Privacy Policy
Last updated: May 29, 2026
What we collect
Email addresses, when you opt in to our waitlist or create an account. We use them to sign you in, to email you about your account, and (for the waitlist) to let you know when the GlowPal app launches.
Account data. If you create an account, we store your email, an optional display name, and (through our authentication provider Supabase) a securely hashed password (or, if you use Google sign-in, an identifier from Google). We never see or store your Google password.
Content you save. Products you save and routines you build are stored against your account so we can show them back to you. Optional skin-quiz answers (skin type, top concern) are stored to personalize recommendations.
Face-scan and product photos. When you use a scan in the GlowPal app, the photo is uploaded to our servers and forwarded to a third-party AI provider to be analyzed. It is not processed on your device. We keep the analysis result, not the picture: we do not store the photo itself, in your scan history or anywhere else. What we retain from a scan is the scoring and the concerns it identified, so we can show you your trend over time. The provider handles the image under its own privacy policy, and we will tell you who it is if you ask us at contact@glowpal.beauty.
Affiliate link activity. If you are signed in and tap a buy link, we record which product you tapped and when, against your account. We use it to understand which recommendations are useful. Deleting your account removes it.
Payment data. Premium subscriptions are processed by Stripe. Stripe handles your card details directly. We never receive or store your full card number. We keep only a Stripe customer reference and your subscription status so we can turn on Premium and show it on your account.
Standard server logs: when your browser requests a page, our host (Vercel) records the request URL, your IP address, and your user agent, retained briefly for operational and security purposes.
Privacy-friendly analytics. If enabled, we use Plausible, a cookie-less analytics tool that collects only aggregate, anonymous usage stats. It does not use tracking cookies, does not fingerprint you, and does not collect personal data.
What we don't do
We do not use advertising trackers, we do not fingerprint you, and we do not sell or share your personal data. We do not run advertising on this site.
Who we share data with
We share data only with the service providers that run GlowPal: Supabase (authentication and database), Stripe (payments), Vercel (hosting), and, if enabled, Plausible (analytics). Each processes data on our behalf under its own privacy terms. We do not sell your data to anyone.
Affiliate links
When you click an affiliate link you leave GlowPal and arrive at a third-party retailer with its own privacy policy. We may receive a small commission if you purchase (see our affiliate disclosure), but we do not receive your personal information from the retailer.
How to access or delete your data
You can delete your account and its associated data from your account page, or email contact@glowpal.beautywith the subject "Delete my data" and we'll remove your account and waitlist entry within 30 days. You may also request a copy of the data we hold about you.
Children's privacy
GlowPal is not directed at children under 13. We do not knowingly collect data from children under 13.
Updates
If we change this policy materially, we'll update the "Last updated" date above and, where appropriate, email account holders.