Privacy policy

GlowGenic ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it. It applies to the GlowGenic mobile application and website.

1. Data we collect

We collect the following categories of information when you use GlowGenic:

• Account information: Name, email address, and authentication data from your chosen sign-in provider (Google, Apple, or Facebook)
• Skin profile data: Responses to the onboarding questionnaire including skin type, concerns, and goals
• Skin images: Selfie photographs captured in-app for analysis purposes
• Analysis results: Glow Score, hydration readings, clarity scores, and routine recommendations
• Usage data: Streak counts, routine completion records, session timestamps, and feature interactions
• Device information: Device type, operating system, and app version for diagnostic purposes
• Payment data: Subscription status and purchase history (payment instrument details are handled entirely by Apple or Google — we never see or store your card details)

2. How we use your data

We use the data we collect to:

• Deliver the skin analysis service by passing your images to our third-party computer vision API
• Generate personalised skincare routines using AI models
• Calculate and track your Glow Score and streak progress
• Send routine reminders and milestone notifications you have opted into
• Process subscription billing through Apple and Google payment infrastructure
• Improve the accuracy and quality of our analysis and recommendation systems
• Comply with legal obligations and enforce our Terms and Conditions

We do not use your skin images or health data for advertising purposes. We do not sell, rent, or trade your personal data to third parties.

3. Third-party services

We work with a limited number of third-party service providers to operate the Service:

• Supabase: Database and file storage for your account data and skin images
• Skin analysis API providers: Third-party computer vision services that process skin images to generate analysis data. Images are transmitted securely and handled under the provider's applicable data processing terms
• AI model providers: Server-side model services used to generate personalised routines from skin profile and analysis data. We minimise personal identifiers in model requests where possible
• RevenueCat: Subscription management and billing infrastructure
• Apple / Google: App distribution, payment processing, and push notification delivery

Each provider is subject to its own privacy policy and data processing terms. We conduct due diligence on all providers before integration.

4. Data storage and security

Your account data and skin images are stored securely on Supabase infrastructure with encryption at rest and in transit. Skin images are stored in a private, access-controlled storage bucket — they are not publicly accessible and are only retrievable by your authenticated account.

5. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law.

6. Your rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• The right to access the personal data we hold about you
• The right to correct inaccurate or incomplete data
• The right to request deletion of your data ("right to be forgotten")
• The right to data portability — to receive your data in a structured, machine-readable format
• The right to object to or restrict certain types of processing
• The right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at hello@glowgenic.net. We will respond within 30 days.

7. Children's and teen privacy

GlowGenic is intended for users aged 13 and older. If you are under 18, you may use GlowGenic only with the involvement and consent of a parent or legal guardian.

GlowGenic is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly.

8. Cookies and tracking

The GlowGenic mobile application does not use browser cookies. Our static website does not use advertising cookies or third-party tracking pixels. If we later add account or session features to the website, we may use essential cookies required to operate those features.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification and by updating the effective date above. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

10. Contact us

For any privacy-related questions, requests, or concerns: hello@glowgenic.net

GlowGenic | hello@glowgenic.net