Effective July 31, 2026
This policy covers the GLO iOS app and this website (theglo.app). GLO is built to keep as little about you as possible: there is no account with your name or email, your photos are never stored on our servers, and almost everything the app knows lives on your phone. Questions: support@theglo.app.
When you run a scan, the photo you take or choose is sent over an encrypted connection through our backend (hosted on Supabase) to Anthropic, the AI provider whose Claude model produces your scores and tips. The photo is processed to generate that analysis and is not saved on our servers — we keep no copy, and there is no photo library or face database on our side. Under Anthropic's commercial API terms, your photos are not used to train their models.
GLO does not identify you from your face. The analysis produces numeric scores and written tips; it does not create a biometric template or "faceprint," and it cannot be used to recognize you elsewhere. Your scan results and photos stay in the app on your device.
During onboarding GLO asks your age and gender, what you want to work on, and a few habit questions: how much you sleep, how much water you drink, how often you exercise, and how involved your skincare routine is. These answers are kept on your phone, and a copy is sent with each face scan — together with your previous scan's scores — so that the analysis and the tips it produces are built around you instead of being generic.
They travel the same path as your photo, and are treated the same way: through our backend to Anthropic, used to produce that one result, and not saved on our servers. Because some of these answers describe sleep, exercise and hydration, we declare them as health and fitness data on our App Store privacy label, even though we keep no record of them.
Each scan writes one usage record: a random anonymous user ID, a device identifier, the scan type (face or outfit), the date, processing-cost figures, whether the scan succeeded, and — for face scans — the overall score. We use these records to enforce scan limits, prevent abuse, power the leaderboard, and track our own costs. They contain no photos, no name, and no contact details.
You use GLO through an anonymous sign-in. We never ask for your name, email address, or password.
The leaderboard is optional. If you join, we store the display name you choose, your best face score, and an internal row ID; friends connect through invite codes. Other players see only your display name and score. When you join, we also record a salted hash of your IP address (not the address itself) to limit how many new accounts one network can create — a hash counts for 24 hours and is deleted once that window has passed. You can leave the board at any time in the app, which deletes your entry from our servers.
Subscriptions are billed by Apple. We use RevenueCat to know whether your subscription is active, keyed to the same random anonymous ID. RevenueCat also gathers those purchase events into subscription and revenue reports, which we read to understand how the app is doing overall. We never see your payment card, billing address, or Apple ID.
Your scan history and photos, your routine, streaks and badges, and the profile answers described above are stored on your device, and we keep no copy of any of them. (Your photo and profile answers are sent through our backend to Anthropic at the moment you run a scan, as described above, but nothing is retained there.) If you log out and don't return, the app clears all of it after 90 days. You can also erase everything immediately with the delete option in the app's Settings — that is what "delete my data" means in GLO, since there is no server-side account to go with it.
Only the processors that make the app work, and only for that purpose:
We do not sell your data, show ads, or share anything with data brokers or advertisers.
All traffic between the app, our backend, and our processors is encrypted in transit. The server-side tables are not readable by app clients at all — only our backend functions can access them.
GLO is not intended for children under 13, and we do not knowingly collect data from them.
If we change this policy, we will update this page and its effective date. Meaningful changes will be called out in the app.