Effective date: August 5, 2026
BodyGlow ("BodyGlow", "we", "us") is a body-skincare tracking app. This policy explains what data the app handles, where it goes, and the choices you have. The short version: your photos are analyzed, never stored; your scores stay under an anonymous account you can delete in one tap; we don't sell data or show ads.
Skin photos. When you scan or upload a photo, it is sent securely (encrypted in transit) to our server, which forwards it to Google's Gemini AI service to estimate cosmetic qualities of your skin (texture, tone, redness, blemishes). You choose which skin areas to photograph, and a photo may include your face (see "Face data" below). Your photos are processed transiently and are not stored on our servers — only the resulting numeric scores are saved. Photos you capture remain on your device in the app's local storage until you delete the app or your account. Photos are only ever analyzed with your explicit consent, which the app asks for before your first scan and which you can withdraw at any time in Settings → Photo analysis.
BodyGlow does not perform facial recognition and does not collect biometric face data. The app never uses face-detection, facial-landmark, or face-matching technology, and it never creates faceprints, facial geometry, templates, or any other data that could identify you from your face.
If you choose to photograph facial skin, that photo is handled exactly like any other skin photo: with your explicit consent, it is encrypted in transit, sent to our server (hosted on Supabase), forwarded to Google's Gemini AI service for one-time cosmetic scoring, and then discarded. Photos — including photos that contain your face — are never stored on our servers and are never shared with any third party other than Google Gemini, solely for this analysis. Google processes photos as our service provider to produce the scores; we do not permit their use for anything else. The only information retained from the analysis is your numeric cosmetic scores and a general area label (for example "face" or "arm"), stored under your pseudonymous account until you delete it via Settings → Delete account (or by emailing us). Photos remain on your device in the app's local storage until you delete the app or your account.
Questionnaire answers. If you choose the no-photo path (or weekly check-ins), your answers about how your skin looks and feels are used to compute the same kind of cosmetic scores. To build your personalized routine, your skin answers (skin type, goals, concerns, and sun exposure) are sent securely (encrypted in transit) to our server, which forwards them to Google's Gemini AI service — acting as our processor — solely to generate your routine. Answers carry no name, email, or other identifying details (see "Your account"); they are processed transiently, and only the derived scores and your routine are saved.
Skin scores and routine. The derived scores, your selected goals and body areas, and the skincare routine generated for you are stored under a pseudonymous account (see "Your account" below) so your progress history works across sessions.
Approximate location (optional). If you enable UV alerts, the app reads your device location, rounds it to roughly city scale (~1 km), and sends only those rounded coordinates to Open-Meteo (a weather service) to fetch the UV index. We never collect or store your precise location, and location is never used when the feature is off.
Purchases. Subscriptions are processed by Apple and managed through RevenueCat, which receives a pseudonymous user id and purchase state so your Pro access works across reinstalls. We never see your payment details.
Usage analytics. We use PostHog to understand how the app is used (screens viewed, onboarding steps completed, features used). Analytics events are tied to your pseudonymous user id. Your skin scores and photos are not sent to analytics.
Ad measurement (TikTok). We promote BodyGlow with ads and videos on TikTok. To measure which of them actually bring people to the app, the app includes TikTok's measurement SDK, which sends TikTok basic app events — install, app launch, and subscription purchase (price and product, not your payment details) — together with device information such as IP address and, only if you allow tracking in the iOS permission prompt, your device's advertising identifier (IDFA). If you decline, we rely on Apple's aggregate, privacy-preserving attribution (SKAdNetwork) instead. Your skin photos, questionnaire answers, and skin scores are never shared with TikTok or any advertiser. You can change your choice anytime in iOS Settings → Privacy & Security → Tracking.
We also use AppsFlyer, an attribution service, to work out which ads and networks bring people to BodyGlow. AppsFlyer receives basic app events (install, app launch, subscription events reported by our payment processor) together with device information such as IP address and device identifiers (and the advertising identifier only if you allowed tracking). The same rule applies: no photos, answers, or skin scores — only install and subscription measurement.
The app creates an anonymous account automatically (no email, name, or password) so your data has a home. It is identified only by a random id.
| Data | Recipient | Purpose | Stored there? |
|---|---|---|---|
| Skin photos (may include your face) | Supabase (our backend) → Google Gemini | AI cosmetic analysis | No — processed transiently, never stored |
| Skin answers (skin type, goals, concerns) | Supabase (our backend) → Google Gemini | AI routine generation | No — processed transiently; only the routine is stored |
| Derived skin scores, routine | Supabase (our backend) | Your progress history | Yes, until you delete |
| Rounded location (if UV alerts on) | Open-Meteo | UV forecast | Not by us |
| Purchase state | Apple, RevenueCat | Subscription access | Yes (purchase records) |
| Usage events | PostHog | Product analytics | Yes (analytics retention) |
| App events (install, launch, purchase) + device ad identifier (only with your tracking permission) | TikTok | Measuring our ads | Yes (per TikTok's retention) |
| App events (install, launch, subscription) + device identifiers | AppsFlyer | Install attribution across ad networks | Yes (per AppsFlyer's retention) |
We do not sell personal data, and we do not share it with data brokers. The only advertising-related sharing is the TikTok ad-measurement events described above — never your photos, answers, or scores.