GlamMe Privacy Policy
Last updated September 16, 2026
This policy explains what the GlamMe mobile app ("GlamMe", "the App") collects, why, who it is shared with, how long it is kept, and how to delete it. It is written to be read, not to be survived.
The short version. We collect the selfie you choose to analyze, the measurements we derive from it, and a short profile you fill in during onboarding. We use them to produce your analysis and the previews you asked for. We do not sell your data, we do not run advertising SDKs, and we do not track you across other apps. You can delete any single scan, or your entire account, from inside the App — and that deletion actually removes the stored images and records from our servers.
1. Who we are
GlamMe is operated by Attention Labs ("we", "us", "our"), the data controller for the purposes of this policy. You can reach us at support@attentionlabs.dev.
2. What we collect
2.1 Photos you submit, and what we derive from them
When you start a scan, the photo you capture or choose is uploaded to our servers and processed. From that image we compute:
- facial landmark coordinates and the region masks derived from them;
- colour measurements of your skin, hair, eyes and lips (CIELAB and HSV values, contrast and depth scores);
- a seasonal colour classification and descriptive geometry (face shape, eye shape, undertone);
- a numeric face embedding, used for one purpose only: to check that a generated preview still resembles you, so we can reject a render that has drifted into someone else's face. It is not used to identify you across accounts, is not matched against any external database, and is not shared;
- generated preview images, where you requested a Glow Up or Makeup Match render.
We ask for a face photo only when you initiate a scan. GlamMe does not access your camera or photo library in the background.
Biometric information. Some jurisdictions — including Illinois, Texas and Washington — treat facial geometry and face embeddings as biometric information. We use this data solely to deliver the features you request, we never sell, lease, trade or otherwise profit from it, we do not disclose it except to the processors listed in section 5, and we destroy it when you delete the scan or your account, or within three years of your last interaction with the App, whichever comes first. Where the law requires your consent for this processing, you give it by choosing to run a scan, and you can withdraw it by deleting the scan or your account.
2.2 Account data
You sign in with Apple or Google. We receive a stable, provider-issued account identifier and, if you choose to share it, an email address. We never receive your password. If you use Sign in with Apple's Hide My Email, we store only the relay address and make no attempt to resolve it to your real one.
2.3 The profile you enter
During onboarding you may provide an age range, ethnicity, beauty goals, skin concerns, product preferences and an aesthetic preference. Ethnicity is optional and is used only to calibrate the colour analysis; your age range is used to set the tone of the results and to apply the protections described in section 8.
2.4 Purchases
Subscriptions and scan packs are purchased through Apple's In-App Purchase system and recorded via RevenueCat. We receive your subscription status, product identifiers, and renewal or expiry dates. We never see your payment card or billing address— Apple processes the payment.
2.5 Device and technical data
- a push notification token, only if you opt in to notifications (you can turn this off in iOS Settings at any time);
- standard server logs — IP address, timestamp, endpoint, user agent — kept for a limited period to operate the service and to detect abuse;
- crash and performance diagnostics, used to fix bugs.
2.6 Analytics
We use PostHog to understand how people move through the app: which screens are reached, which steps are skipped, whether a scan finished, and whether a purchase was started or completed. This tells us where the app is confusing or broken.
These analytics events are tied to your GlamMe account identifier. They do not include your photos, your analysis results, your name, or your email address, and we do not collect your device's advertising identifier. We instruct PostHog to discard IP addresses, so we do not build a location profile from them. Session recording is disabled.
We do not use this data for advertising, and we do not sell it or share it with data brokers. PostHog Inc. processes it on our behalf as a data processor under our instructions. Deleting your account (Settings → Delete account) removes your analytics profile along with your scans and account data.
2.7 Referrals and experiments
If you use or share an invite code we store the code and the link between the referring and referred accounts, so the reward can be granted and abuse prevented. We also store which variant of an interface experiment your account was assigned to, so the App stays consistent for you between sessions.
2.8 What we do not collect
No precise location. No contacts. No health records. No advertising identifier (IDFA). We do not embed third-party advertising or social-tracking SDKs, and we do not track you across other companies' apps or websites.
3. How we use it
- To provide the App — run your analysis, generate the previews and routines you request, recommend products based on your measurements, and show your saved scans.
- To manage your account and purchases — authenticate you, apply your subscription tier and scan credits, and honour referral rewards.
- To keep the service safe and working — detect abuse, prevent fraudulent credit grants, diagnose crashes, and enforce our Terms.
- To communicate with you — transactional messages such as "your scan is ready", plus support replies. Marketing push is opt-in and separately revocable.
- To comply with law — tax and accounting records for purchases, and responses to lawful requests.
Where the GDPR applies, our legal bases are: performance of a contract for delivering the App and your purchases; consent for processing your facial imagery and for push notifications; legitimate interests for security, abuse prevention and service improvement; and legal obligation for financial records.
4. Automated processing and AI
GlamMe's analysis is produced by a deterministic computer-vision and colour-science pipeline that runs on our own infrastructure. A language model is used only to phrase the results in readable English, and it is given the measurements rather than your photograph. Your photograph is sent to a third-party model provider in two cases only: when you request a Glow Up or Makeup Match render, and when a reference makeup image is read to describe its colours. The providers are named in section 5. Results are cosmetic and informational. They are not a medical, dermatological, psychological or diagnostic assessment, and they should not be relied on as one. No decision producing legal or similarly significant effects about you is made automatically.
5. Who we share it with
We share data only with the service providers below, only to the extent they need it to perform their function for us, and under contracts that require them to protect it. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
| Provider | What it handles |
|---|---|
| Apple | Sign in with Apple, App Store purchases, push delivery |
| Google Sign-In | |
| RevenueCat | Purchase receipt validation and subscription status |
| PostHog | Product analytics: which screens are reached and whether a scan or purchase completed. Receives your account identifier, never your photos, results, name or email. IP addresses are discarded and session recording is off. |
| Cloudflare (R2) | Encrypted object storage for submitted and generated images |
| Neon | Managed Postgres database |
| Fly.io | Application hosting |
| Upstash | Job queue used to run scans in the background |
| Modal | Compute for our computer-vision pipeline. The models are open-source and run on infrastructure we control; Modal is not given your identity or account details. |
| Google (Gemini API) | Renders the Glow Up and Makeup Match preview images, and phrases analysis results from measurements we have already computed. Receives your photo when you request a render. |
| OpenAI | Reads a reference makeup image and returns a structured description of its colours and finish, so the look can be adapted to your own measurements. |
| Anthropic | Alternate provider for the same result-wording role as Gemini. Receives measurements, not photographs. |
None of the model providers above is given your name, email address or account identifier. Images and measurements are sent for the single request you initiated and are not linked to your identity on their side.
Where a model provider offers a setting or contractual tier that excludes customer submissions from being used to train their models, we use it. We may also disclose data if required by law, to enforce our Terms, or to protect the rights and safety of our users — and, in the event of a merger or acquisition, to the acquiring entity, subject to this policy.
6. Retention and deletion
- Delete a single scan — from the scan's menu in the App. The submitted photo, any generated images, and the analysis record are removed from our database and purged from object storage.
- Delete your account — Settings → Delete account and data. This removes your profile, all scans and images, entitlement and credit records, referral links, push tokens and your PostHog analytics profile. It is irreversible and it does not cancel your App Store subscription (see section 10).
- Backups — residual copies may persist in encrypted backups for up to 30 days after deletion, after which they are overwritten.
- Purchase records — retained as long as tax and accounting law requires, in a form not linked to your facial data.
7. Security
Data is encrypted in transit (TLS) and at rest. Image access uses short-lived signed URLs. Our database enforces row-level security, so a given account can only read its own records even in the event of an application bug. Access to production systems is limited to personnel who need it. No system is perfectly secure, and we cannot guarantee absolute security.
8. Children and teens
GlamMe is not directed to children under 13 and we do not knowingly collect personal information from them. You must be at least 13 to use GlamMe. If we learn that we have collected data from a child under 13, we delete it promptly. Parents or guardians who believe their child has provided us with data should contact support@attentionlabs.dev and we will remove it.
For users who indicate they are under 18, GlamMe does not produce ranked appearance scores or "flaw" lists, and result wording is adjusted accordingly. This is a product rule, not a setting, and it cannot be turned off.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data; to receive a portable copy; to withdraw consent; and to lodge a complaint with your data protection authority. California residents additionally have the rights to know, delete, correct, and to opt out of the sale or sharing of personal information — we do not sell or share it — and the right not to be discriminated against for exercising any of these rights.
The fastest route for access and erasure is inside the App itself (Settings). For anything else, email support@attentionlabs.dev and we will respond within the period your law requires, and in any event within 30 days.
10. Managing your subscription
Subscriptions are billed by Apple and must be cancelled through Apple: on your device, open Settings → [your name] → Subscriptions. Deleting your GlamMe account does not cancel an active subscription.
11. International transfers
We operate from the United States and your data is processed there. If you are in the European Economic Area, the United Kingdom or Switzerland, transfers rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
12. Changes to this policy
If we change this policy we will update the date at the top of this page, and for material changes we will notify you in the App or by email before the change takes effect.
13. Contact
Email support@attentionlabs.dev for any privacy question, or to exercise any of the rights in section 9. We respond within the period your law requires, and in any event within 30 days.