Last updated: May 21, 2026
This Privacy Policy describes how Rozsa Gyene ("we", "us", or "our") collects, uses, and shares information when you use the GlowScan mobile application (the "App"). By using the App, you agree to the collection and use of information as described in this policy.
The App uses your device camera and photo library for AI-powered skin, hair, and nail analysis. Here is how we handle this data:
What we collect. When you use the Face Scan or Skin Age features, GlowScan captures a still photo of your face — either from the device camera or one you select from your photo library. This is the only "face data" the App collects. We do not capture face geometry, face embeddings, or any biometric template; we do not use Apple's TrueDepth API or Face ID; we do not perform identity recognition.
How we use it. The captured photo is compressed (resized to a maximum of 640 pixels on the longest edge, JPEG quality 0.7) and sent over HTTPS to GlowScan's analysis backend, which forwards it to Anthropic's Claude API. Claude returns a structured JSON analysis describing visible skin characteristics — concerns such as pores, wrinkles, redness, dullness, dark spots, hydration, texture, and an apparent skin-age estimate — together with personalized routine and product recommendations. The photo is processed for this one purpose only.
Who it is shared with. The photo is sent to one third party: Anthropic, PBC, the operator of the Claude API. Under Anthropic's API data-usage policy, content submitted to the Claude API is not used to train Anthropic's models and is not retained beyond the period needed to process the request and return a result. We do not share face photos with advertisers, affiliate retailers, analytics providers, or any other third party.
Where it is stored. GlowScan's analysis backend does not persist the photo: it is held in memory only for the duration of the request and discarded once the analysis is returned. The structured analysis result (scores, concerns, recommendations, summary) is what we save — not the photo. The original photo can be cached locally on your device as a thumbnail so you can review your scan history; only the three most recent scans per scan type retain a thumbnail, and the rest are automatically discarded. If you are signed in, only the structured analysis result is synced to your Firebase account — face photos are never uploaded to Firebase Storage from the Face Scan flow.
How long we keep it. Server-side: not retained beyond the API request/response cycle (seconds). On-device thumbnail: kept until you uninstall the App, clear app data, or until a newer scan rotates it out of the "three most recent" cache. Cloud-synced analysis result: kept until you delete the scan from your history, delete your account, or otherwise request deletion under Section 10 ("Data Deletion") below.
Your control. Before your first face, hair, or nail scan, the App shows an in-app consent screen that explicitly names Anthropic as the analysis provider and asks you to agree before any photo is transmitted. If you decline, no photo is sent. You can revoke this consent at any time in Settings → Privacy → Reset AI Analysis Consent; declining will block future scans until you re-consent. You can also delete individual scans from the in-app scan history at any time, or delete your entire account and all associated data from Settings → Privacy → Delete Account.
We use Google AdMob to display advertisements in the App for non-premium users. AdMob may collect and use the following:
You can opt out of personalized advertising in your device settings. Premium users do not see any advertisements.
For more information, see Google's Privacy Policy.
The App may display product recommendations with affiliate links. When you click on these links, you may be directed to third-party retailer websites. These retailers have their own privacy policies, and we encourage you to review them. We may earn a commission on purchases made through affiliate links, at no additional cost to you.
We use the Anthropic Claude API for AI-powered analysis of skin, hair, and nail images. Images sent for analysis are processed in real-time and are not stored or retained by Anthropic after processing. For more information, see Anthropic's Privacy Policy.
We use Google Firebase for authentication, cloud data storage, and push notifications. For more information, see Firebase Privacy and Security.
Most of your data — including scan history, beauty diary, routines, preferences, and gamification progress — is stored locally on your device. This data remains on your device and is not transmitted unless you sign in to sync.
When you create an account and sign in, your data is synced to Google Firebase (Firestore) to enable cross-device access. This includes:
Data stored in Firebase is protected by Firebase security rules and is only accessible by you (authenticated with your account).
We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), Firebase security rules for access control, and secure authentication via Firebase Auth. However, no method of electronic storage is 100% secure.
We do not sell your personal information. We may share data with:
GlowScan provides personalized product recommendations based on your skin, hair, and nail scan results. When you tap on a recommended product or click a "Shop" or "Buy Now" link within the app, you may be directed to third-party retailer websites, including but not limited to Amazon, Sephora, and Ulta Beauty.
GlowScan participates in affiliate marketing programs, which means we may earn a small commission when you purchase products through links in our app. This commission comes from the retailer at no additional cost to you. Your purchase price is the same whether or not you use our affiliate link.
Affiliate program partners may include: Amazon Associates, Sephora Affiliate Program, Ulta Beauty Affiliate Program, and select skincare and beauty brand partner programs. This list may be updated from time to time.
Your data is retained as long as your account is active. Local data persists until you clear the app data or uninstall the app. Cloud data is retained until you request account deletion.
You have the right to:
If you are a California resident, you have additional rights under the CCPA:
To exercise your CCPA rights, contact us at rozsagyenelaw1@gmail.com.
To delete your account and all associated data:
Upon request, we will delete your account and all associated data from our servers within 30 days. Local data on your device can be removed by uninstalling the App.
The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe we have collected data from a child under 13, please contact us immediately at rozsagyenelaw1@gmail.com.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the App. Your continued use of the App after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or your data, please contact us:
Rozsa Gyene
Email: rozsagyenelaw1@gmail.com
Website: myglowscan.com