Privacy Policy

👋 Introduction

Welcome to GlowScan ("we", "us", or "our"). GlowScan is an AI-powered skin analysis app that helps you understand your skin health using your device's camera and artificial intelligence.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have. By using GlowScan, you agree to the practices described in this policy.

📷 Camera & Photo Data

GlowScan requires access to your device's camera to perform skin analysis. Here is exactly how your images are handled:

• Camera access: Used only when you initiate a scan. We never access your camera in the background.
• Image transmission: Your photo is sent securely (HTTPS/TLS) to OpenAI's API for AI analysis only at the moment of your request.
• No permanent storage: We do not store, archive, or retain your photos on our servers after the analysis is returned.
• On-device: Images are never saved to your camera roll unless you explicitly choose to save a result.
• No facial recognition: GlowScan does not use facial recognition or biometric identification technology.

🤖 AI Analysis (OpenAI Vision)

GlowScan uses OpenAI's GPT-4o Vision API to analyze skin conditions from photos. When you perform a scan:

• Your image is transmitted to OpenAI's servers for processing.
• OpenAI processes the image and returns analysis results to the app.
• OpenAI's handling of data is governed by their Privacy Policy and API Data Usage Policies.
• As of the effective date of this policy, OpenAI does not use API-submitted data to train their models by default.

We obtain your explicit consent in the app before your first scan, and you may withdraw consent at any time.

AI-generated skin analysis results are for informational purposes only and do not constitute medical advice. Always consult a qualified dermatologist for medical concerns.

📋 Information We Collect

We collect the minimum data necessary to operate the app:

• Account data: Email address and authentication credentials if you create an account (managed via Supabase Auth).
• Usage data: Number of scans performed, app features used, session duration — used to improve the service.
• Device information: Device type, operating system version, app version — used for troubleshooting and compatibility.
• Subscription data: Subscription status and purchase history — managed via RevenueCat and Apple In-App Purchases. We do not store payment card details.
• Crash reports: Anonymized crash logs to help us fix bugs and improve stability.

We do not collect: your name, physical address, or social media profiles unless you voluntarily provide them.

💳 Subscriptions & Payments

GlowScan offers premium features through a subscription model. All payments are processed through Apple In-App Purchases, managed by RevenueCat.

• Payment information is handled entirely by Apple and never touches our servers.
• RevenueCat provides us with subscription status and entitlement data only — no raw payment details.
• Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current period.
• You can manage or cancel your subscription at any time via your Apple ID settings.
• RevenueCat's privacy practices are described in their Privacy Policy.

🔗 Third-Party Services

GlowScan integrates with the following third-party services:

• Supabase — Backend infrastructure (database, authentication). Data stored in secure, encrypted servers. Privacy Policy
• OpenAI — AI Vision API for skin analysis. Privacy Policy
• RevenueCat — Subscription management. Privacy Policy
• Apple App Store — App distribution and in-app purchases. Privacy Policy

We carefully select partners that uphold strong data protection standards. We confirm that these third parties provide the same or equal protection of your data as described in this policy, in accordance with their published privacy policies and data processing terms.

🔒 Data Security

We take data security seriously and implement industry-standard measures to protect your information:

• All data transmissions are encrypted using TLS/HTTPS.
• Authentication data is managed by Supabase with bcrypt password hashing and secure session tokens.
• We do not log or persist images or analysis results on our infrastructure.
• Access to backend systems is restricted and monitored.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

🌍 Data Retention & International Transfers

Account data is retained for as long as your account is active. You may request deletion at any time (see "Your Rights" below).

Our services and third-party providers may process data in different countries, including the United States. By using GlowScan, you consent to the transfer of your data to these locations, which may have different data protection laws than your country of residence.

👶 Children's Privacy

GlowScan is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children.

If you believe a child has provided us with personal data, please contact us immediately at skinanalysis.support@gmail.com and we will delete that information promptly.

⚖️ Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data ("right to be forgotten").
• Portability: Request your data in a portable format.
• Objection: Object to certain processing activities.
• Withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at skinanalysis.support@gmail.com. We will respond within 30 days.

🍪 Analytics & Tracking

GlowScan does not use third-party advertising networks or tracking SDKs. We may collect anonymized, aggregated usage statistics to understand how the app is used and to improve features. This data cannot be used to identify you personally.

We respect Apple's App Tracking Transparency (ATT) framework and do not track users across apps or websites owned by other companies.

🔄 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you via the app or email if the changes are material.

Continued use of GlowScan after changes are posted constitutes your acceptance of the updated policy.

📬 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

We aim to respond to all inquiries within 5 business days.