Privacy Policy

Last updated: October 14, 2026

1. Overview

This Privacy Policy explains how Glasify ("we", "us") collects, uses, stores, and shares information when you use our App, including facial scan images used to generate your skin analysis. Glasify is operated by Planting Software, a sole proprietorship registered in Norway, which is the controller of your personal data.

2. Information We Collect

3. How We Use Face Scan Images

Only after you actively agree before a scan, Glasify sends your face photo (or extracted skin metrics), your age if provided, and selected language through our Cloudflare-hosted backend to Anthropic’s Claude API. Anthropic uses these inputs to generate your cosmetic skin analysis and routine. We do not include your Apple account identifier, email or payment details in the AI request. You can cancel without sending the photo. We do not sell your images or authorize their use for model training.

4. Storage & Retention

Glasify does not persist the source photo in its database. Anthropic processes API inputs and outputs under its commercial terms and retention policy: standard API data is normally deleted within 30 days, subject to legal/safety exceptions and applicable model or account retention settings. Do not interpret account deletion in Glasify as immediate deletion from Anthropic’s systems. Your scan results and consent records are stored with your account until deletion; backups may take additional time to expire.

5. Biometric-Adjacent Data & Consent

Facial scan images, and any pre-extracted skin metrics derived from them, may constitute biometric or health-adjacent data under some laws (for example, the EU GDPR's special category data provisions, or Illinois' Biometric Information Privacy Act). We process this data only on the basis of your explicit, informed consent, captured via a timestamped confirmation you actively check before each scan — this consent record is stored server-side as evidence.

You may withdraw consent at any time by deleting your account in Settings, which also deletes your stored scan results, derived metrics, and consent records from our systems within a reasonable period.

6. Third-Party Sharing

We share data with: - Our AI analysis provider (Anthropic), to process scan images and generate results. - Apple, via Sign in with Apple and StoreKit, to authenticate you and process subscription purchases (we do not receive your payment credentials). - Cloudflare, which hosts our backend and database and stores your account, subscription status, scan results and consent records. - RevenueCat, which manages subscription status on our behalf, receiving your account identifier and purchase events from Apple (not your payment credentials). - Affiliate retail partners, including YesStyle, ONLY in aggregate or click-level form necessary to attribute purchases made through our product links (e.g., that a click occurred) — we do not share your face images or full scan results with retail affiliate partners.

We do not sell your personal data to data brokers.

Our commercial AI provider is required to provide protection at least equivalent to the protections described in this policy through contractual confidentiality, data-processing and security obligations. Anthropic’s Data Processing Addendum governs processing, subprocessors and international transfer safeguards. See Anthropic’s DPA and API retention policy.

7. Legal Basis & International Transfers

Where GDPR or similar law applies, we process face scan images based on your explicit consent (given at the time of scanning), given the sensitive nature of biometric-adjacent data. Data may be transferred to and processed in countries outside your own, using appropriate safeguards such as Standard Contractual Clauses.

8. Notifications

If you enable notifications, we schedule local, on-device reminders (ReplenishmentLoop) based on your estimated product usage. This scheduling happens on your device; we do not need to access your notification interactions to provide reminders.

9. Your Rights

Depending on your location, you may have the right to: access the personal data we hold about you; request correction or deletion of your data (including scan results); object to or restrict certain processing; and request a copy of your data in a portable format. To exercise these rights, contact privacy@glasify.app. You can also delete your account, including all scan results, directly in the App under Settings. You also have the right to lodge a complaint with your local data protection authority (in Norway: Datatilsynet).

10. Children's Privacy

Glasify is not directed at children under 18 and we do not knowingly collect face scan images or other personal data from children under that age. If you believe a child has provided us with data, contact us so we can delete it.

11. Security

We use industry-standard technical and organizational measures, including encryption in transit and at rest, to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated in-app or via the update notes on the App Store.

13. Contact Us

For privacy questions or data requests, contact privacy@glasify.app.

14. Cosmetic & Educational Disclaimer

Reminder: all results generated from your face scan images (SkinAgeScan, SkinScore, Glow Profile, and routine recommendations) are cosmetic and educational estimates only. They are not a medical diagnosis and this policy does not change that. See our Terms of Use for the full medical disclaimer.

Apple processes subscription payments, cancellations and refund requests. Manage subscriptions at https://apps.apple.com/account/subscriptions and request an eligible refund at https://reportaproblem.apple.com. Apple decides refund eligibility. For questions about the app or your privacy rights, contact contact@glasify.app or privacy@glasify.app.

Cloudflare hosts this website and processes connection information, including your IP address, to deliver and protect it. At the root URL we use the country code supplied by Cloudflare to select Norwegian for Norway, Swedish for Sweden, Danish for Denmark and English elsewhere. We do not request precise location or use a separate geolocation provider. Direct language links keep your choice.