Privacy Policy — Glossa

Last updated: 14 August 2026

Glossa keeps your skincare routine on your phone. This policy explains, in plain language, what stays on your device, what leaves it, and why.

The short version

Everything you write in Glossa — your products, your routines, how your skin felt — lives on your iPhone. There are no accounts, and we have no way to read your entries.

Two things about you leave your phone. One is what Apple and our payments provider need to handle a subscription. The other is the photo of your shelf, if you choose to take one: it goes to a recognition service that reads the labels and sends back a list of products. Who reads it, what happens to it and for how long is spelled out below.

What stays on your device

All of it, unless listed in the next section:

• Your products — names you typed and the product type
• Your routines — steps, order, schedule, reminder times
• Your history — which routines you completed and when
• Your skin diary — the states you selected and anything you wrote in your own words
• Your diamonds and decor — everything you earned and placed
• Timer sessions — when you started and finished

This data is stored in the app's private container on your iPhone. It is included in your device backup if you use iCloud Backup or a computer backup — that backup belongs to you and is governed by Apple's terms, not ours. We cannot access it.

You can export everything at any time as a JSON file from Settings.

Camera and photo library

When you set up your shelf, Glossa can build the whole list of your products from a single photo of them. Here is that trip, end to end.

• The photo is sent to a recognition service and isn’t stored. That is the sentence you see in the app itself, word for word. This page is where it gets its detail.
• Before it leaves, your iPhone shrinks the picture. What travels is that smaller copy over an encrypted connection, not the original from your camera roll.
• Who reads it: Anthropic, through the Claude API. It goes there to be read and nowhere else. Anthropic states that uploaded images are not stored beyond the duration of the request and are not used to train its models, and that inputs and outputs of an API request are deleted automatically within 30 days (retention, images).
• On our side the photo is not saved at all. It passes through one small function of ours and the request ends there: no database to write it into, no log that records it, nothing left on disk. We never built a place to put it.
• What comes back is a list of names, brands and product types. It arrives on your iPhone, where you fix anything that came out wrong, and from then on it stays there like everything else you write.
• You can skip the photo entirely. On the same screen, right under the camera button, “I’ll add them myself” opens an empty product card: typing your shelf in sends nothing anywhere and needs no account. Nothing in the app is closed off if you never take a photo.

Access to your camera or photo library is requested only at the moment you choose to use it, and you can decline without losing the ability to use the app.

Notifications

Reminders are scheduled locally by your iPhone. Nothing about them goes through a server, and we never see whether you opened a reminder or completed a routine.

If you start a free trial, Glossa schedules a local reminder one day before it ends, so a charge never surprises you. Declining notifications does not change your subscription in any way.

Subscriptions

Glossa Pro is sold through Apple's In-App Purchase. We use RevenueCat to manage subscription state.

This is what is shared, and nothing beyond it:

• With Apple: your purchase, handled entirely by the App Store under Apple's Privacy Policy. We never see your payment details.
• With RevenueCat: an anonymous identifier generated by the app, your purchase and subscription status, and basic device and app information (device model, OS version, app version, country). This is used solely to tell the app whether your subscription is active. RevenueCat's policy: https://www.revenuecat.com/privacy

In Apple's own vocabulary — the one you see on our App Store page — a subscription is purchase history, declared as Purchases, used for app functionality and nothing else, not linked to your identity, and not used for tracking. The shelf photo is read outside your phone, so it is disclosed on that page as well, under whatever name Apple's form gives it at the time we submit. What will never appear there is tracking or advertising, because we do neither.

What is never shared: your name, email, products, routines, history, or anything from your skin diary. The anonymous identifier is not linked to your identity, and we do not combine it with anything you write in the app.

When this happens. The app asks RevenueCat whether your subscription is active when it starts, and again each time you bring it back to the foreground — not only when you open the subscription screen. That check sends the anonymous identifier and the basic device information listed above, and receives back one thing: whether Pro is active. It never sends anything you wrote.

What we do not do

• We do not have user accounts, and we never ask for your name or email
• We do not use analytics or advertising SDKs, and we do not track you across apps or websites
• We do not sell or share your data with data brokers
• We do not send your skin diary, your routines or your history anywhere — those have never left your iPhone, and the shelf photo did not change that
• We do not send a photo on our own: it travels once, at the moment you ask for it, and only the picture you chose

Your data, your control

• Export: Settings → Export data. You get a JSON file with everything, which you can save or share wherever you like.
• Delete: deleting the app removes all of it from your device. Nothing of it was kept anywhere else to begin with: we have no account for you and no copy of what you wrote.
• Subscription: managed in your Apple ID settings. Cancelling does not delete or lock anything you have written — your history and diary remain readable in the free version.

How long we keep it

Nothing of yours sits on a machine of ours. The shelf photo passes through a service that is not ours, so it comes with a number attached — here it is, next to everything else.

• On your iPhone: what you write stays as long as the app is installed. Nothing expires, nothing is trimmed after a month, and nothing is archived away from you. Removing the app removes it all.
• The shelf photo: on our side it is kept for no time at all — the request is handled and the picture is gone, with no database and no log holding a copy. At Anthropic it is not stored beyond the request itself, and whatever an API request leaves behind is deleted automatically within 30 days. The list that came back lives on your phone, not on ours.
• Your entries: your products, routines, history and skin diary are not backed up by us anywhere, because we hold no copy of them to back up.
• Purchase history: Apple keeps your purchase records under Apple's Privacy Policy, and RevenueCat keeps subscription status under its own, each for as long as their policies say. We cannot delete records on their side, and neither can we read anything in them beyond "active" or "not active".

Taking permissions back

Every permission the app asks for can be revoked. You can revoke consent at any time, in the place iOS keeps it, and we do not argue with that decision or ask again.

• Notifications: iOS Settings → Glossa → Notifications. Reminders stop; nothing else changes.
• Camera and photo library: iOS Settings → Glossa. Both are system permissions, so they are withdrawn there rather than inside the app. You can keep adding products by hand.
• Subscription: your Apple ID settings → Subscriptions.

Withdrawing consent never costs you anything you already had. Nothing is deleted, nothing is locked, and no history disappears. Your entries stay readable and exportable in the free version, exactly as they were.

Children

Glossa is not directed at children under 13 and does not knowingly collect information from them.

Changes

If this policy changes, the date at the top changes with it, and material changes will be surfaced in the app. Because we hold no contact information, we cannot email you — which is exactly why we keep the amount of data we handle as small as it is.

Contact

Questions about privacy: hello@glossa.beauty