Privacy Policy

Last updated: 25 May 2026

Glema ("we", "us") provides an AI-assisted skincare-routine app for iOS. This policy explains what personal information we collect, why we collect it, who we share it with, and how you can control it.

This is a draft prepared for App Store submission. The published version will be revised before public launch.

1. Who is the controller

The publisher of the Glema app is Sergey Zaturanov, the natural person operating the service. Contact: privacy@glema.app.

2. What we collect

Account data. When you sign in we receive an Apple identifier (from Sign in with Apple) and, if you choose the email option, an email address. If Apple relays a private email, that's what we store — we do not see your real address.

Profile and routine data. Information you enter to receive recommendations: your date of birth, skin type, concerns, the products on your shelf, and the routine calendar we generate from these inputs. We use your date of birth to confirm you are 18 or over and to tailor advice to your age; we never display an age back to you and never share it.

Skin photos. Photos you upload for analysis. We use them only to generate your recommendations and store them on your device and our servers. You can delete them at any time from inside the app. One exception: if you start the optional Deep Face Scan inside a Coach consultation, that single photo is sent to Perfect Corp. — with your explicit consent, given in the app. See § 4.

Device and usage data. App version, iOS version, device model, push notification token, language, time zone, and approximate location (only when you grant Location permission for UV-index advice). We log error events and explicit product events for diagnostics and product improvement.

Subscription data. If you purchase a Pro subscription, Apple sends us your subscription status (not your card number). We never see your payment details.

We do not collect data from children. The service is intended for users 18 and over.

3. Why we use this data

To run the service: generate your routine, send reminders, sync state.
To improve recommendations: analyze patterns in usage, both aggregated and — for your own account — over your own history.
To develop our own skin-analysis technology. We keep a copy of your skincare data (see § 6) and use it to build and improve our own models for analysing skin, so the app's assessments get better over time. This is our own work on our own systems; the data is not sold, not shared for this purpose, and not used for advertising.
To keep the service safe: detect abuse, debug crashes, monitor reliability.
To respond to legal obligations when we receive a valid request.

We do not sell your personal data and we do not use your data for advertising.

4. Who we share it with

We use third-party processors strictly to operate the service:

Amazon Web Services (US) — hosting, databases, file storage.
Apple (US) — Sign in with Apple, push notifications (APNs), in-app purchases, distribution via the App Store.
Anthropic — large-language model inference for routine generation, via AWS Bedrock. Anthropic processes your prompts but does not use them to train Anthropic's models. (This is about Anthropic. What we do with your data is in § 3 and § 6: we do use it to develop our own skin-analysis technology.)
Google (Gemini, SerpAPI) — web-grounded search to enrich recommendations.
Sentry (US) — crash and error reporting (errors only, no replay).
PostHog (US) — product analytics on an explicit-events basis. Autocapture is disabled.

Each of the above is contractually bound to use your data only on our instructions. We share the minimum data needed for each integration.

Perfect Corp. (YouCam AI Skin Analysis) — a separate case. If you start the optional Deep Face Scan inside a Coach consultation, that face photo is sent to Perfect Corp., which analyses it and returns skin metrics (redness, moisture, pores and similar). It is sent only with your explicit consent, given in the app, and only for that scan.

Unlike the providers listed above, Perfect Corp. does not act on our instructions: it is an independent provider operating under its own Terms of Service and Privacy Policy, which we cannot vary. Perfect Corp. states that uploaded photos are stored for one day and then deleted automatically, and that it does not store biometric identifiers; it does not use facial recognition to identify you. We link its documents rather than restate them, so you can read the terms that actually apply.

Regular face scans, and every other face photo, stay inside our infrastructure.

5. International transfers

Data is processed primarily in the United States (AWS us-east-1). If you use the app from outside the US, your data is transferred to the United States under standard contractual safeguards.

6. How long we keep your data

Account and routine data: as long as your account exists.
Skin photos: until you delete them or your account.
Error reports: 90 days.
Analytics events: 12 months.
Backups: up to 35 days (database point-in-time recovery).

We keep your skincare data for the life of your account — we do not delete older records over time. That deliberately includes the results of every skin scan you have taken: the scores, the written description of your face that the analysis produces, and, if you entered it, your menstrual-cycle information, which is used to explain why a score moved. We hold this to see how skin changes over months and years, and to develop our own skin-analysis technology (§ 3).

We also keep a second, separate copy of this data in cold storage, so a value you changed is not lost when the app overwrites it. That copy is not read in normal operation, is covered by the same retention as your account, and is deleted with it.

When you delete your account we erase your personal data — from production and from that cold copy — within 30 days. Anonymized aggregate data may persist for analytics.

7. Your rights

You can:

Access and export your data from the app's Profile screen.
Edit or delete your profile, products, and routine entries at any time.
Delete your account from Profile → Account → Delete account.
Contact privacy@glema.app for any other request, including under the GDPR, UK GDPR, or CCPA where applicable.

We respond to verified requests within 30 days.

8. Security

We encrypt data in transit (TLS) and at rest. Access to production systems is restricted to the publisher. We do not store passwords for the in-app account — Sign in with Apple and the email code flow do not require one.

9. Changes to this policy

We will update this page when the service or applicable law changes. Material changes will be highlighted in the app or by email when we have one.

10. Contact

privacy@glema.app