Privacy, made understandable.

2. What we collect

Information you provide

• Account details such as your email address and name.
• An email address and consent record if you join the Android launch list.
• Goals, occasions, deadlines, preferences, pronouns, presentation choices, budget, time, comfort boundaries, and feedback.
• Photos you choose to upload for analysis, visualization, comparison, and progress features.
• Plan activity, task completion, check-ins, coach messages, squad activity, support requests, and other content you submit.
• Consent records and privacy settings.

Information created when you use Glowgen

• Generated concepts, profile insights, plans, reports, and related processing records.
• Subscription status, product identifiers, transaction references, and purchase events. We do not receive your full payment-card number from an app store.
• Device, browser, request, diagnostic, security, and basic interaction data needed to operate the service.

3. Android launch updates

If you join the Android launch list, we use the email address, language tag, signup source, and consent timestamps only to confirm the request and send occasional Android availability or launch messages. Joining this list does not create a Glowgen account.

You must confirm the request by email before you are subscribed. Every marketing message will provide an unsubscribe option. Unconfirmed records are deleted after 30 days. Unsubscribed suppression records may be retained for up to two years so we can respect the opt-out.

5. Photos and AI processing

Glowgen asks for explicit AI-processing consent before photo-based analysis or generation. When you use these features, the photos and relevant context needed for the request are sent through the Glowgen backend to OpenAI's API.

OpenAI states that API inputs and outputs are not used to train its models by default unless an API customer explicitly opts in. Provider abuse-monitoring retention may still apply under its API data controls.

Original uploads and generated images are stored separately in private, access-controlled storage. Access links are short lived. Glowgen does not use your photos to train its own models.

6. Service providers and disclosures

We disclose only the information needed for providers to perform services for Glowgen. Current categories include:

• Supabase for authentication, database, and private file storage.
• OpenAI for AI analysis, generation, coaching, and safety processing.
• Apple App Store and Google Play for in-app purchases and subscription status.
• Stripe for subscriptions purchased on the web.
• Expo and platform push services for notifications you enable.
• Railway and related infrastructure for application hosting, delivery, logs, and operations.
• Umami for limited website analytics.

We may also disclose information when required by law, to protect users or the service, in connection with a business transaction, or with your direction. Providers process data under their own terms and our contractual arrangements.

7. Server Logs and Website Analytics

Our servers process standard request information such as IP address, requested page, timestamp, browser, operating system, and referrer. We use it for delivery, security, abuse prevention, diagnostics, and reliability.

The public website uses a cookie-free Umami analytics deployment for aggregate page and campaign measurement. App analytics are optional and off by default. Analytics events must not include photos, photo-derived data, coach content, or other sensitive free text.

Operational logs and analytics are separate. Blocking analytics does not prevent the server processing needed to deliver and secure a request.

8. Retention, export, and deletion

We retain account content while your account is active and as needed to provide the features you request. Different records may have different retention periods for security, fraud prevention, transaction history, legal compliance, and backup integrity.

You can export your data and delete photos from Settings > Privacy & Data. Account deletion removes the account and associated stored content from active systems, subject to limited legal, security, transaction, and backup retention where required.

9. Your privacy choices and rights

• Review and update account information and product preferences.
• Enable or disable optional analytics and notifications.
• Review consent records and withdraw optional consent for future processing.
• Access or export supported account data.
• Delete individual photos, conversations where offered, or your account.
• Contact us to request access, correction, deletion, or another right available under applicable law.

Depending on where you live, laws such as the California Consumer Privacy Act or European data protection law may provide additional rights. We may need to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right.

11. Updates and contact

We may update this policy as the product, providers, or law changes. Material changes will be communicated through the service or email when appropriate. The effective date at the top identifies the current version.

Questions or privacy requests can be sent to support@glowgen.ai. Please do not email photos, passwords, access tokens, or payment details.