Privacy Policy

Account information. When you create an account, we collect the name and email address provided by your Apple or Google sign-in. We don't collect passwords — authentication is handled entirely by Apple or Google.

Photos. When you use the face scan feature, your photo is sent to our server for processing. We use OpenAI's GPT Image 2 API to generate your facial simulation. Your original photo and the generated result are stored in your private account so you can access your scan history. Photos are stored in a secure, access-controlled environment. Only you can access your photos — they are never visible to other users, shared publicly, or used for advertising.

Usage data. We collect basic app usage information: which screens you visit, which features you use, and how often you open the app. This helps us improve the product. We do not track your activity outside the app.

Habit tracking data. If you subscribe, we store your daily habit check-ins (such as whether you completed strength training or skincare) and your weekly Volume Scores. This data is tied to your account and is not shared with anyone.

Food noise data. If you use the food noise tracker, your daily self-reported food noise levels are stored in your account. This is a personal journal entry — we don't analyze, share, or sell this data.

Weight loss goal. During onboarding, you tell us how much weight you're planning to lose. This is used solely to personalize your facial simulation. It is not shared with anyone.

GLP-1 status. During onboarding, you indicate whether you're currently on a GLP-1 medication, considering it, or just curious. This is used to personalize your experience. It is not shared with anyone, including pharmaceutical companies.

When you take a scan, your photo is sent to our backend server, which forwards it to OpenAI's image generation API for processing. OpenAI's API data usage policy states that data submitted via the API is not used to train their models. After processing, your original photo and the generated result are stored in your private account. We do not use your photos for training our own models, for marketing, or for any purpose other than delivering your scan results to you.

• We do not sell your data to anyone.
• We do not share your data with pharmaceutical companies.
• We do not use your photos for advertising or marketing.
• We do not use your photos to train AI models.
• We do not display ads in the app.
• We do not track you across other apps or websites.

Subscriptions are processed by Apple through the App Store. We use RevenueCat to manage subscription status. We do not collect or store your payment information — that is handled entirely by Apple. You can manage or cancel your subscription at any time through your iPhone's Settings › Apple ID › Subscriptions.

We use privacy-friendly analytics (Plausible) on our website to understand traffic patterns. Plausible does not use cookies, does not collect personal data, and is fully GDPR-compliant. In the app, we collect anonymous usage events to understand which features are used. We do not use third-party advertising SDKs or trackers.

Your account data, photos, and scan history are retained as long as your account is active. If you delete your account, all associated data — including photos, scan history, habit logs, and personal information — will be permanently deleted within 30 days.

You can request deletion of your account and all associated data at any time by emailing hello@glpface.app. We will process your request within 30 days. You can also delete individual scans from within the app.

GLP Face is intended for adults only. You must be at least 18 years old to use the app. We do not knowingly collect data from anyone under 18. If we learn that we have collected data from a minor, we will delete it promptly.

We use the following third-party services:

• Apple Sign In / Google Sign In — for authentication
• Supabase — for secure data storage and account management
• OpenAI — for AI image processing (photo sent to API, not used for training)
• RevenueCat — for subscription management
• Plausible — for privacy-friendly website analytics

Each of these services has its own privacy policy. We encourage you to review them.

You have the right to:

• Access your personal data (available in-app and by request)
• Delete your account and all associated data
• Export your data (by request to hello@glpface.app)
• Opt out of analytics (contact us)

If we make significant changes to this policy, we will notify you through the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

Questions or concerns about your privacy? Email us at hello@glpface.app.