Glis (“Glis,” “we,” “us,” “our”) is provided by Glane Technologies Ltd, trading as Glane Labs. This Privacy Policy explains what information we collect through the Glis app, how we use it, who we share it with, and the choices and rights you have. By using Glis, you agree to the collection and use of information as described in this policy.
1. Information We Collect
Account Information: When you create an account, we collect your email address and authentication credentials. If you sign in with Google, we receive your name, email address, and profile picture from Google.
Profile & Skincare Information: To personalize your experience, we collect information you provide during onboarding and use, including your birth date, skin type, skin concerns, skincare goals, and current skincare routine.
Photos: Glis’s core feature is AI-powered skin analysis, which requires photos of your face. We collect:
- Photos you take or select for skin analysis (front/side angles)
- Progress photos used to track changes over time
- Photos of skincare products or ingredient labels you scan
- Any images you share with our AI chat assistant
Voice Recordings: If you use voice input in chat, we collect the audio you record. It is transcribed to text, and the transcription becomes part of your chat history.
Chat Content: Messages you send to and receive from our AI skincare assistant, including any text, images, or transcribed voice you include.
Notes and Saved Products: Personal notes you save in the app, and products you add to your product library.
Location: With your permission, we collect your location — including in the background, when the app is closed — to provide accurate weather and UV index data for personalized sun-protection and skincare advice.
Health Data (Apple Health): If you connect Apple Health, we read your sleep analysis data (read-only — we never write to Apple Health) to inform skincare recommendations, with your explicit consent via iOS permissions.
Automatically Collected Information
- Device information (device model, OS version, unique device and advertising identifiers)
- App usage and interaction data
- Crash and error diagnostic data
- Push notification token, so we can send you reminders and updates
- A device-integrity attestation signal (Android Play Integrity), used only to detect abuse of free-tier limits — not for tracking or advertising
Payment Information: Subscriptions are purchased and billed through the Apple App Store or Google Play. We do not receive or store your payment card details.
2. Sensitive Information
Some information Glis collects can reveal, or be used to infer, information about your health — particularly your skin analysis photos and the resulting scores (e.g., acne risk, skin barrier condition). We treat this as sensitive information under applicable data protection law: it is used solely to generate your personal skincare analysis and recommendations, is never used for advertising, and is never sold to third parties.
3. How We Use Your Information
We use the information we collect to:
- Generate your skin analysis, health scores, and personalized skincare routines, including through the use of various technologies such as machine learning and artificial intelligence
- Track your progress over time by comparing scans against your baseline
- Power the AI chat assistant, including responding to text, images, and voice
- Send you notifications about your routine, scan availability, and account activity
- Provide weather- and UV-based recommendations based on your location
- Process your subscription and manage your account
- Maintain the security of the app and prevent abuse of free-tier limits
- Improve our app through aggregated usage analytics
- Respond to support requests
- Comply with our legal obligations
We do not use your skin analysis photos or health-adjacent scores for advertising, and we do not sell your personal information.
4. Legal Basis for Processing (UK/EEA Users)
Where UK GDPR or EU GDPR applies, we rely on the following legal bases to process your information: your consent (e.g., for location and Apple Health data), performance of a contract (providing the Service you signed up for), and our legitimate interests (e.g., securing the app, preventing abuse of free-tier limits, and improving the Service), balanced against your rights and freedoms.
5. How We Share Your Information
We do not sell your personal information. We may share it with:
- Service providers who perform functions on our behalf, such as backend hosting and data storage, account authentication, processing photos and messages to generate your analysis and chat responses, subscription and billing management, product analytics, crash and error monitoring, and customer support. These providers are contractually restricted from using your data for their own purposes.
- Apple or Google, to process your subscription.
- Google, if you choose to sign in with your Google account.
- Parties required by law, court order, or legal process.
- Parties as needed to protect the rights, property, or safety of Glis, our users, or the public.
- A successor entity in connection with a merger, acquisition, or sale of assets (you would be notified).
- Any party, with your explicit consent.
6. International Data Transfers
Some of our service providers process information outside the United Kingdom, including in the United States. Where we transfer your information internationally, we rely on appropriate safeguards recognised under UK data protection law, such as the UK’s International Data Transfer Addendum or equivalent standard contractual clauses, to ensure your information receives an adequate level of protection.
7. Data Retention & Deletion
We retain your information for as long as your account is active, or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. You can permanently delete your account and all associated data at any time in Settings → Delete Account. This immediately and permanently erases your profile, photos, scan history, routines, notes, products, and chat history from our systems. Deleting your account does not automatically cancel an active subscription — that must be cancelled separately through the App Store or Google Play.
8. Your Privacy Rights (UK Users)
As a UK-based service, if you are a UK resident, you have the following rights under the UK GDPR and Data Protection Act 2018:
- Access — request a copy of the personal information we hold about you
- Rectification — correct inaccurate or incomplete information
- Erasure — request deletion of your information (see Section 7)
- Restriction — request that we limit how we use your information
- Portability — receive your information in a portable, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, where processing is based on consent, without affecting processing carried out before withdrawal
To exercise any of these rights, email [email protected]. We may need to verify your identity before fulfilling your request, and we will respond within the timeframes required by law. You also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk.
9. Your Privacy Rights (EEA & Other International Users)
If you are located in the European Economic Area or Switzerland, you have rights materially equivalent to those in Section 8 under the EU GDPR, and may lodge a complaint with your local data protection authority. If you are located elsewhere, we will honour your applicable local privacy rights on request to [email protected] to the extent required by law.
10. Your Privacy Rights (California Residents)
If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what personal information we collect, request deletion of your information, correct inaccurate information, and opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioural advertising.
11. Children’s Privacy
Glis is not directed to, and may not be used by, children under 13. Users between 13 and 17 may only use Glis with the consent and supervision of a parent or legal guardian. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete it and close the associated account promptly.
12. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls on our backend systems, and restricted employee access to personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email, and will update the “Last Updated” date above. Your continued use of Glis after changes take effect constitutes your acceptance of the updated policy.
14. Contact Us
Questions about this Privacy Policy, or to exercise any of your privacy rights:
Email: [email protected]
Developer: Glane Technologies Ltd (d/b/a Glane Labs)