Privacy Policy

The short version

Glowz starts anonymously — no email or account needed. The selfies you scan are sent to our AI provider to read cosmetic skin metrics, then kept in your private history. We don’t sell your data, we run no advertising or tracking SDKs, and you can permanently delete your account and everything in it from inside the app.

The rest of this page is the detail behind that summary — written plainly, naming the actual companies that help us run the app.

Who we are

Glowz is an iOS app operated by Ramin Afandiyev (“Glowz,” “we,” “us”). This Privacy Policy describes how we collect and use information when you use the Glowz app and this website.

For any privacy question or to exercise your rights, email raminefendi@gmail.com.

What we collect

We collect only what the app needs to work. Depending on how you use Glowz, that can include:

• Face scans & photos — the selfies you take for a Glow Check, a Color Season read, or a Glow Twin read. They are processed to produce your results and then stored in your private, per-account history.
• Onboarding answers — what you tell us during setup: a display name, how you identify, an age range, optionally your ethnic background, skin type, skin concerns, breakout zones, lifestyle notes, and your aesthetic goal. Some of this (e.g. ethnic background) is sensitive, optional, and used only as a soft hint for your color season — never your skin score.
• Results we generate — your skin scores and sub-metrics, written verdicts, color season, twin reads, generated portrait images, and your routine/plan.
• Account identifiers — only if you choose to link Sign in with Apple or Google to sync across devices. That may include a name and email from your provider. The default anonymous session has no name or email.
• Notification token & timezone — only if you turn on notifications, so reminders arrive at sensible times.
• Purchase status — whether you hold a Glowz Pro subscription. Apple processes the payment; we never see your card details.

We do not collect your precise location, contacts, browsing history, or advertising identifiers, and we use no third-party analytics, advertising, or tracking SDKs.

How we use it

We use your information to:

• Generate your skin scores, color season, twin reads, written verdicts, and personalized plan.
• Keep your history and trend over time so you can see progress.
• Operate the Glowz Pro subscription and unlock premium features.
• Send the notifications you opted into.
• Maintain, secure, debug, and improve the service.

We do not use your face scans to train public or general-purpose AI models, we do not sell your personal information, and we do not use it for advertising.

Your photos and how the AI read works

Your scans are the heart of Glowz, so here is exactly what happens to them:

• When you take a scan, the photo is uploaded over an encrypted connection to our cloud storage and held in a private area only you (and our servers acting for you) can access.
• To produce a reading, our server sends the photo to our AI provider, OpenAI, which analyzes it for cosmetic, visible traits — hydration, texture, clarity, evenness, pores, undertone, colouring, and overall aesthetic.
• The AI is instructed to treat every photo as an anonymous face. Glowz does not perform facial recognition, identity matching, or face-geometry “faceprints.” We don’t try to figure out who you are.
• Some Glow Twin and try-on features generate a stylized portrait from your photo; this may use OpenAI and/or another AI image-generation provider acting on our instructions.
• After the read, the photo stays in your private history so you can revisit results. You can delete it, or your whole account, from inside the app.

Our AI providers act as our processors under contract: they process your photo to return a result for us and are not permitted to use it for their own purposes or to train their public models. Providers may keep short-lived operational logs under their own retention policies.

Who we share with

We don’t sell your data and we share it only with the service providers that help us run Glowz, under contract and only as needed:

• Supabase — our cloud database, file storage, authentication, and serverless backend. Stores your account, history, photos, and results.
• OpenAI — analyzes your scan photo to generate scores and reads, and generates some portrait images. (We may also use an additional AI image-generation provider for some image features.)
• RevenueCat — manages subscription entitlements. Receives an account identifier and your subscription status, not your photos.
• Apple — Sign in with Apple (optional), App Store payments, and push-notification delivery.
• Google — Sign in with Google (optional), if you choose it.
• Expo — delivers push notifications you’ve opted into, using a notification token.

For the Glow Twin “celebrity” feature, we fetch a public figure’s photo from public sources (such as Wikipedia); this sends no personal data about you. We may also disclose information if required by law or to protect the rights and safety of our users and the service.

How long we keep it

We keep your scans, results, and account data for as long as your account is active so your history and trend are available to you. You can delete an individual scan, or your entire account, at any time.

When you delete your account, it enters a short grace period and is then permanently purged — your photos are removed from storage and your account and associated records are deleted. Our service providers may retain short-lived operational logs under their own policies, and we may keep limited records where the law requires (for example, purchase or tax records).

Your choices and rights

You stay in control:

• Stay anonymous — use Glowz without ever creating an account.
• Delete everything — the in-app “Delete account” flow removes your account and associated data after a short grace period.
• Notifications — opt in or out at any time in the app or your device settings.
• Export & share — you can save or share your own results from the app.
• Access, correction & more — depending on where you live (for example under the EU/UK GDPR or California’s CCPA/CPRA), you may have the right to access, correct, delete, restrict, or port your data, and to object to certain processing. We do not sell or “share” personal information as those laws define it. To make a request, email us.

To exercise any right, email raminefendi@gmail.com. We may need to verify your request.

Children

Glowz is intended for adults and is not directed to children. We don’t knowingly collect personal information from anyone under 13, or under the age of digital consent in their region. If you believe a child has provided us data, contact us and we’ll remove it.

Security and international transfers

We protect your data with encryption in transit, a private storage bucket with per-account access controls, and time-limited internal links to your photos. No system is perfectly secure, but we take reasonable technical and organizational measures.

Our providers (such as Supabase, OpenAI, RevenueCat, Apple, Google, and Expo) may process data in countries other than yours. Where required, such transfers rely on appropriate safeguards.

Changes to this policy

We may update this policy as the product evolves. We’ll revise the “last updated” date above, and significant changes will be noted in-app. Questions? Email raminefendi@gmail.com.