1. Data We Collect

We collect only the data strictly necessary for the proper functioning of the application.

2. How We Use the Data

We use collected data to:

• Personalize the user experience
• Generate customized skincare routines and recommendations
• Track progress, rewards, and challenges
• Manage subscriptions and premium access
• Improve app functionality and performance
• Ensure security, moderation, and fraud prevention

3. Data Sharing

GlowBox AI does not sell or trade personal data. Data may only be shared when strictly necessary for:

• Payment processing
• Legal or regulatory compliance
• Technical operation of the app, including hosting, infrastructure, and security

All partners are required to follow appropriate data protection standards.

4. Data Access Control and Security

We implement strict access control rules, ensuring that:

• Personal data, progress, usage history, and subscription data are restricted to the individual user
• Public content such as videos, comments, likes, and challenges does not expose sensitive personal data
• Only authorized systems can create, update, or delete sensitive records
• Technical and organizational measures are in place to prevent unauthorized access

5. Public Content and Community Features

Some features allow public interaction, including:

• Comments
• Likes
• Participation in public challenges
• Viewing open educational content

By using these features, users acknowledge that such interactions may be visible to other users without revealing sensitive personal data.

6. Children’s Privacy

GlowBox AI is not intended for children under the age of 18 without appropriate parental consent.

When applicable, parental consent is required in accordance with applicable laws.

7. User Rights

Users have the right to:

• Access their personal data
• Request corrections or updates
• Request deletion of their data
• Withdraw consent at any time
• Request data portability, where applicable

Requests can be made through the app support channels.

8. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described in this policy or to comply with legal obligations.

9. AI Processing, Photos, and Deletion

GlowBox AI may process skincare questionnaires, uploaded facial photos, progress photos, and routine data to generate cosmetic skincare guidance and safety checks.

• Facial photos and progress photos may be stored in private storage for in-app analysis and history features
• When you delete stored facial or progress photos from the app, the app removes file references and revokes user-facing access immediately
• Permanent deletion of certain private media files may require completion by the platform storage service
• When you delete your account, related personal records are removed from the app immediately and any legally required order or subscription billing records are retained only in anonymized form where possible

10. Crash Reporting and Performance Monitoring

On Android, GlowBox AI uses Firebase Crashlytics and Firebase Performance Monitoring for app stability, diagnostics, and performance improvement only.

• These services may process a Firebase Installation ID, a Crashlytics installation UUID, crash traces, device and app version metadata required for diagnostics, app startup metrics, screen rendering metrics, HTTPS request timing, and limited custom workflow timing
• GlowBox AI configures these services to avoid sending names, email addresses, facial photos, progress photos, AI chat content, questionnaire answers, access tokens, payment information, and precise or approximate coordinates
• GlowBox AI does not use the Android Advertising ID for this monitoring setup and does not enable Google Analytics for Firebase as part of this Crashlytics and Performance Monitoring configuration
• For HTTPS performance monitoring, GlowBox AI records only sanitized host and path patterns without URL query parameters, tokens, or user identifiers
• Firebase encrypts collected monitoring data in transit using HTTPS and GlowBox AI uses the data only for diagnostics, app stability, and performance improvement
• For authenticated Android users, GlowBox AI keeps Firebase monitoring disabled until the user accepts the app consent flow

11. Changes to This Policy

We may update this Privacy Policy from time to time.

Significant changes will be communicated through the application.

12. SMS Communications

If you provide your phone number, GlowBox AI may use it to send marketing messages, order updates, abandoned cart reminders, and promotional offers via SMS in compliance with applicable laws.

We may use cookies and tracking technologies to determine when a cart is abandoned and to send relevant reminders.

We do not sell or share SMS consent or phone numbers with third parties for marketing purposes. SMS consent data is used solely for communication related to GlowBox AI services.

13. Contact Information

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

📧 Email: support@glowboxapp.com