Privacy Policy
Who we are
Glimra is built and operated by an independent developer ("we", "us"), not a corporation with a data business. For anything in this policy, contact support@glimra.app.
Your account
Glimra requires an account (Google, Apple, or email and password), handled by Firebase Authentication (Google Ireland Ltd). We store your email address and an account identifier. Passwords are handled by Firebase; we never see them.
What we process, and where it goes
1. Data synced to your account
Your scan history and scores, scan photos, routine and completion streaks, quiz answers, coach chat context, and reminder settings are stored on your device and synced to your account so they survive phone changes. They live in Google Firebase (Cloud Firestore and Cloud Storage) in EU data centres, protected by rules that make your data readable by your account only. We never use it for anything except showing it back to you.
2. Photos and AI analysis
Skin analysis sends your selfie, over our own server, to an AI provider that produces your skin scores. This happens only for photos you take or pick for a scan. Our current providers:
- Vision analysis: Moonshot AI: processes the photo to produce skin scores.
- Text generation (coach replies, routine text, daily tips): DeepSeek: receives your questions and skin profile context, never your photos.
Providers act as our processors and process this data under their own terms; photos are used to generate your results, not retained by us on the AI side, and we do not permit providers to use them for model training where the provider offers that control. If we change providers, this list changes with them.
3. Purchases
Subscriptions are processed by Apple or Google and managed through RevenueCat, which holds a pseudonymous purchase record tied to your account identifier (no name, no card details; payment data stays with Apple/Google).
4. Analytics and feedback
We use Firebase Analytics to count product events (e.g. "scan completed", "paywall viewed") so we can improve the app. No photos, scores, or chat content are included. If you send written feedback through the in-app rating prompt, the text and star rating are stored in our database together with your account identifier.
5. Shop links
Product "View on…" buttons open the retailer's site with an affiliate code. We may earn a commission at no extra cost to you; the retailer's own privacy policy applies from the moment their site opens. We receive no record of what you buy.
What we don't do
- No sale or sharing of personal data for advertising.
- No third-party ad trackers, no ads.
- No use of your photos or results for anything except your own analysis.
Legal bases (EEA/UK)
- Contract: providing the app you signed up for: account, sync, analysis, and the subscription you purchased.
- Consent: optional features such as reminders.
- Legitimate interest: minimal product analytics and abuse prevention.
International transfers
Your synced data stays in EU data centres. Our AI providers may process analysis requests outside your country, including outside the EEA. Where required, such transfers rely on appropriate safeguards such as Standard Contractual Clauses.
Retention and deletion
Your data is kept while your account exists. Profile → Delete all my data erases everything on your device immediately and schedules your account and its cloud copy for permanent deletion. A 30-day recovery window protects against accidental deletion (a mistaken tap, kids with the phone): signing back in within 30 days cancels the deletion and restores your data; after 30 days the account, cloud data and photos are permanently and irreversibly erased. If the deletion request cannot reach us at that moment (for example offline), email support@glimra.app and we will remove it. Photos sent for analysis are used to generate your results and are not retained by us on the AI side.
Your rights
Depending on where you live (GDPR, UK GDPR, CCPA and similar), you may have rights to access, correct, delete, or port your data, and to withdraw consent. The app itself is the most direct tool: Profile → Export my data gives you a portable copy, and Delete all my data removes everything. For anything else, email support@glimra.app. You may also lodge a complaint with your local supervisory authority.
Children
Glimra is for users aged 13 and up. It is not directed at children under 13, and we do not knowingly process their data.
Changes
We'll update this page when the policy changes and update the date above. Material changes will be highlighted in the app.