Privacy Notice
Last updated: July 3, 2026
This notice explains what personal data GlowPath Ltd. collects, why we collect it, and the choices you have. It applies to the GlowPath Ltd. website and application.
Who we are
GlowPath Ltd. (also trading as "Glow Path") is the data controller for the personal data described in this notice. That means we decide why and how your data is processed. You can reach us at support@glowpath.app.
Data we collect
- Account data — your name, email, and authentication identifiers (including Google sign-in).
- Skincare profile & plan inputs — event details, skin goals, preferences, and progress you enter to generate your plan.
- Location — the city or postal code you provide to find nearby clinics.
- Transaction data — subscription status and billing records (payment card details are handled by Stripe, not stored by us).
- Usage data — basic technical and device information to keep the Service secure and working.
How we use your data
- to create and personalize your skincare plans and recommendations;
- to connect you with clinics and process leads and bookings you initiate;
- to provide, secure, and improve the Service;
- to process payments and manage your subscription;
- to communicate with you about your account and support requests.
AI processing
To generate your plan, the inputs you provide are sent to third-party AI model providers. We do not sell your data, and we do not use it to train third-party models beyond what is necessary to return your result.
Sharing
We share data only with service providers that help us operate the Service, including Supabase (database & authentication), Stripe (payments), Google (maps & sign-in), and our AI model providers. When you submit a lead or booking, the relevant details are shared with the clinic you chose.
Legal basis for processing
We process your data on the following legal bases: performance of a contract — to provide the Service, generate your plans, and manage your subscription; legitimate interests — to keep the Service secure, prevent fraud, and improve our product; consent — where you have opted in (for example, to submit a lead to a clinic or receive optional communications); and legal obligation — to meet tax, accounting, and regulatory requirements.
International transfers
Our service providers may process data outside your country, including in the United States and the EU. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Security
We use appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), encrypted storage, role-based access controls, and row-level security on our database. No system is perfectly secure, so please use a strong, unique password and keep your account credentials confidential.
Cookies
We use strictly necessary cookies and browser storage to keep you signed in and to remember your preferences. We do not use third-party advertising cookies. Payment pages provided by Stripe may set their own cookies as described in their privacy notice.
Retention
We keep your data for as long as your account is active and as needed to provide the Service and comply with legal obligations. You can delete your account to remove your profile and plan data.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, email support@glowpath.app.
Contact
For any privacy question, contact us at support@glowpath.app.