Privacy Policy

Effective date: November 2, 2026 · Last updated: November 2, 2026

1. Who we are

This Privacy Policy explains how GlowApp (“GlowApp”, “we”, “us”) handles information when you use the GlowApp mobile app (the “App”) and the GlowApp AI service that powers its AI features. GlowApp is developed and operated by Mlinjo Creative Labs, Indonesia. For any privacy question or request, contact [email protected].

This policy applies to the App on iPhone and, where noted, on Android. It does not apply to third-party websites or services you open from the App.

2. Data stored on your device

GlowApp is local-first. There is no GlowApp account, and the content you create is stored in the App's private storage on your device, including:

• Skin profile: skin type, concerns, age range and similar answers from onboarding.
• Routines and products: routine steps and schedules, reminders, your product shelf (names, brands, categories, opened dates, notes, ratings and product photos).
• Face scans: scan photos, scores, estimated skin type and the insight for each scan.
• Check-ins and diary: mood, sleep and stress check-ins, diary photos, and period dates if you choose to log them.
• Glow AI: your chat history, photos you attached, AI insights and the actions Glow AI applied with your confirmation.
• Preferences: language, appearance, reminder times and similar settings.

This data stays on your device unless you use an AI feature (Sections 3 to 5) or create a backup. On iPhone, a backup is a file you export through the share sheet or the Files app; it goes wherever you choose to save it (for example iCloud Drive), under that service's terms. Your device's own backups (such as iCloud Backup) may also include App data. On Android, you can optionally sign in with Google to back up to a hidden app folder in your Google Drive.

3. Face scan photos and face data

What is collected. AI Face Scan runs only when you start it and only after you accept the in-app consent screen. The App takes one front-facing photo (resized to at most 1280 pixels). On your device, Apple's Vision framework checks that exactly one face is visible and finds where it is in the photo (a rectangle). GlowApp does not use Face ID, TrueDepth or ARKit face tracking, does not store face landmarks or face geometry, and does not create face templates or any biometric identifier.

How it is used. The photo is analysed to estimate skin metrics (hydration, oiliness, acne, redness, pores, dark spots, fine lines, dark circles, texture and radiance), a glow score, an estimated skin type and skin age. Results are used only to show your analysis, track your progress, and personalise AI insights and Glow AI answers. We never use face data to identify or authenticate you, for advertising, tracking or profiling, or to train AI models, and we never sell it.

What is sent. To analyse a scan, the photo, the face rectangle and the hints that improve the estimate (skin type, concerns, age range) are sent over an encrypted connection (HTTPS) to the GlowApp AI service, which forwards them to our AI provider, Anthropic, solely to produce the analysis.

Storage. The GlowApp AI service processes the photo in memory and does not store the photo, the face rectangle or the results. Anthropic deletes API inputs and outputs within 30 days, except where longer retention is required by law or to enforce its usage policies, and does not use them to train its models. Your scans are stored on your device until you delete them.

Deletion. You can delete any scan in the App, which deletes its photo and results from your device. Uninstalling the App removes all scans from your device, except copies in backups you made.

Some builds of the App analyse scans entirely on your device without any upload. The consent screen tells you which applies before you scan.

4. Glow AI chat and AI insights

Glow AI is optional and asks for your consent before your first chat. When you send a message, the App sends to the GlowApp AI service your recent messages, any photos you attach, and the context Glow AI needs to answer about you: skin profile, routines and products, reminders and appearance settings, recent scan scores and insights. The service forwards this to our AI provider to generate the reply and any suggested actions. Suggested actions change nothing until you confirm them, and can be undone.

AI insights are generated the same way from your scan scores and routine statistics, such as how consistently you followed your routine, the products and ingredients you used, check-ins (mood, sleep, stress) and, if you log your period, your cycle phase. Some of this may be considered health-related information in some jurisdictions. We use it only to provide the feature you asked for.

Your chat history and insights are stored on your device. Chat photos are not stored on our servers. Messages are automatically checked to keep Glow AI focused on skin care and to block unsafe or explicit content.

5. GlowApp AI service records

The App identifies itself to the GlowApp AI service with a random installation ID created on your device. It does not contain your name, email address, or device identifiers such as the advertising ID. The service keeps:

• An installation record: installation ID, plan (free or Pro) and subscription status checked with RevenueCat, platform, app version, language, last IP address, first and last use, and any support notes.
• Request records: time, feature, result status, AI model, usage and cost counts, IP address and language. For Glow AI chat and AI insights, a shortened copy of the request and reply text (up to 4,000 characters) may be kept to investigate errors and abuse. Face scan photos, face rectangles, scan results and chat photos are never included.

We use these records to run and secure the service, apply free and Pro usage limits, prevent abuse (for example rate limits per installation and IP address), and answer support requests. Access is limited to the people who operate GlowApp.

6. Product lookup (Open Beauty Facts)

When you scan a product barcode or search for a product, the App sends the barcode number or your search text directly to Open Beauty Facts (openbeautyfacts.org), an open database run by the non-profit Open Food Facts, to fill in product details. No other information about you is included, but Open Beauty Facts receives your IP address as part of the request. See the Open Beauty Facts privacy policy.

7. Purchases and subscriptions

GlowApp Pro is sold through the Apple App Store (and Google Play on Android). Apple or Google processes your payment; we never receive your payment card details. We use RevenueCat to manage purchases: the App identifies itself to RevenueCat with your installation ID, and RevenueCat receives the purchase receipts and subscription status from the store. The GlowApp AI service checks your subscription status with RevenueCat using the same ID. See the RevenueCat privacy policy.

8. Device permissions

• Camera: for face scans, product photos and barcode scanning.
• Photo library: to pick photos and, if you choose, save images to your library.
• Notifications: for routine reminders. Reminders are scheduled on your device; we do not run a push notification server.

You can change these at any time in your device settings. GlowApp does not access your contacts, location, health data or advertising identifier.

9. Service providers and sharing

We do not sell or rent your personal information, and we do not share it for advertising. We use these service providers, who process data on our behalf or under their own terms as described above:

Provider	Purpose	Data
Anthropic PBC (United States)	AI model for face scan, Glow AI and insights	Face scan photo and hints, chat messages and photos, insight inputs
Hosting provider for api.glowapp.biz	Running the GlowApp AI service and its database	Installation and request records (Section 5)
RevenueCat, Inc. (United States)	Purchases and subscription status	Installation ID, purchase receipts
Apple, Google	App distribution, payments, optional backups	Under their own privacy policies
Open Beauty Facts	Product details	Barcode or search text, IP address

If we change or add an AI provider, we will update this policy before the change takes effect. We may also disclose information if required by law or to protect rights, safety and security, or as part of a merger or sale of the App, in which case this policy continues to apply to your information.

10. How long we keep data

• On your device: until you delete it in the App or uninstall the App. Backups you made are kept until you delete them.
• Face scan photos and chat photos: never stored on the GlowApp AI service; deleted by Anthropic within 30 days.
• Request records: deleted automatically after 90 days.
• Installation records: kept while you use the AI features, or until you ask us to delete them.
• Server backups: database backups are kept for up to 14 days, after which deleted records are gone from backups too.
• Purchases: kept by Apple, Google and RevenueCat under their own retention rules.

11. Your choices and rights

• Delete individual face scans, chats and other content in the App, or uninstall the App to remove everything on your device.
• Stop using the AI features at any time. Nothing is sent to the GlowApp AI service unless you use them.
• Withdraw camera, photo or notification permissions in your device settings.
• Delete your server records: email [email protected] with the subject “Delete my data”. Because there is no account, tell us your device model, app version and the approximate dates and times you used the AI features so we can find your installation. We will delete your installation record and all its request records within 30 days.
• Depending on where you live (for example under Indonesia's Personal Data Protection Law, the GDPR or UK GDPR, or U.S. state laws such as the CCPA), you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict processing, and to complain to your data protection authority. Contact us to use these rights.

12. Legal bases

Where the law requires a legal basis, we rely on: contract, to provide the App and the features you request; consent, for the AI features (including processing face photos and skin information) and device permissions, which you can withdraw at any time; legitimate interests, to secure the service, prevent abuse and fix errors; and legal obligation, where we must keep or disclose information.

13. International transfers

Our service providers, including Anthropic and RevenueCat, process data in the United States and other countries whose data protection laws may differ from yours. Where required, transfers are protected by the providers' contractual safeguards.

14. Security

Data sent to the GlowApp AI service is encrypted in transit (HTTPS). The service is protected by rate limits, and access to its records is restricted. On your device, App data is protected by your device's security. No method of storage or transmission is completely secure, so please keep your device locked and up to date.

15. Children

GlowApp is not directed to children under 13, or the minimum age in your country. We do not knowingly collect information from children, and the AI features, including AI Face Scan, must not be used by children. If you believe a child has used them, contact us and we will delete the related records.

16. Changes

We may update this policy. We will post the new version here with a new date and, for material changes, let you know in the App.

17. Contact

GlowApp, Mlinjo Creative Labs
Email: [email protected]