Your information should stay useful, private, and under your control.

GlowsProtocol ("we", "us") provides educational wellness tools for GLP-1 medication users. Questions about this policy: [email protected].

• Account: email, name (optional), authentication identifiers from our auth provider.
• Assessment & profile: medication type, dosage, goals, risk scores, onboarding answers you submit.
• Photos (optional): face/body/progress images you upload and AI-generated analysis stored with your account.
• Progress logs: weight, energy, notes, and related metrics you enter.
• Billing: subscription status, plan type, and payment-provider identifiers — not full card numbers (handled by Lemon Squeezy).
• Usage analytics: first-party product events (e.g. assessment completed, checkout started) stored in our database — not sold to ad networks.

We use your information to operate the service: authenticate you, generate educational protocols and photo-analysis summaries, show your dashboard history, process payments, send transactional email (e.g. welcome), improve reliability, and prevent abuse.

Photo analysis and protocol text are produced using AI models accessed through our infrastructure. Outputs are educational estimates, not medical diagnoses — see our Medical Disclaimer.

We use trusted third parties to run GlowsProtocol. They process data on our behalf under contractual terms. Key categories:

When you upload a photo or request AI-generated content, image data and related prompts may be transmitted to OpenRouter and underlying model providers for processing. Do not upload content you do not want analyzed by these systems.

GlowsProtocol is operated from the United States. If you access the service from outside the U.S., your information may be transferred to, stored in, and processed in the United States and other countries where our subprocessors operate.

Those countries may have different data-protection laws than your residence. Where required, we rely on appropriate safeguards (such as standard contractual clauses offered by subprocessors) for cross-border transfers.

• Account & profile data: kept while your account is active and for a reasonable period after closure to resolve disputes, billing, or legal obligations.
• Photos & analysis: kept until you delete them on Photos or delete your account in Settings.
• Billing records: retained as needed for tax, fraud prevention, and payment-provider requirements.
• Analytics events: kept for product measurement; not used for third-party advertising profiles.
• Server logs: short-term retention by our host for security and debugging.

You can update profile and progress data in the dashboard. You may request access, correction, or deletion of personal data by emailing [email protected]. We will verify your identity before fulfilling requests.

We do not sell your personal information.

We use industry-standard measures including encrypted transport (HTTPS / TLS), encryption at rest via our infrastructure providers, private storage buckets for photos, row-level access controls (RLS) in the database, and signed webhooks for billing events. No method of transmission or storage is 100% secure.

GlowsProtocol is a cloud web application. It is not a local-first iPhone app and does not store medical data in the Apple Keychain.

When you upload a progress photo for analysis, the image is sent to our AI vision provider over encrypted connections so we can generate educational scores (including Glow Index / Glow Age when you have set your chronological age). Photos are stored in a private bucket tied to your account. We do not sell your health data. You can delete photos and your account from Settings.

GlowsProtocol is not directed to children under 18. We do not knowingly collect personal information from children.

We may update this policy as the product or law changes. We will revise the "Last updated" date above. Material changes may be communicated in-product or by email where appropriate.