Privacy Policy

Last updated: 9 August 2026

Who we are

GlowAI ("we", "us", "our") is an AI-powered cosmetic skincare service available at myglowai.io. GlowAI is responsible for deciding how your personal information is used when you use the service.

If you have any questions about this policy or your data, you can contact us at:

The information we collect

We collect the following information when you use GlowAI:

• Account information — your email address and password (passwords are stored securely by our authentication provider, not by us directly).
• Photos you upload for analysis — when you use the skin scan or product features, you may upload a photo. See "How we handle your photos" below — this is important.
• Your skin analysis results — the cosmetic results generated from your scans (for example your glow score, skin type, and category results), which we save so you can view your history and track changes over time.
• Products you save — any products you choose to add to your profile.
• Usage activity — basic records of your activity in the app (such as the dates you use it), used for features like streaks.
• Security information — Cloudflare Turnstile may process limited browser, device, and network signals when you use an authentication form to distinguish people from automated abuse.
• Payment information — if you subscribe, your payment is processed by Lemon Squeezy. We do not receive or store your full card details; we receive the billing identifiers and subscription status needed to provide Premium access.

How we handle your photos

Your photos are important, so we want to be clear about exactly what happens to them:

GlowAI does not store your photo in our own database or persistent file storage. Your photo is transmitted through our systems to our AI provider, Anthropic, solely to generate your analysis. Anthropic automatically deletes API inputs and outputs from its backend within 30 days, except where a different retention arrangement applies, longer retention is needed to enforce its Usage Policy, or retention is required by law.

If you choose to create a share card, the card is generated locally in your browser from your current photo and results. GlowAI does not upload or store the card. Your photo is excluded by default and is only added when you choose “Include my photo”. The card is only passed to another app when you choose Share; that app then handles it under its own privacy policy.

Because a photo of your face may be considered sensitive personal information in some regions, we only process it to provide the cosmetic analysis you have asked for, and only with your consent (which you give when you choose to upload a photo and scan).

How we use your information

We use your information to:

• Provide your cosmetic skin analysis and product suggestions.
• Create and maintain your account and skin profile.
• Save your results and history so you can track changes over time.
• Process your subscription and manage premium access.
• Send you essential service emails (such as email confirmation and account messages).
• Maintain and improve the service.
• Protect accounts and authentication forms from bots and abuse.

The third parties we use

We rely on a small number of trusted service providers to run GlowAI. Your information may be processed by them as part of providing the service:

• Anthropic — provides the AI that analyses your photos and generates results.
• Supabase — provides our database and user authentication (stores your account and results).
• Lemon Squeezy — acts as merchant of record and processes subscription payments, billing details, taxes, and receipts.
• Resend — sends our service emails.
• Vercel — hosts the site and provides Vercel Web Analytics, a privacy-friendly, cookieless analytics service that collects aggregate page-view statistics without cookies or personal identifiers.
• Cloudflare — provides Turnstile, which protects login, sign-up, and password-reset forms from automated abuse.

Each of these providers handles data under their own privacy terms. Some of them may process data outside your country, including outside the UK or EU.

Legal basis for processing

Where data protection law (such as UK GDPR or EU GDPR) applies, we process your information on these bases:

• Your consent — for processing the photos you upload for analysis. You can withdraw consent at any time by stopping use of the scan features.
• Performance of a contract — to provide the service you have signed up for.
• Legitimate interests — to operate, secure, and improve the service.

Your rights

Depending on where you live, you may have rights over your personal information, including the right to:

• Access the information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Object to or restrict certain processing.
• Request a copy of your data.
• Withdraw consent at any time.

To exercise any of these, contact us at hello@myglowai.io. You also have the right to complain to your local data protection authority.

Data retention

We keep your account information and saved results for as long as your account is active. If you delete your account, we delete the associated personal data, except anything we are required to keep for legal or accounting reasons (such as payment records). As noted above, GlowAI does not store your photo itself — see "How we handle your photos" for details on Anthropic's retention of the photo it processes.

Children

GlowAI is not intended for children. You must be at least 16 years old to use the service. We do not knowingly collect information from anyone under 16.

Changes to this policy

We may update this policy from time to time — for example, if our service changes or if the operator's location changes. When we do, we will update the "last updated" date at the top. We encourage you to review this page periodically.

Contact

For any questions about this policy or your personal information, contact us at hello@myglowai.io.