Privacy Policy

• Account identifier — an anonymous UUID generated on your device. No name, email, or phone number is required to use the app.

• Face and outfit photos you scan in the app, plus the AI scores derived from them.

• Your conversations with Lumi, the AI coach, including the persona summary distilled from them.

• Optional: coarse device location, only if you grant permission, used solely for weather-aware coaching (e.g., SPF reminders on sunny days).

• Device basics: model, OS version, app version, language, timezone.

• Subscription receipt info, handled by Apple and RevenueCat. We never see your payment card.

When you tap Scan, Try-on, or send a message to the AI coach, the relevant photo and minimal context (your goal, age range, language) are sent from our servers to two third-party AI services so they can produce your result:

• fal.ai — generates hair, beard, makeup, nail, bandana, tattoo, and piercing previews on top of your photo. We send only the photo you are previewing and the prompt for the look you picked. fal.ai returns the generated image and does not retain or train on your photos.

• OpenAI — produces your face and outfit scores and the AI coach replies. We send the photo you are scoring or chatting about, plus your goal / age range to personalize the answer. OpenAI does not use API content to train its models (per OpenAI’s API data usage policy).

These transfers happen only when you initiate a Scan, Try-on, or coach message — never in the background. Photos are sent over TLS, processed for that single request, and not used to train any third-party AI model. Photos remain stored in your private Supabase bucket as described in section 3, and you can delete everything at any time via Profile → Delete Account.

• To compute your daily face and outfit scores and personalize them to your goals.

• To let Lumi remember your patterns and offer relevant advice across days and weeks.

• To generate outfit and hairstyle previews when you ask for them.

• To send you the notifications you opted into and improve product reliability through anonymous, aggregated diagnostics.

• We do not use your photos or conversations to train external AI models.

• Data is stored on Supabase (Postgres + Storage) with encryption at rest and TLS in transit.

• Photos sit in a private Storage bucket gated by row-level security; only your account can access yours.

• AI inference goes through a Cloudflare Worker proxy so OpenAI never sees your account ID directly. Image generation is handled by fal.ai under a similar arrangement.

• Push notifications use Apple Push Notification service and Expo Push.

• We do not sell your data, ever.

• We do not share your photos or chat history with advertisers, brokers, or anyone for marketing.

• We share strictly the data required to operate the service with our processors: Supabase (storage), OpenAI (AI inference, via proxy), fal.ai (image generation), RevenueCat and Apple (subscription billing), Expo and Apple (push notifications).

• Delete your account in one tap from Profile → Delete account. This wipes all scans, chats, persona summary, photos, and identifiers across all of the systems above within 30 days.

• Toggle notifications, location, and the AI coach on or off at any time.

• Export of data is available on written request to info@alimertgulec.com.

GlowTira is not designed for children under 13 and we do not knowingly collect data from anyone under 13. If you believe a child has used the service, write to info@alimertgulec.com and we will delete the data.

Our processors operate globally. By using the app you consent to your data being processed in the United States, the European Union, and Türkiye, with appropriate safeguards in place.

We may update this policy as the product evolves. The effective date above will change and significant updates will be surfaced in-app. Continued use after an update means you accept the revised policy.

Questions, requests, or concerns: info@alimertgulec.com.