Your data, your control.

This Privacy Policy explains how GlowWise ("we", "our", "us") collects, uses, stores, and protects your personal data when you use our app, website, and services. We are committed to protecting your privacy in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU GDPR where applicable.

1. Who we are

GlowWise is an AI-powered wellness platform based in the United Kingdom. For privacy enquiries, contact us at privacy@glowwise.app.

2. Information we collect

We collect information you provide directly to us when you create an account and use GlowWise:

Account information

• Email address (required to create your account)
• Password (encrypted and never visible to us)
• Name, age, and gender (provided during onboarding)

Wellness information

• Your wellness priorities and goals
• Lifestyle information (sleep, stress, exercise, diet, hydration)
• Optional health context (symptoms, conditions, medications you choose to share)
• Daily check-in data (energy, sleep, stress, mood ratings)
• AI Coach conversations
• Optional photos you upload to track progress

Technical information

• Device type, operating system, and browser
• IP address (for security and fraud prevention)
• Usage data (which features you use and when)

3. How we use your information

We use your data only for the following purposes:

• To provide the service: generating personalised wellness guidance, tracking your patterns, and powering your AI Coach
• To improve GlowWise: understanding how features are used, identifying bugs, and developing new features
• To communicate with you: sending check-in reminders, weekly summaries, or service updates (only if you've opted in)
• To keep you safe: detecting fraudulent activity and protecting your account
• To meet legal obligations: complying with UK and EU law

4. Legal basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Consent: for processing health and wellness data, sending marketing emails, and using non-essential cookies
• Contract: for providing the GlowWise service you've signed up for
• Legitimate interest: for improving our service, security, and fraud prevention (always balanced against your rights)
• Legal obligation: where we must retain data to meet UK or EU law

5. How we store and protect your data

Your data is stored on secure servers operated by trusted infrastructure providers (Google Firebase). All data is encrypted in transit (TLS) and at rest (AES-256). Passwords are hashed using industry-standard algorithms and are never visible to us.

Data may be processed in the UK, EU, or other countries with adequate data protection standards. Where data is transferred outside the UK or EU, we use Standard Contractual Clauses or other approved safeguards.

6. Sharing your data

We never sell your personal data. We never share your wellness data with advertisers.

We share data only with:

• Infrastructure providers (Google Firebase for hosting and authentication, Vercel for the website) — these providers process data on our behalf under strict data processing agreements
• AI service providers (such as OpenAI, when our AI Coach is active) — to generate responses to your questions. We minimise the data sent to only what's necessary
• Payment processors (Stripe) — only billing information, never your wellness data
• Authorities — only when legally required (e.g. court order or law enforcement request)

7. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right to access: request a copy of all data we hold about you
• Right to rectification: correct any inaccurate or incomplete information
• Right to erasure ("right to be forgotten"): request deletion of your data
• Right to restrict processing: limit how we use your data
• Right to data portability: receive your data in a portable format (e.g. JSON or CSV)
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: revoke consent at any time
• Right to lodge a complaint: with the UK Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, email us at privacy@glowwise.app. We will respond within one calendar month.

8. Data retention

We retain your data only as long as necessary:

• While your account is active: we keep your data to provide the service
• If you delete your account: all personal data is permanently deleted within 30 days, except where we are legally required to keep records (e.g. tax records, fraud prevention)
• Inactive accounts: if your account remains unused for 24 months, we will email you and may delete it after a further 30 days

9. Children's privacy

GlowWise is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn we have collected data from someone under 18, we will delete it immediately. Parents or guardians who believe their child has provided us data should contact privacy@glowwise.app.

10. Cookies and tracking

We use cookies and similar technologies to keep you logged in and improve your experience. See our Cookie Policy for full details.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we'll email you and update the "Last updated" date above. Continued use of GlowWise after changes means you accept the updated policy.

12. Contact us

For any privacy questions, data requests, or concerns, please email privacy@glowwise.app. We aim to resolve every issue directly with you and will respond within one calendar month.

You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). We'd ask that you contact us first so we can address any concerns directly.