Privacy Policy

Glassify sees your face and your skin. This page explains exactly what we collect, why, where it goes, and how to get rid of it.

Last updated: 3 September 2026

1. Who we are

Glassify is an iPhone app that builds a personalized skincare routine from your skin profile, your face scan, and the products you already own. In this policy, “Glassify”, “we”, and “us” mean the developer of the Glassify app. “You” means the person using it.

For anything in this policy, write to privacy@getglassify.com.

The short version. Your face photos and skin data are used to run your routine and nothing else. We do not sell them. We do not use them for advertising. We do not run third-party analytics or ad SDKs in the app. You can delete your account and everything in it from inside the app, and the deletion is immediate.

2. What we collect

Information you give us

Data

What it is

Why we need it

Account identifiers

A user ID, your email address, and your name, received from Sign in with Apple or Google Sign-In.

To create your account and sync your data across devices. If you use Apple’s Hide My Email, we only ever see the relay address.

Skin profile

Age range, skin type, sensitivity, and the skin concerns you select.

This is the primary input to your routine.

Your shelf

The skincare products you tell us you own, and any product you request we add to the catalog.

So your routine is built around what is already in your bathroom.

Face scan images

Photos of your face taken during a guided scan.

To run the skin analysis and to show you your scan history. See section 3.

Progress photos

Optional daily photos you take to track change over time.

To show change you cannot see in the mirror day to day.

Routine diary entries

Notes you write or dictate about your skin.

Stored so you can look back at them.

Information the app produces

  • Scan reports. Your overall skin score, estimated skin age, per-metric results such as moisture, texture, and redness, an inferred skin type, and the recommendations generated from them.

  • Routine and check-in history. Your generated morning and night routines, which steps you completed on which day, water check-ins, streaks, and in-app spark rewards.

  • Potential visualizations. An AI visualization of your baseline scan photo adjusted toward the goal you chose. It is a simulation, not a prediction, and results vary with your routine.

Information we collect automatically

Very little, and none of it for tracking. We do not embed third-party analytics, attribution, or advertising SDKs in the Glassify app. Our hosting provider keeps standard server logs, including IP address and timestamps, for security and reliability. Apple gives us aggregate, anonymous App Store and crash statistics that we cannot tie back to you.

Glassify does not track you across apps or websites owned by other companies, and does not ask for permission to do so.

Device permissions

  • Camera. Used for face scans and progress photos. Nothing is captured until you start a scan or take a photo.

  • Microphone. Used only when you dictate a skin diary entry. Speech is converted to text using Apple’s speech recognition. On devices that support on-device recognition this happens entirely on your phone; otherwise a short audio clip is sent to Apple to be transcribed. Either way Glassify stores only the resulting text, never the audio.

  • Notifications. Used for the morning and night routine reminders. Reminders are scheduled locally on your device.

  • Apple Health. Optional and read-only. See section 4.

You can turn any of these off in the iOS Settings app at any time. The rest of Glassify keeps working.

3. Face photos and skin data

We treat your face scan images and progress photos as sensitive personal data, and handle them under the special category rules of the GDPR even where local law might not strictly require it. That means:

  • We ask for your explicit consent before your first scan, and we explain what happens to the photo.

  • Photos are written to your iPhone with full file protection, so they are encrypted and unreadable while your device is locked.

  • If you are signed in, photos are also uploaded to a private cloud storage bucket that no other user can read. Access is scoped to your account at the database level and served through short-lived signed links.

  • Photos are never used to train a face recognition system, are never used to identify you, and are never used to build an advertising profile.

  • We do not sell, rent, or trade your photos or skin data. Ever.

What happens during a scan

  1. You take a guided photo in the app.

  2. Before anything leaves your phone, the app checks the shot locally using Apple’s on-device Vision framework, to confirm there is exactly one face and the framing is usable. That check runs entirely on your device, and a photo that fails it is never uploaded.

  3. Your photo is uploaded over an encrypted connection to our skin analysis provider. The analysis happens on their servers, not on your phone. Their API scores fourteen separate measures: wrinkles, firmness, acne, moisture, eye bags, dark circles, spots, radiance, redness, oiliness, pores, texture, and upper and lower eyelid droop. Your skin score, estimated skin age, and skin type are derived from those results. They process the image for that analysis and do not keep it as part of a Glassify archive.

  4. Glassify keeps your own copy of the photo and the resulting report so your history and Progress tab work.

  5. The measurements from your report and your skin profile, not your photo, are what feed routine generation.

Your photo is never sent to an AI text model. Routine generation receives your skin profile answers and numeric scan metrics only.

4. Apple Health

Connecting Apple Health is optional. If you connect it, Glassify reads the following and nothing else:

  • Water intake

  • Sleep analysis

  • Menstrual flow

  • Workouts

We use these to give your routine and check-ins context, for example relating a flare-up to a stretch of poor sleep. Glassify does not write anything back to Apple Health.

In line with Apple’s rules, Health data is never used for advertising or marketing, is never sold or shared with data brokers, and is never disclosed to a third party without your permission. You can revoke access at any time in the Health app under Sharing, then Apps.

5. How we use your information

  • To build and update your morning and night routines.

  • To run skin analysis and store your scan reports.

  • To show your progress over time, including photos, stats, and streaks.

  • To keep your data in sync across your devices when you are signed in.

  • To send the routine reminders you asked for.

  • To answer your support messages.

  • To keep the service secure, debug problems, and prevent abuse.

  • To meet our legal obligations.

We do not use your data for advertising, we do not profile you for marketing, and we do not make automated decisions about you that produce legal or similarly significant effects.

6. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use a small number of service providers, each bound to process data only on our instructions:

Provider

What they handle

Where

Our cloud database and storage provider

Authentication, database, and private file storage for your account, scans, photos, shelf, and routines

Cloud hosting

Our skin analysis provider

Skin analysis and the Potential visualization. Your scan photo is uploaded to their servers and processed there.

Cloud hosting

Our language model provider

Routine generation. Receives your skin profile answers and numeric scan metrics. Never receives your photos.

Cloud hosting

Apple

Sign in with Apple, App Store delivery, aggregate crash and usage statistics

Cloud hosting

Google

Google Sign-In, if you choose it. Google Sheets also stores the website waitlist, if you join it.

Cloud hosting

Framer

Hosting and cookieless analytics for this website. Framer does not touch the app or any app data.

Cloud hosting

Our feedback board provider

Our feedback and feature request board. Receives your user ID and name so your posts are attributed to you.

Cloud hosting

We may also disclose information if we are legally required to, or where it is necessary to protect our rights, your safety, or the safety of others. If Glassify is ever acquired or merged, your data may transfer as part of that transaction, and we will tell you before it does.

7. Storage and security

  • On your device. Scan images, progress photos, and their indexes are written with iOS complete file protection, so they are encrypted at rest and unreadable while your iPhone is locked.

  • In the cloud. Your data sits in a private storage bucket and database rows scoped to your account. Access is enforced on the server from your signed-in session, not from anything the app claims about itself, so no other user and no holder of our public app key can read your data.

  • In transit. Everything moves over TLS.

  • Signing in with Apple. Our Apple sign-in flow uses a hashed single-use nonce to prevent token replay.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal data, we will notify you and the relevant supervisory authority as the law requires.

8. How long we keep your data

Data

Retention

Account and skin profile

Until you delete your account.

Scan reports and scan photos

Until you delete your account.

Standalone progress photos

Until you delete your account, or until you delete the photo in the app.

Routines, check-ins, streaks, and diary entries

Until you delete your account.

Support messages

Up to 24 months after your last message.

Waitlist email address

Held in a private Google Sheet until you ask us to remove it, or 24 months after launch.

Server security logs

Short-lived, as retained by our hosting provider.

9. Deleting your account

You can delete your Glassify account and all of its data from inside the app. Open Profile, then Settings, then Delete Account, and confirm.

Deletion is immediate and permanent. There is no grace period and no recovery. When you confirm:

  • Your scan images and progress photos are erased from cloud storage.

  • Your authentication record is deleted, which cascades to your profile, shelf, scan reports, progress photos, routines, and check-in history.

  • Everything Glassify stored on your device is wiped and the app returns to its first-run state.

Signing out is different. Signing out leaves your data on your device so you can sign back in. If a different account signs in on the same iPhone, the previous account’s local data is wiped first, so nobody inherits someone else’s scans.

If you cannot reach the in-app option for any reason, email privacy@getglassify.com and we will do it for you.

10. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.

  • Correct data that is wrong or incomplete.

  • Delete your data, which you can do yourself at any time in the app.

  • Receive a copy of your data in a portable format.

  • Object to or restrict certain processing.

  • Withdraw consent you previously gave.

  • Avoid discrimination for exercising any of these rights.

To exercise any of these, email privacy@getglassify.com. We will respond within 30 days. We do not charge for this and we will not treat you differently for asking.

If you are in California: we do not sell or share your personal information as those terms are defined by the CCPA and CPRA, and we have not done so in the preceding 12 months. We do not knowingly collect or sell the personal information of anyone under 16.

If you are in South Korea: you may request access, correction, deletion, and suspension of processing of your personal information under PIPA, using the same contact address above.

11. This website and the waitlist

This website is built and hosted on Framer, which is separate from the Glassify app. Framer never receives your app account, your photos, or your skin data.

Analytics, and why there is no cookie banner

We use Framer’s built-in analytics to see how many people visit and where they arrive from. It does not use cookies and does not create a persistent identifier for you. IP address and user agent are hashed with a secret that rotates every 24 hours, so a visit cannot be traced to you or followed from one day to the next.

Because nothing is stored on your device and no personal data is collected, this site does not need a cookie banner and does not show one. We do not run Google Analytics, the Meta pixel, or any advertising or retargeting tag. If we ever add one, a consent banner goes up before it does, and this section changes first.

The waitlist

If you join the waitlist, your email address and the date you signed up are sent to a private Google Sheet in our Google Drive. That sheet is the only place the list lives, and only we can open it.

We use it for one thing: to email you when the beta opens. We do not add you to a newsletter, we do not sell or pass your address to anyone, and every email we send includes a way to be removed. You can also email privacy@getglassify.com at any time to be taken off the list, and we will delete the row.

12. Children

Glassify is not directed to children. You must be at least 16 years old to create an account, or older if your country sets a higher age for consenting to this kind of data processing. We do not knowingly collect personal information from anyone under that age. If you believe a child has given us their data, email privacy@getglassify.com and we will delete it.

13. International transfers

Our service providers operate globally, so your data may be processed in countries other than your own, including the United States, under the safeguards described in section 7.

14. Changes to this policy

If we change this policy, we will update the date at the top of the page. For anything that materially changes how we handle your data, we will tell you in the app or by email before it takes effect, and where the change requires it, we will ask for your consent again.

15. Contact

Questions, requests, or complaints about privacy go to privacy@getglassify.com. A person reads every one of them.

© 2026 DEAR28 (DBA Glassify).