Privacy Policy

Welcome to Glowy, operated by Glowy LLC ("Glowy," "we," "us," or "our"). Glowy is published on the Apple App Store under the listing name "myGlowy." This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Glowy mobile application and web platform, regardless of how you access it. By using Glowy, you consent to the practices described in this policy.

1. Information We Collect

Information You Provide Directly

• Account information: When you create an account, we collect your email address and password. Passwords are securely hashed and stored by our authentication provider; we never have access to your plaintext password.
• Profile information: You may optionally provide a display name and profile photo.
• Collection data: The votives you add to your collection, including names, quantities, images, and purchase prices.
• Wishlist data: The votives you save to your wishlist.
• Gift records: Information about votives you have given as gifts, including recipient names, occasions, and dates.
• Community catalog submissions: If you submit information about votives not in our catalog, we collect the votive name and any photos you upload.
• Social feed content: Photos, captions, votive tags, and likes you create in the social feed.
• Photos for AI identification: When you use the photo identification feature, we collect the photo you submit for processing.
• Communications: If you contact us at support@myglowy.app, we collect the content of your messages.

Information Collected Automatically

• Usage data: We may collect information about how you use Glowy, such as features accessed, search queries within the app, and interaction patterns. This helps us improve the app.
• Device information: We may collect basic device information such as device type, operating system version, and app version for troubleshooting and compatibility purposes.
• Log data: Our servers may automatically record information such as your IP address, access times, and referring URLs when you use Glowy.

Information We Do Not Collect

• We do not collect location data.
• We do not collect contacts or address book information.
• We do not use cookies for advertising or tracking purposes.
• We do not collect financial or payment information directly (subscription payments are processed by Apple's App Store or Google Play).

2. How We Use Your Information

We use your information for the following purposes:

• Providing the service: To operate your account, store your collection and wishlist data, display your social feed posts, and enable sharing features.
• AI photo identification: When you submit a photo for identification, we send the image to our AI service provider (Anthropic) for analysis. The AI identifies the color family of the votive in your photo to help you find it in the catalog. Photos submitted for identification may be retained to improve the accuracy of our identification features over time.
• Community catalog: To display user-submitted votive information and photos to all authenticated users, helping the community track discontinued and unlisted votives.
• Improving Glowy: To understand how users interact with the app, identify bugs, and prioritize new features.
• Communications: To respond to your support inquiries and, if applicable, to notify you of important changes to the app or these policies.

3. How We Share Your Information

We do not sell your personal information to third parties.

With Other Glowy Users

• Social feed: Posts, photos, captions, likes, and your display name are visible to all authenticated Glowy users.
• Community catalog: Votive entries and photos you submit to the community catalog are visible to all authenticated users.
• Shared collections and wishlists: If you enable sharing, your collection or wishlist is accessible to anyone with your unique share link, including unauthenticated visitors.

With Service Providers

We use the following third-party service providers to operate Glowy:

We require our service providers to protect your information and use it only for the purposes of providing services to Glowy.

For Legal Reasons

We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Glowy, our users, or the public.

Business Transfers

If Glowy is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your information.

4. Data Retention

• Account data: We retain your account information and associated data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except as noted below.
• Community contributions: Community catalog entries and social feed posts that have been shared with other users may persist after account deletion, as they have become part of the shared community resource. Your display name will be anonymized on these contributions.
• AI training data: Aggregated and anonymized data derived from photos submitted for AI identification may be retained indefinitely to improve our identification features, even after account deletion. Original photos will be deleted upon account deletion.
• Legal obligations: We may retain certain information as required by law or for legitimate business purposes, such as fraud prevention or dispute resolution.

5. Data Security

We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. These measures include:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing through our authentication provider
• Row-level security policies ensuring users can only access their own data
• JWT-based authentication on all private API endpoints
• Secure cloud infrastructure provided by our service providers

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

6. Your Rights and Choices

Access and Portability

You can view your collection, wishlist, gift, and profile data at any time within the app. You can also export all your personal data directly from the app at any time. If you would like a copy of all personal data we hold about you, contact us at support@myglowy.app and we will provide it within 30 days.

Correction

You can update your profile information, collection data, wishlist, and gift records directly within the app at any time.

Deletion

You may delete your account and all associated personal data directly within the app, or by contacting us at support@myglowy.app. We will process deletion requests within 30 days, subject to the retention exceptions described in Section 4.

Sharing Controls

You control whether your collection and wishlist are shared. Sharing is disabled by default and can be toggled on or off at any time from your profile page. Disabling sharing immediately deactivates your share links.

Opt-Out of AI Photo Processing

You are not required to use the photo identification feature. If you choose not to submit photos for identification, no photos will be processed by our AI service provider.

Email Communications

If you opted into marketing communications during signup, you may opt out at any time by contacting support@myglowy.app. Transactional communications (such as account confirmation and security notices) are required and cannot be opted out of while your account is active.

7. Children's Privacy

Glowy is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. We require users to confirm they are 13 or older during account creation. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@myglowy.app.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt out of sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at support@myglowy.app. We will respond within 45 days.

9. International Users

Glowy is operated from the United States. If you are accessing Glowy from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country. By using Glowy, you consent to this transfer.

If you are located in the European Economic Area (EEA) or the United Kingdom, you may have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, data portability, and the right to lodge a complaint with a supervisory authority. Contact us at support@myglowy.app to exercise these rights.

10. Third-Party Links

Glowy may contain links to third-party websites, such as glassybaby.com product pages. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by other reasonable means. Your continued use of Glowy after changes take effect constitutes your acceptance of the revised policy. If you do not agree to the revised policy, you must stop using Glowy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@myglowy.app

We will respond to inquiries within a reasonable timeframe.

This Privacy Policy is effective as of April 7, 2026.