During the web beta

Your account, skincare answers and saved records are stored to provide the app. Product analytics and new program checkout are disabled in this beta. Beta status does not mean the app uses fictional data or an isolated test database.

Chat, email and existing billing services depend on the deployment and features you use; beta status alone does not disable them. The service-wide policy below describes those data flows. Data export, account support and existing deletion rights remain available; external cleanup may need follow-up.

1. Who We Are

Glow Protocol ("we," "us," "our") operates the website glowprotocol.beauty and the Glow skincare app at app.glowprotocol.beauty. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We collect information you provide directly to us, including:

Account Information: Your name, email address, and password when you create an account.

Skin Profile Data: Information you provide through our skin quiz, including skin type, skin concerns, sensitivities, climate, age range, hormonal status, menopause symptoms, pregnancy status, current products, past reactions, and skincare goals. This data helps personalize your skincare routine and recommendations. Some fields also support tailored emails and product analytics, as described below.

Usage Data: We collect analytics data about how you use the app, including pages visited and features used, through PostHog. This helps us improve the app experience.

Check-In Data: Weekly skin check-in responses including how your skin is feeling, any issues, and notes. This data powers our routine evolution engine to adjust your routine over time.

Chat Data: Conversations with Glowie, our AI skincare assistant, are stored to maintain your chat history and improve responses.

Daily Signal Log: The reactivity, hydration and comfort ratings you log each evening, with the dates you logged them. These help you track patterns; they cannot prove that a product caused a change.

Photos: Progress photos and any profile photo you upload. Progress photos live in a private store and use signed links that expire after an hour. Anyone with an unexpired link can view that photo, so avoid sharing those links. Your profile photo is stored in a public bucket at a hard-to-guess address so it can render instantly in the app. Anyone holding that exact link could open it, which is why we keep it out of the rest of your data.

3. How We Use Your Information

We use the information we collect to:

Provide personalized skincare routines and product recommendations based on your skin profile; power our AI assistant (Glowie) with context about your skin to give relevant advice; send routine reminders and check-in nudges via email (if opted in); analyze skin check-ins to suggest routine adjustments; process payments for the Barrier Reset, Glow Seasons, and legacy Glow+ subscriptions; improve our app and services through usage analytics linked to an account when you sign in; and communicate with you about your account, updates, and skincare tips.

4. Health-Related Data

Some data we collect, such as hormonal status, menopause symptoms, pregnancy status, and barrier health, may be considered health-related information. We treat this data with extra care. It supports skincare guidance, tracking and related service features. Some skin-profile labels are also sent to our email and analytics services as described below. It is never sold to third parties, used for advertising targeting, or shared with insurance companies or employers. You can request deletion of this data at any time.

5. Third-Party Services

We use the following third-party services to operate Glow:

Supabase: Database and authentication (stores your account and skin profile data securely). Anthropic (Claude): Powers Glowie, our AI skincare assistant. Your skin profile context is sent to generate personalized responses. Product checks and product details also use Claude. Provider data handling depends on its terms and our account settings. OpenAI provides text embeddings for knowledge retrieval, which may include your chat query. Stripe: Payment processing for the Barrier Reset, Glow Seasons, and legacy Glow+ subscriptions. We do not store your full card details. Resend: Sends transactional emails (reminders, notifications). MailerLite: Our email list. When you give us your email we store it there with your name and your account status, and once you finish the quiz we also store your skin type, life stage, age range and how you found us, so the emails you get match where you actually are. We request removal when you delete your account; failed requests need follow-up. PostHog: Product analytics, including pages and features used, quiz skin-type and concern labels, and an account ID and email when you sign in. These records can be linked to your account; they are not anonymous. Amazon Associates & Skimlinks: Affiliate product links. When you purchase products through our links, we may earn a commission at no extra cost to you. Glowie will always disclose when sharing affiliate links.

6. Data Security

We implement appropriate technical and organizational measures to protect your data. Your data is stored in Supabase with row-level security policies ensuring you can only access your own data. All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text.

7. Your Rights

You have the right to:

Access, update, or delete your personal data at any time through your profile settings or by contacting us; opt out of marketing emails while keeping transactional notifications; download a copy of your data; and delete your account.

Deleting your account. Profile → Settings → Account → Delete account removes your profile, your photos and the files behind them, every signal and check-in you have logged, your routines and the products on your shelf, your protocol history, and your Glowie conversations. Payment records remain with the account link removed, but retain transaction identifiers that can be linked to Stripe records. They are not anonymous. Attributed testimonials are deleted by the current account deletion flow. We also request removal from MailerLite and PostHog; failures can require manual follow-up. Stripe keeps its own payment records under its retention rules. Deletion from the app does not immediately erase processor records or backup copies. Contact us about outstanding removal requests. Account deletion cancels active subscriptions; it does not issue a refund.

Downloading your data. Use Download your data in account settings or beta account support. The JSON file includes your profile and quiz answers, routine and product history (including reactions and replacements), logs, check-ins, program progress, Glowie messages and photo metadata. Photo and avatar files, external processor and payment records, feedback and testimonials, operational logs, quota and retry receipts, device-only unsynced work and internal identifiers are not included. These paginated reads are not a single point-in-time snapshot. A failed read or row limit labels the file incomplete in the app and in the file; retry or contact account support for missing records and anything the download does not cover.

8. Cookies

We use essential cookies for authentication (keeping you logged in) and analytics cookies through PostHog. We do not use advertising cookies or sell data to ad networks.

9. Children's Privacy

Glow is designed for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn we have collected data from someone under 18, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the app. Your continued use of Glow after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at carolina@glowprotocol.beauty.