Privacy Policy
Last updated: August 2026
GlowMate is built so that there is very little about you for anyone to hold.
WHO IS RESPONSIBLE
GlowMate is run by İbrahim Melikşah Köse, an individual developer in İstanbul, Türkiye — not a company. That makes him the data controller for everything described below, and the person you write to about any of it. Full details are at the end.
WHAT STAYS ON YOUR PHONE
Your onboarding answers, your skin profile, your scan history and your routine are stored on this device only. We have no server that holds them, no account system, and no way to look them up. If you delete the app, they are gone — with one exception we explain below, your own iCloud backup.
Progress photos, when you leave that setting on, are written into the app's own storage and encrypted by iOS whenever your phone is locked. We never upload them, and they are never sent to us or to anyone else. One honest exception: if you have iCloud Backup switched on, your phone backs them up the way it backs up the rest of the app's data. That backup is between you and Apple — it is yours, and we cannot reach it.
YOUR PHOTOS AND THE ANALYSIS
When you scan your face or a product, the photo does not travel alone. So that the analysis can be about you, your skin profile — your skin type, your concerns and their severities, your onboarding answers — and the names of the products in your routine are sent with it. None of it is stored.
The request goes to our server, which runs on Cloudflare's infrastructure in the United States and relays it without writing it down, and from there to Anthropic's Claude API in the United States, which produces the analysis. On our side the photo is never written to a disk or a log, and once the result comes back we hold nothing at all. Anthropic processes it to produce the answer and does not use it to train models; how long they hold it under their own terms is described in the privacy notice.
Before a photo is sent it is re-encoded, which strips the metadata a camera embeds — including where the picture was taken.
WHAT IDENTIFIES YOU
Nothing you would recognise as your identity. The app generates a random identifier for itself the first time it runs and sends it with each analysis so that a daily limit can be applied. It is not derived from your phone's hardware, it is not linked to your name, email or Apple ID, and "Delete all my data" replaces it with a new one.
We never ask for your name, your email address or your date of birth.
USAGE ANALYTICS
If analytics are enabled in this build, the app reports which screens are opened and which actions are taken — for example "a product scan finished" together with its verdict and score. These carry no photo, no skin finding, none of your onboarding answers, no product name and no free text. One value in that list is derived from you: the match score is calculated partly from your profile. It is a single number about a product and your profile cannot be reconstructed from it. Events go to TelemetryDeck, a privacy-focused analytics service in Germany, under the same anonymous identifier.
DELETING EVERYTHING
Settings → Delete all my data removes your profile, both kinds of scan history, your routine and every stored photo, and issues a new anonymous identifier. Because no server record is tied to your identity, that really is all of it. The one thing on a server is a counter behind an irreversible digest of the old identifier, used to apply the daily limit; it expires by itself within about a day and cannot be traced back to you.
AGE
GlowMate is for people aged 18 and over.
CONTACT
İbrahim Melikşah Köse
Fındıklı Mahallesi, İpek Sokak, Meriçlife Sitesi 25-45C, Kat 2, Daire 21
Maltepe / İstanbul, Türkiye
melberlabs@gmail.com