Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how Mindstagram LLC (“Glosom,” “we,” “us”) collects, uses, and shares information when you use the Glosom app and website (the “Service”). By using Glosom, you agree to this Policy.

Your skin photos are processed, not stockpiled. We send the photo you upload to our AI provider to generate your results and return them to you. We do not sell your photos, and we do not use them to build advertising profiles.

1. Information we collect

Photos you upload — images of your skin, used to generate your scan and routine.
Profile answers — the questionnaire responses (e.g., skin tone, hair type, goals) you provide to personalize results.
Account & billing info — if you subscribe, your email and the payment details you give to our payment processor (we do not store full card numbers).
Usage & device data — analytics events, approximate location/region, device and browser type, collected to operate and improve the Service.
On-device data — some progress data (e.g., your routine check-offs and history) is stored locally in your browser and stays on your device.

2. How we use information

to generate your skin analysis, routine, coach replies, and progress tracking;
to process payments and manage your subscription;
to operate, secure, troubleshoot, and improve the Service;
to communicate with you about your account or the Service;
to comply with legal obligations and enforce our Terms.

3. How photos are handled

When you scan, your photo is transmitted to our AI provider (Google, via the Gemini API) to analyze your skin and produce results. Photos are processed transiently to deliver your results and are not retained by us for long-term storage or used to train third-party models for unrelated purposes. As we add cross-device history and progress photos, we will update this Policy and give you controls over what is saved.

4. Service providers we share with

We share limited information with vendors who help us run the Service:

Google — AI processing (Gemini) and analytics (Google Analytics / Tag Manager).
Stripe — payment processing and subscription billing.
Railway — application hosting.
Supabase — database and storage (as we roll out accounts and saved history).

These providers process data on our behalf under their own terms and security commitments. We do not sell your personal information.

5. Cookies & analytics

We use cookies and similar technologies for essential functionality and analytics (via Google Tag Manager / Google Analytics) to understand how the Service is used. You can control cookies through your browser settings; some features may not work without them.

6. Data retention

We keep account and billing records for as long as your account is active and as needed to meet legal, tax, and accounting requirements. Photos are processed to deliver your results and are not kept for long-term storage. On-device data remains until you clear it from your browser.

7. Your rights & choices

Depending on where you live (including under GDPR and the CCPA), you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to opt out of marketing. You can clear on-device data anytime from your browser. To make a request, email privacy@glosom.com. We will not discriminate against you for exercising these rights.

8. Marketing emails

If we send you marketing emails, every message includes an unsubscribe link, and you can opt out at any time. We will still send essential service messages (e.g., billing and account notices).

9. Children

Glosom is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

10. Data security & international transfers

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure. Our providers may process data in the United States and other countries; where required, we rely on appropriate safeguards for such transfers.

11. Changes to this Policy

We may update this Policy from time to time. We will update the date above and, for material changes, provide additional notice where appropriate.

12. Contact

Questions or privacy requests? Email privacy@glosom.com.