Privacy Policy

Last updated: October 10, 2026

1. Overview

Glamdu ("we", "us", "our", or "the app") is a personal beauty and aesthetic treatment tracking application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, available on the Apple App Store and Google Play Store.

By using Glamdu, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the app.

2. Data Controller

For the purposes of the EU General Data Protection Regulation (GDPR) and UK GDPR, the data controller is:

Glamdu
Email:

3. Information We Collect

3.1 Information You Provide

Data TypeExamplesPurpose
Account informationEmail address, display nameAccount creation and authentication
Treatment logsAppointment dates, treatment types, practitioner names, costs, notes, ratingsCore app functionality
PhotosBefore/after treatment photos you choose to attachTreatment documentation
Goals and preferencesTreatment goals, notification preferences, currency settingsPersonalization
Effectiveness ratings1–5 star ratings for treatmentsTreatment effectiveness tracking
Treatment notes & voice memosText notes, skin reaction ratings, audio recordings about treatmentsTreatment journaling (Premium)
Health-related dataMedication names, allergy information, healing timeline entriesSafety alerts and recovery tracking
Provider informationPractitioner names, clinic names, addresses, contact detailsProvider directory and appointment tracking

Stored on your device: With the exception of your account information (email address and display name), all of the data above — treatment logs, photos, journal entries, health-related data, goals, and provider information — is stored locally on your device only. It is never uploaded to our servers or any cloud database we operate.

Optional Cloud Backup: If you turn on Cloud Backup (Profile > Cloud Backup), the app stores a copy of this data, including photos if you choose, in your own iCloud Drive (iPhone) or in the hidden app folder of your own Google Drive (Android). The copy is kept in your Apple or Google account under their terms. Glamdu has no access to it and it never passes through our servers. Cloud Backup is off until you turn it on, and you can turn it off at any time.

3.2 Information Collected Automatically

Data TypePurpose
App usage events — which screens are opened and which features are used (for example “a treatment was added” or “the calendar import finished”), without the treatment type, notes, photos, prices or any health-related detailsUnderstanding which features help people, and where the app is confusing
Technical information — app version, device model, operating system, approximate country (derived from the IP address, which is not stored), and a random app-instance identifierGrouping the usage statistics above and app compatibility
Crash reportsBug fixing — only if you allow sharing with app developers in your device’s settings (Apple / Google)

Usage statistics are processed by Firebase Analytics (Google). They are not linked to your account (we do not send your user ID, email or name), we do not collect your device’s advertising identifier, and they are never used for advertising or tracking across other apps or websites. You can switch them off at any time in Profile › Privacy Settings › Share anonymous usage statistics; the app then stops collecting and sending them.

3.3 Information We Do NOT Collect

4. On-Device AI Processing & Face Data

Our AI Skin Analysis feature uses on-device machine learning to analyze photos you voluntarily submit. This processing occurs entirely on your device. No photos, analysis results, or biometric data are transmitted to our servers or any third-party servers. Skin analysis scores saved to your history are stored locally on your device.

Face data. Photos you submit for skin analysis may include your face. The app analyzes the photo's pixels (for example brightness, redness, texture, and evenness) with a machine-learning model bundled inside the app to produce skin-condition scores. The app does not create face templates, faceprints, facial geometry maps, or any data that could be used to identify or recognize a person, and does not perform facial recognition. The photo and the derived skin scores are stored only on your device; they are never uploaded to us or shared with any third party. The only exception is a copy you choose to keep with the optional Cloud Backup in your own iCloud or Google Drive account, which Glamdu cannot access. They are retained until you delete them: you can delete individual analyses in Score History, delete everything via Profile > Privacy & Data > Delete All Data, or delete your account (which also erases all on-device data). Uninstalling the app removes them as well. The app does not use any third-party or cloud AI service, and no face data or any other information is ever sent to one.

5. How We Use Your Information

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

Legal BasisProcessing Activity
Contract performanceProviding the app service, managing your account, processing subscriptions
ConsentSending push notifications, processing skin analysis photos, collecting health-related treatment data
Legitimate interestAnalytics to improve the app, crash reporting, fraud prevention
Legal obligationCompliance with applicable laws and regulations

Treatment data (including aesthetic procedures, skin analysis results, and medication information) may constitute special category data under GDPR Article 9. We process this data based on your explicit consent, which you provide by voluntarily entering this information into the app. You may withdraw consent at any time by deleting your data.

7. How We Share Your Information

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

We use the following third-party service providers who process data on our behalf:

ServiceProviderPurposePrivacy Policy
AuthenticationFirebase Auth (Google)User sign-in and account managementLink
AnalyticsFirebase Analytics (Google)Anonymous usage statisticsLink
PaymentsRevenueCatSubscription managementLink
Sign-InApple / GoogleOptional authenticationRespective policies
Place searchOpenStreetMap NominatimAddress suggestions while you type a clinic or salon location (only the search text is sent, nothing about your treatments)Link

We may also disclose your information if required by law, in response to valid legal process, or to protect the rights, property, or safety of Glamdu, our users, or the public.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers (Google/Firebase) operate. When we transfer data outside the EEA or UK, we ensure appropriate safeguards are in place, including:

9. Data Retention

Data TypeRetention Period
Account informationUntil you delete your account
Treatment logs, photos, and preferences (on-device)Until you delete them or uninstall the app; not stored on our servers
Skin analysis scores (on-device)Until you delete them; not stored on our servers
Optional Cloud Backup (in your own iCloud / Google Drive)Until you delete it in your iCloud or Google account; deleting your Glamdu account also deletes it
Analytics data26 months (Firebase Analytics default)
Crash reports90 days

Upon account deletion, all personal data we hold on our servers (your account information) is permanently removed within 30 days, and the app deletes your on-device data immediately. Anonymized, aggregated data (such as total user counts) may be retained indefinitely.

10. Data Security

We implement industry-standard security measures to protect your personal data:

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Your Privacy Rights

11.1 Rights for All Users

11.2 Additional Rights under GDPR (EEA/UK Users)

11.3 Additional Rights under CCPA/CPRA (California Residents)

In the preceding 12 months, we have not sold any personal information, nor do we use personal information for targeted advertising.

11.4 Additional Rights under LGPD (Brazil), PIPEDA (Canada), and Other Jurisdictions

If you are located in a jurisdiction with applicable data protection laws, you may have similar rights to access, correct, delete, and port your personal data. Contact us to exercise these rights.

To exercise any of these rights, use the Privacy & Data section in your Profile settings, or contact us at . We will respond within 30 days (or within the timeframe required by applicable law).

12. Children's Privacy

Glamdu is not intended for use by anyone under the age of 16 (or 13 in jurisdictions where permitted by law). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete the information.

13. Automated Decision-Making

Our AI Skin Analysis feature provides automated scores and insights based on photos you submit. These results are for informational purposes only and do not constitute medical advice, diagnosis, or treatment recommendations. No decisions with legal or significant effects are made solely based on automated processing.

14. Do Not Track

We honor Do Not Track signals. If your browser or device sends a Do Not Track signal, we will not track your activity for advertising purposes. We do not engage in cross-site tracking.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you through the app before the changes take effect. Your continued use of the app after notification constitutes acceptance of the updated policy.

Previous versions of this policy are available upon request.

16. Contact Us

If you have questions about this Privacy Policy, your data, or wish to exercise your privacy rights, please contact us:

Email:

For GDPR-related inquiries, you may also contact your local supervisory authority.