GlowFood
Privacy Policy
Effective date: October 3, 2026
GlowFood is operated by Muse-Sick LLC, a Delaware limited liability company.
The short version
- We use your selfies, meals and answers to give you your glow score and food suggestions, and for nothing unrelated to that.
- Your photos are stored privately. We don’t use them to recognize or identify you.
- We never sell your personal information, we don’t show ads, and we don’t use your data for targeted advertising.
- Health data is only read with your permission, is never written to, and is never used for marketing.
- You can delete your account and everything in it from the app at any time (Profile → Delete account).
1. Who we are
This Privacy Policy explains how Muse-Sick LLC, doing business as GlowFood (“GlowFood”, “we”, “us” or “our”), collects, uses, shares and protects personal information when you use the GlowFood mobile app, the website at glowfood.app, and related services (the “Service”). Muse-Sick LLC is the “controller” of your personal information, which means we decide how and why it is processed. This policy should be read together with our Terms of Use.
GlowFood is a wellness app, not a healthcare provider. We are not a “covered entity” under the US Health Insurance Portability and Accountability Act (HIPAA), and information you share with GlowFood is not protected health information under HIPAA. We protect it as described in this policy. Nothing in GlowFood is medical advice, and AI-generated results can be inaccurate. For serious or persistent skin or health concerns, please see a doctor.
2. Information we collect
Information you give us
| Category | Details |
|---|---|
| Account | When you open the app we create an account with a random identifier. If you link Sign in with Apple, Google or an email code, we receive and store your email address (which may be an Apple private relay address) and an account identifier from that provider. |
| Profile answers | What you tell us during setup and in your profile: your first name or nickname, skin goals, skin type, diet, food allergies, eating habits, other apps you use, reminder preferences, language, and, if you choose to share it, information about your menstrual cycle (such as your current phase). |
| Selfies | Photos of your face that you take or upload for a skin check-in, and the scores we create from them (Calm, Hydration, Clear, Radiance). |
| Meals | Food photos, barcodes and nutrition labels you scan, the date and type of meal, the results we create (foods, scores, nutrient estimates, tips), and any edits you make. We also store a one-way fingerprint (hash) of each photo so the same photo gets a consistent result. |
| Messages | Support requests, feature ideas, problem reports, and the reason you give if you delete your account, along with your account identifier. |
Information from your device and other sources
| Category | Details |
|---|---|
| Health data | Only if you connect Apple Health or Health Connect: sleep, water intake, workouts and menstrual cycle data. See section 4. |
| Purchases | Your subscription status, products purchased, transaction identifiers and related information from Apple, Google and Superwall. We never receive your full payment card details. |
| Device and usage | Device model, operating system, app version, language and region settings, time zone, IP address, app interaction events (such as which screens and offers are shown), and diagnostic and error logs. |
| Product data | Product and nutrition information for barcodes you scan, from public food databases. |
The app only uses your camera, photo library, health data and notifications after you grant permission, and you can change these permissions at any time in your device settings. Reminders are scheduled on your device. We do not collect your precise location, contacts, or microphone audio.
3. Photos and AI processing
- Selfies and food photos are sent over an encrypted connection to our servers and to our AI provider (OpenAI) to create your scores and results. AI-generated results can be inaccurate, and they are not reviewed by a human or a medical professional.
- We do not use your photos to identify you or for facial recognition, and we do not create or store face geometry, faceprints or other biometric identifiers or templates. We analyze how your skin looks in a photo (for example, redness or dryness), not who you are.
- Your photos are stored in private storage that only your account can access, so you can see your history. They are never made public.
- We do not sell your photos, use them for advertising, or use them to train AI models. Our AI provider processes them on our behalf under its API terms, which do not allow it to use them to train its models. It may keep them for a limited time for safety and abuse monitoring under those terms.
- Our use of AI does not make decisions about you that produce legal or similarly significant effects.
4. Health data
If you choose to connect Apple Health (HealthKit) on iPhone or Health Connect on Android, GlowFood reads only the data types you allow: sleep, water, workouts and menstrual cycle. We use this data only to tailor your glow food and meal suggestions to your day, for example suggesting more water-rich foods after a short night’s sleep. Specifically:
- When you scan a meal, a short text summary (for example, “slept 6 hours, 1 workout”) may be sent with it to our servers and our AI provider so your tip can reflect your day.
- We store whether you have connected health data, and a cycle-phase answer derived from your last period start date. We do not copy your raw health records to our servers.
- GlowFood never writes data to Apple Health or Health Connect.
- We never use health data for advertising, marketing or data mining, never sell it, and never share it with data brokers, advertisers or insurers.
- Our use of data received from Apple HealthKit and Google Health Connect complies with Apple’s and Google’s health data policies, including the Health Connect Permissions policy and its Limited Use requirements.
- You can revoke access at any time in the Health app (iPhone) or Health Connect settings (Android).
5. How we use information
| Purpose | Legal basis (EEA/UK) |
|---|---|
| Provide the Service: create your account, analyze selfies and meals, show scores, nutrients, suggestions and progress, and keep your history in sync across devices. | Performance of our contract with you. Explicit consent for health, cycle and selfie data. |
| Personalize suggestions to your goals, skin type, diet, allergies and, if connected, your health data. | Contract. Explicit consent for health and cycle data. |
| Process subscriptions, offers and purchases, and show subscription screens. | Contract. Legitimate interests in running our business. |
| Respond to support requests and feedback, and send service messages (such as sign-in codes). | Contract. Legitimate interests. |
| Keep the Service safe and reliable: prevent fraud and abuse, enforce usage limits, debug and fix errors. | Legitimate interests in protecting our users and the Service. |
| Improve the Service, using aggregated or de-identified information where possible. | Legitimate interests. |
| Comply with law, respond to lawful requests, and enforce our Terms. | Legal obligation. Legitimate interests. |
We do not sell personal information, “share” it for cross-context behavioral advertising, or use it for targeted advertising. We do not send marketing emails unless you have agreed to receive them. We use sensitive information (such as health, cycle and selfie data, and account log-in) only as needed to provide the Service you request and for the other purposes allowed by law. We do not use it to infer characteristics about you for other purposes.
6. How we share information
We share personal information only as described below. Our service providers (also called “processors”) act on our instructions, are bound by contract to protect your information, and may not use it for their own purposes.
| Who | Why |
|---|---|
| Supabase | Hosts our database, sign-in, server functions and private photo storage. |
| OpenAI | Analyzes selfies, meal photos, labels and related context (such as goals, diet, allergies and a short health summary) to produce your results, and creates the generic food images shown in the app. |
| Superwall | Shows subscription screens and offers, and manages subscription status, linked to your account identifier. |
| Apple and Google | Sign-in (if you choose it), app distribution, payments and subscriptions, and health data on your device. |
| Resend | Delivers sign-in code emails and forwards your support messages to our inbox. |
| Open Food Facts | Receives only the barcode number you scan, to look up product information. No account or personal information is sent. |
We may also disclose information: (a) if required by law, subpoena or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property or safety of GlowFood, our users or others; (b) to professional advisers, such as lawyers and accountants, under confidentiality obligations; (c) to a successor or acquirer in connection with a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, in which case it will remain subject to this policy; or (d) with your consent or at your direction. We may share aggregated or de-identified information that cannot reasonably be used to identify you, and we will not try to re-identify it.
7. How long we keep it
- Account, profile, scans, meals, photos and messages: kept while your account exists, so you can see your history. You can delete individual meals in the app at any time.
- When you delete your account (Profile → Delete account), we permanently delete your photos, then your account, profile, skin scans, meals and messages. Deletion from routine backups and logs happens automatically on their normal rolling cycle.
- Purchase records are kept by Apple, Google and Superwall under their own policies, and we may keep limited records where needed to meet legal, tax or accounting obligations, resolve disputes, or enforce our agreements.
- AI provider: as described in section 3, our AI provider may keep submitted content for a limited time for safety and abuse monitoring.
8. Security
We use administrative, technical and physical safeguards designed to protect your information. These include encryption in transit, private photo storage that only your account can access, database access rules that limit each account to its own records, and limited staff access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the authorities as required by law.
9. Your choices and rights
- In the app: view and edit your profile answers and meals, delete meals, and delete your account and all its data.
- On your device: turn off camera, photo, health or notification access at any time.
- Subscriptions: manage or cancel in your App Store or Google Play account.
- By email: ask for access to, a copy of, correction of, or deletion of your information, or withdraw consent, by emailing [email protected] with the subject “Privacy Request”.
We may need to verify your identity before acting on a request, for example by asking you to send it from the app or from the email linked to your account. You may use an authorized agent where the law allows; we may ask for proof that the agent is authorized. We will respond within the time required by law, and we will not discriminate against you for exercising your rights.
10. US state privacy rights
Depending on where you live (including California, Colorado, Connecticut, Delaware, Oregon, Texas, Virginia and other states with consumer privacy laws), you may have the right to: know and access the personal information we collect about you; receive a portable copy; correct inaccurate information; delete your information; opt out of the sale or sharing of personal information, targeted advertising and certain profiling; and limit the use of sensitive personal information. We do not sell or share your personal information, do not use it for targeted advertising or profiling that produces legal or similarly significant effects, and use sensitive personal information only for permitted purposes, so there is nothing to opt out of. We honor Global Privacy Control (GPC) signals as an opt-out request where the law requires it.
To exercise your rights, email [email protected]. If we deny your request, you may appeal by replying with the subject “Privacy Appeal”. We will respond to your appeal within the time required by law, and if you are not satisfied, you may contact your state Attorney General.
California notice at collection
In the past 12 months we have collected the following categories of personal information, for the business purposes described in section 5, and disclosed them to the service providers described in section 6: identifiers (account identifier, email, IP address); customer records (name or nickname); characteristics of protected classifications (sex-related information such as menstrual cycle, if you share it); commercial information (subscription and purchase history); internet or other electronic network activity (app interactions and diagnostics); sensory information (photos you submit); inferences (skin scores and food preferences); and sensitive personal information (account log-in, health information, and photos of your face). We keep each category for the periods described in section 7. We have not sold or shared personal information, and we have no actual knowledge of selling or sharing personal information of consumers under 16. California residents may also request information about disclosures to third parties for their direct marketing purposes under California Civil Code § 1798.83; we do not make such disclosures.
11. Consumer health data notice
This section is our Consumer Health Data Privacy Policy for the purposes of the Washington My Health My Data Act, Nevada SB 370, Connecticut law, and similar laws. “Consumer health data” here may include selfie-based skin readings, skin goals and skin type, food allergies, diet, menstrual cycle information, and health data you connect (sleep, water, workouts and cycle).
- What we collect and where it comes from: the categories above, directly from you, from your device’s health platform with your permission, and from our analysis of photos you submit.
- Why we collect and use it: only to provide the features you request (your glow score, food suggestions and progress), to keep the Service secure, and to comply with law. We collect and share it only with your consent or as necessary to provide the Service you requested.
- Who we share it with: only the processors in section 6 that need it to provide the Service (Supabase, OpenAI and, for subscription status only, Superwall), and as required by law. We do not sell consumer health data, and we do not share it with third parties for their own purposes.
- Your rights: you may confirm whether we collect, share or sell your consumer health data; access it, including a list of the third parties and affiliates we have shared it with; withdraw consent; and have it deleted. Deleting your account in the app deletes it. To make a request, email [email protected] with the subject “Health Data Request”. If we deny your request, you may appeal as described in section 10, and Washington residents may contact the Washington State Attorney General if the appeal is denied.
- Geofencing: we do not use geofences around healthcare facilities or collect your precise location.
12. EEA, UK and Swiss users
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, correct, delete, restrict or object to the processing of your personal information, to data portability, and to withdraw consent at any time. Withdrawing consent does not affect processing that already took place. The legal bases we rely on are listed in section 5. Where we rely on legitimate interests, you may object, and we will stop unless we have compelling grounds. Health, cycle and selfie data are special category data, and we process them only with your explicit consent, which you give by choosing to submit them or connect a health platform and which you can withdraw by disconnecting or deleting the data. You also have the right to complain to your local data protection authority, though we’d appreciate the chance to help first at [email protected].
13. International transfers
Muse-Sick LLC is based in the United States, and our service providers may process information in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal information from the EEA, UK or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or a provider’s certification under the EU–US Data Privacy Framework and its UK and Swiss extensions.
14. Children
The Service is intended only for adults aged 18 and over and is not directed to children or teenagers. We do not knowingly collect personal information from anyone under 18, including children under 13 as defined by the US Children’s Online Privacy Protection Act. If we learn that we have collected information from someone under 18, we will delete it. If you believe a minor has given us information, please contact us at [email protected].
15. This website
The glowfood.app website does not use cookies, analytics, advertising pixels or tracking scripts, and its fonts and images are served from our own domain. Our hosting provider may process standard server logs (such as IP address, browser type and the page requested) for security and to deliver the site. If you email us, we use your email and message to reply.
16. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and notify you in the app, by email, or by other reasonable means before the changes take effect. Where the law requires your consent to a change (for example, a new use of consumer health data), we will ask for it.
17. Contact
Questions, requests or concerns about privacy:
Muse-Sick LLC (GlowFood)
Email: [email protected]