Last updated: May 2026
GLXY ("we," "us," "our") operates a professional healthcare provider lookup service for medical device sales representatives. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
Account information (required): Your email address and password are required to create and access your account. Passwords are encrypted and never stored in plain text.
Profile information (optional): You may choose to provide your company name and cell phone number. These fields are voluntary and help us personalize your experience.
Payment information: If you subscribe to GLXY Pro, payment is processed by Stripe (on web) or Apple (on iOS). We do not store credit card numbers on our servers. Stripe and Apple handle all payment card data under their own PCI-compliant systems.
Usage data: We collect anonymized information about how you use the app (pages visited, search queries in aggregate) to improve the service.
Provider information displayed in GLXY (names, addresses, phone numbers, specialties, NPI numbers) is sourced from the National Plan and Provider Enumeration System (NPPES), a public database maintained by the U.S. Centers for Medicare and Medicaid Services (CMS). This data is publicly available under federal law. We do not collect or store this information from end users.
We use your account information to:
Your data is stored on Supabase (hosted on AWS in the US East region). We use row-level security policies to ensure each user can only access their own account data. All data is transmitted over HTTPS/TLS encryption.
When using GLXY on iOS, subscriptions are processed through Apple's In-App Purchase system. Apple collects payment information under its own Privacy Policy. We receive confirmation of purchase from Apple but do not receive your payment card details.
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or accounting purposes.
You have the right to:
GLXY is intended for professional use by adults. We do not knowingly collect data from anyone under 18.
We may update this Privacy Policy periodically. We will notify you of material changes by email or a prominent notice in the app. Continued use after changes constitutes acceptance.
For privacy questions, data requests, or account deletion: privacy@surgeonglxy.com