the LFPDPPP.

If you do not wish to receive promotional communications from Glorify, you may opt out by clicking the unsubscribe link in any promotional email or by contacting support@glorify.global.

We may process and transfer personal information in the United States, Canada, Mexico, and other countries where Glorify, its affiliates, service providers, processors, or partners operate. These countries may have privacy laws different from those in your location.

Where required, we use appropriate transfer mechanisms, such as standard contractual clauses, data-processing agreements, technical and organizational safeguards, or other lawful mechanisms for international transfers. For users in Canada, this Policy complies with PIPEDA's cross-border transfer requirements. For users in Mexico, this section serves as the privacy notice required under the LFPDPPP for international data transfers.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without required parental consent. If we learn that we have collected personal information from a child under 13 without required consent, we will take appropriate steps to delete or restrict the information.

Certain jurisdictions impose higher age thresholds or parental-consent requirements for online services, sensitive data, or wellness-related data. In Mexico, the LFPDPPP requires parental or guardian consent for processing personal data of minors. Users who are below the applicable age of digital consent in their location should use the Services only with required parent or guardian consent.

We may update this Privacy Policy from time to time. If changes materially affect your rights or how we process sensitive information, we will provide notice through the website, app, email, account notice, checkout notice, or another appropriate method. The updated Policy will apply after the effective date stated in the notice, except where law requires additional consent.

For privacy questions, requests, appeals, or complaints, contact Glorify Support at support@glorify.global.

Controller address for the current Glorify public notice: TUPOE Ltd, 9 Thorney Leys Park, Witney, Oxfordshire OX28 4GE, United Kingdom.

Regional privacy contacts: For Canada, you may also contact the Privacy Commissioner of Canada at www.priv.gc.ca. For Mexico, you may contact the Secretaría Anticorrupción y Buen Gobierno through its Unidad de Protección de Datos Personales. For U.S. state privacy inquiries, contact your state Attorney General or the relevant state privacy regulator.