Privacy Policy

Shhapps Ltd. Liability Co. (“we”, “our”, or “us”) operates OneGlow AI(the “App”). This Privacy Policy explains what information we collect, how we use it, how we share it, how long we keep it, and your choices — including face-related data and third-party AI analysis.

Before you use the App, we ask you to agree to our Terms of Service and this Privacy Policy. In the App we also explain that when you scan, your photo is sent to our servers and AI providers for analysis, and may be saved for your history.

1. Information We Collect

• Photos and face data: When you run a Face Score or Skin Score scan, you provide a selfie or other photo that may show your face. We process that image to generate cosmetic scores and insights. We do not collect Face ID data, TrueDepth depth maps, faceprints, or biometric templates. We only process the photo you choose to submit.
• Profile answers: Optional information you provide during onboarding (for example name, age range, gender, skincare goals, and concerns) used to personalize insights.
• Account and device identifiers: An anonymous account linked to your device so we can save scan history and restore sessions. Core scan features do not require an email and password.
• Scan results: Scores, written findings, and (for skin scans) routine suggestions generated from your photo.
• Usage and device data: App analytics events (for example features used), device type, operating system version, and app version to improve reliability and product quality.
• Subscription status: Entitlement information processed via Apple App Store / Google Play and our payments partner (RevenueCat). We do not receive your full payment card number.

2. Face Data — Collection, Use, Sharing, Storage, Retention & Deletion

This section describes face-related information, which is treated as sensitive personal data under Apple App Store requirements and applicable privacy laws.

What face data we collect

We collect the photograph you submit for analysis (camera or photo library) and the AI-generated cosmetic analysis derived from that image (scores and written findings). We do not perform facial recognition to identify you as a person in a database of identities, and we do not create or store biometric faceprints.

How we use face data

• To generate your Face Score or Skin Score and related cosmetic insights and tips.
• To store and display your scan history so you can track results over time.
• To operate, secure, and debug the analysis pipeline.

Face data is used only for these cosmetic, informational purposes. OneGlow AI is not a medical device and does not diagnose, treat, cure, or prevent any disease.

Where face data is stored

Submitted photos are transmitted over encrypted connections (HTTPS/TLS) to our backend. Photos are stored in cloud object storage on Amazon Web Services (AWS S3). Analysis results are stored in our application database hosted on infrastructure we control (including AWS). Temporary signed URLs may be used so the App can display a stored scan photo to you.

Sharing with third parties (including AI)

To produce your analysis, your submitted photo is sent from our servers to AI providers that process the image solely to return cosmetic face or skin insights:

• Anthropic (Claude models), accessed via Amazon Web Services Bedrock and/or Anthropic's API, solely to analyze the image and return analysis results.
• Amazon Web Services (AWS) for hosting, photo storage (S3), and (when enabled) AI inference (Bedrock).
• Analytics and payments providers (for example PostHog for product analytics; RevenueCat and Apple/Google for subscriptions) receive usage or purchase-related data. They do not receive your scan photos for advertising.

We require that any third party with whom we share your face data — including Anthropic and Amazon Web Services (AWS)— provides the same or equal protection of that face data as described in this Privacy Policy, and processes it only to return your analysis and not for their own purposes.

We do not sell your face data. We do not use your photos for advertising. We do not use your photos to train public AI models, and we use commercial AI APIs configured for analysis consistent with the provider's terms.

In the App, before you continue past onboarding, we explain that when you scan, your photo goes to our servers and AI providers for analysis, and may be saved for history. You must agree to our Terms of Service and this Privacy Policy to continue. You can refuse by not using the scan features or by not agreeing.

How long face data is retained

Photos and scan results are retained so you can view your history in the App, until you delete a specific scan, request deletion of your data, or we delete inactive data as part of ordinary operations. Photos are not discarded automatically immediately after a single analysis, because the App shows past scans.

How you can delete face data

• Delete a scan:In the App's History tab, delete an individual scan. That removes the stored analysis and associated photo for that scan from our systems.
• Delete account / data: Use Delete Account in Settings, and/or email [email protected] to request deletion of account-associated personal data, including face photos and scan history. We process verified deletion requests without undue delay and within 30 days where required.

3. How We Use Your Information (Generally)

• To provide face and skin analysis and personalize tips based on your profile answers.
• To store and display your analysis history.
• To operate subscriptions and restore purchases.
• To respond when you contact support.
• To improve, secure, and debug the App.

We do not sell your personal information to third parties.

4. Third-Party Services Summary

We use service providers that process data on our behalf:

• Amazon Web Services (AWS) — cloud hosting, photo storage (S3), and optionally AI inference (Bedrock).
• Anthropic — AI model provider used to analyze submitted photos for cosmetic insights.
• RevenueCat / Apple / Google — subscription purchase processing and entitlement status.
• PostHog — product analytics and (where enabled) session diagnostics.

These providers process data under their own security and privacy terms. We use appropriate contractual and technical safeguards for providers that handle personal data.

5. Data Retention

We retain profile answers, device-linked account records, photos, and analysis history while needed to provide the App or until you delete the related data. After a verified deletion request, we remove personal data from active systems within 30 days, except where we must keep limited records for legal, security, or accounting reasons.

6. Children's Privacy

OneGlow AI is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (including face photos and scan history)
• Export your data in a portable format
• Object to or restrict certain processing

To exercise these rights, contact us at [email protected].

8. Security

We use industry-standard encryption (TLS/HTTPS) for data in transit and restrict access to production systems. Photos and analysis data are stored with cloud provider security controls. No method of transmission or storage is 100% secure, but we take reasonable precautions to protect your information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and may notify you of significant changes in the App. Continued use of the App after changes are posted means you accept the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or face data practices, contact us at [email protected].