GlueJS

Privacy Policy

Effective October 13, 2026

GlueJS is made by Sirenia LLC ("we"), 404 Lafayette Rd, Sugar Hill, New Hampshire 03586, United States.

The short version: GlueJS has no server, no account, no analytics, no advertising and no tracking. We don't receive your script data. Your scripts can send data to services you choose, and Apple stores backups, script files and secrets according to your backup, iCloud Drive and iCloud Keychain settings.

What GlueJS stores on your iPhone

• Scripts and run history. The scripts your shortcuts run, the input Shortcuts passes to them, their output and console messages. Kept for up to 500 runs, in the app's storage on your device.
• Store and widget content. Values your scripts save with Store and Widget. A widget with automatic refresh also saves its script and input so it can run again.
• Secrets. API keys you choose to save, kept in your iCloud Keychain, which is end-to-end encrypted: Apple can't read it and neither can we. They sync to your other devices and come back on a new iPhone. If iCloud Keychain is off, they stay on this iPhone.
• Usage count. How many free runs you've used today, so the free plan's daily limit works.

Store values, widget content (including saved refresh inputs) and local script files are eligible for your iCloud or computer backup, so they can come back when you restore a new iPhone. These can include data your shortcut supplied, such as Health data. Backup storage and encryption depend on your Apple and computer backup settings. Run history is excluded from backups. None of it is sent to us.

Script files in iCloud Drive

If you use script files, they're stored in the GlueJS folder of your own iCloud Drive, so edits made on your Mac reach your iPhone. Apple stores and syncs them under your Apple Account, as with any iCloud Drive file; we can't access them. If iCloud Drive is off, script files stay on your iPhone.

Data you pass in from Shortcuts

Shortcuts can pass data to GlueJS, including Health, calendar or location data you choose to include in a shortcut. GlueJS doesn't access HealthKit, your contacts, location, photos or other device data itself; Apple's Shortcuts app asks for those permissions and decides what to share. Your script processes data on your iPhone and can send it to an endpoint you choose. We don't receive, sell or use your Health data for advertising or marketing.

When data leaves your iPhone

A script you installed can send data over the internet or to devices on your home network, for example to fetch the weather or to call an API with a key you saved. Those requests go directly from your iPhone to the service the script contacts, whose own privacy policy then applies. GlueJS substitutes secret placeholders only for allowed hosts. If you enable raw access, scripts can read and send the value elsewhere; an allowed server can also return a key to a script. Only install scripts you trust. iOS asks before GlueJS can reach devices on your local network. Apple backup and sync also store data as described above.

Purchases

Subscriptions are handled by Apple. We don't receive your name, Apple ID or payment details. Apple tells the app on your device whether a subscription is active.

Children

GlueJS isn't directed at children under 13 and doesn't knowingly collect information from anyone.

Deleting your data

Delete runs, Store values, widgets and secrets in the app. Deleting a secret also deletes its synced iCloud Keychain copy. Delete script files in Files or iCloud Drive, and manage existing backups in your Apple or computer backup settings. Uninstalling GlueJS is not a way to erase all synced files, Keychain items or existing backups; remove those before uninstalling if desired. Because we don't hold your script data, there's nothing to request from us.

Changes

If this policy changes, the new version will be posted here with a new effective date.

Contact

Questions: support@sireniallc.com.