Your looks stay yours.

Effective October 13, 2026

This policy covers Glossy's AI service and the upcoming 1.1 update. New lookbook, reference-photo, reminder, and diagnostic controls are available only in app versions that include them.

Your photo is processed only after you choose it and explicitly consent. We minimize what leaves your device and do not sell or use your information for advertising.

Information we collect

When you create a concept, Glossy processes a resized copy of your selected photo, an optional reference photo, your selected style choices, a random request identifier, and Apple-signed subscription information. Style choices include focus areas, goal, direction, routine, hair color, hair shape, makeup style, and intensity. The service uses Apple's original transaction identifier to verify access, associate a short-lived retry result, and enforce the seven-day allowance. It records successful concept usage for that allowance period. We do not require a Glossy account, collect advertising identifiers, run advertising SDKs, or track you across apps and websites.

Device permissions

Glossy uses Apple's system photo picker so you can grant access to a photo you select without giving the app broad photo-library access. Glossy does not request contacts, microphone, or location access. Notification permission is requested only if you choose to set an occasion reminder. Reminders are scheduled locally and can be removed from the look's plan; permissions can also be changed in iOS Settings.

AI processing and service providers

The resized, metadata-stripped photo, optional reference photo, and style choices are sent over encrypted HTTPS to Glossy's Cloudflare Worker and processed using Cloudflare Workers AI. The optional reference receives the same consent and processing protections as the main photo. Cloudflare states that customer content is not used to train models or improve its services without explicit consent. Apple processes subscriptions and provides signed purchase records under Apple's privacy policy.

Information stored on your device

Your saved AI concepts, resized originals when saved with a concept, preferences, titles, collections, favorites, self-reported owned products, notes, checklist progress, feedback, and occasion dates are stored locally on your device. Product lists, free-text notes, titles, and collection names are not sent in AI generation or diagnostic requests. Local reminder content is generic and does not include your photo or private notes.

After you consent and start creation, Glossy also saves a protected, metadata-stripped local copy of the source photo, optional reference photo, and the pending request details so you can recover an interrupted request. These local pending copies remain until that request finishes or you explicitly discard it by starting a new brief or replacing the photo. Opening the app does not automatically upload them; retry is your choice.

If you choose Share or Export, Apple's system share sheet sends the selected material to the destination you choose. A stylist brief can include your notes and product list; review these before sharing. Comparison cards contain the selected images and titles, not private notes or product lists. Destinations you choose apply their own privacy practices. Glossy does not post images to a hosted feed or operate a voting service.

Optional anonymous diagnostics

Optional product diagnostics are off by default. If you enable them in Account, the app counts and sends limited events such as a paywall view, purchase outcome, generation outcome, saved look, checklist completion, or share action. Events can contain predefined labels such as the chosen goal, weekly or yearly plan, or app screen. They do not include photos, purchase proofs, transaction identifiers, advertising identifiers, persistent user or device identifiers, product lists, notes, or other free text. We use these events to understand aggregate product usage, not to create individual profiles or track you across apps.

By default, the service keeps anonymous daily totals for each approved event and separate counts for approved labels. It does not store individual event histories or combinations of labels in this aggregate fallback. The totals are scheduled for deletion from active service storage after 90 days using Cloudflare Durable Objects. If Analytics Engine is configured instead, it stores the approved anonymous events, automatically adds receipt time, and retains its data for three months. Turning diagnostics off stops new event requests and clears the diagnostic counts on your device. Because neither storage mode contains a user identifier, we cannot retrieve or remove one person's contribution from earlier anonymous data. Cloudflare processes ordinary network information needed to deliver and secure requests; provider operational logs and recovery backups may follow its own retention policies, separate from the active records described here.

Data retention and deletion

Glossy keeps a temporary service copy of a generated response for retry reliability and automatically deletes it within 24 hours. That response is associated with your Apple transaction identifier so the service can return only your retry result. Input photos and references are used for processing, not added to a permanent cloud photo library. You can request earlier deletion of the temporary result by deleting the concept in the app while valid subscription proof is available.

The 24-hour limit applies to the service's temporary generated response, not your local pending photos or saved looks. A pending request that is too old to retry can remain on your device until you discard it. Starting a new brief clears its local source, reference, and pending details; deleting the app also removes local app storage.

Deleting a look removes its local image, saved original, plan, and notes and cancels its pending occasion reminder. Glossy protects saved concept, preference, and pending-request files and excludes them from device backup; there is no Glossy cloud lookbook sync. Minimal quota records remain for the current seven-day allowance period to enforce included usage and are then expired; they contain no photo. The separate optional diagnostic retention is described above.

Support messages and this website

If you email support, we receive the email address, message, and any attachments you choose to send and use them to respond and investigate your request. Avoid sending sensitive photos, passwords, or purchase proofs. This static support website has no advertising or analytics scripts added by Glossy; its Cloudflare hosting provider processes network requests to serve and secure the pages.

Security and international processing

Data is encrypted in transit. Cloudflare may process information in locations where it operates. No security method is perfect, but Glossy limits photo size, strips metadata, validates requests, and keeps service credentials off the device.

Children's privacy

Glossy is not directed to children under 13 and does not knowingly collect their personal information. Do not upload a child's photo.

Changes to this policy

If Glossy's data practices change, this policy will be updated before those changes take effect. The effective date above identifies the latest version.

Contact

For privacy questions, email abdimail222+glossy@gmail.com.