PRIVACY POLICY

Glow Me Up LLC ("Glow Me Up", "we", "us", or "our") operates the Glow Me Up mobile applications, website, and related services (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your information.
By using our Platform, you consent to the practices described here. If you do not agree, please do not use the Platform.
1. Information We Collect
A. Information You Provide
Account & Profile: name, email, phone, password, profile photo, date of birth, bio.
Booking & Service Data: appointment details, preferences, special requests, notes.
Payment Information: processed securely by Stripe. We do not store full card details.
Professional Information (Stylists/Salons): professional license, portfolio, services, pricing, business documents.
User-Generated Content: chat messages, photos uploaded for AI Hairstyle Preview, reviews, ratings.
B. Information Collected Automatically
Device data, IP address, usage analytics, approximate location.
C. Information from Third Parties
Stripe, Stream Chat, AI service providers (e.g., OpenAI), Instagram, etc.
2. How We Use Your Information
Provide booking, payment, chat, video consultation, and AI Hairstyle Preview services.
Process transactions, payouts, refunds, and tips.
Personalize recommendations via AI Smart Match.
Send reminders and marketing communications (with your consent).
Ensure safety, prevent fraud, and improve the Platform.
Comply with legal obligations.
3. How We Share Your Information
With service providers under strict agreements (Stripe, AWS, Stream Chat, AI service providers such as OpenAI, etc.).
With the stylist/salon when you make a booking.
For legal compliance or safety reasons.
In connection with business transfers (merger, acquisition).
With your consent.
We do not sell your personal information.
4. Photos, Facial Data & AI Hairstyle Preview Feature
The AI Hairstyle Preview feature allows you to upload a photo of yourself to generate preview images showing how a hairstyle may look on you.
4.1 What data we collect
The photo you choose to upload from your device library or capture with your camera.
Preview images generated by the AI provider.
We do NOT collect, extract, infer, or store any biometric identifiers or biometric information, including facial geometry, facial templates, faceprints, or face embeddings, from your photos.
4.2 How photos are collected
Only when you voluntarily tap “Try This Hairstyle” (or a similar option) and provide consent in the app through a disclosure screen that clearly identifies the third-party AI provider before any data leaves your device.
You may decline; the rest of the app will continue to function normally without using this feature.
4.3 Who we share photos with and why
We share photos with the following third-party AI provider solely to generate hairstyle preview images at your request:

Provider | Purpose | Provider Data Policy
OpenAI, L.L.C. (Images API) | Generate AI hairstyle preview images at your request | https://openai.com/policies/api-data-usage-policies

We share photos with this provider because creating realistic hairstyle preview images requires a generative image model that we do not operate ourselves.
4.4 Whether third parties store facial data
OpenAI processes data submitted through its API under its API Data Usage Policies and states that API input and output data are NOT used to train its models.
OpenAI may retain API input data for up to 30 days for abuse and misuse monitoring purposes, after which the data is deleted. This retention is controlled by OpenAI, not Glow Me Up. You may review the link above for the provider’s current practices.
We do not permit OpenAI to use your photos for any other purpose.
4.5 How WE store facial data
We do NOT store facial data. The photo itself is treated as ordinary user-uploaded content, is not considered biometric data, and we do not extract or store any facial geometry or facial templates on our servers.
Uploaded photos and generated preview images are stored on our servers only for the time necessary to provide the feature to you, including Preview History, subject to the following maximum retention periods:
Uploaded source photos: deleted within 30 days of upload, or immediately when you delete the preview image or delete your account, whichever occurs first.
Generated preview images: deleted when you delete the preview image or delete your account, and in all cases no later than 12 months after creation.
We use these retention periods because they are the shortest periods that still allow you to revisit and re-share recent preview images from your history; we do not need to retain the images for longer.
4.6 What we do NOT do
We do not use your photos to identify you.
We do not sell, rent, lease, trade, or otherwise exchange your photos or preview images.
We do not use your photos to train any AI model, and we contractually require our AI provider not to do so.
We do not extract or store any biometric identifiers from your photos.
4.7 Your rights
You may delete any uploaded photo and generated preview image at any time from the Preview History screen.
Deleting your account will delete all related photos and preview images from our systems within 30 days.
Residents of jurisdictions with biometric privacy laws, including Illinois BIPA, Texas CUBI, and Washington HB 1493, may contact us at legal@glowmeup.com with questions, even though we do not collect biometric identifiers.
5. SMS & Marketing Communications
By providing your phone number, you consent to receive transactional SMS messages (booking confirmations, reminders). Marketing SMS requires separate opt-in consent. Reply STOP to unsubscribe at any time. Message and data rates may apply.
6. Your Privacy Rights
Right to access, delete, correct, opt out, and data portability.
You may delete your account at any time in the app (Settings → Delete Account) or by emailing us.
California residents have additional rights under the CCPA/CPRA; residents of Virginia, Colorado, Connecticut, Texas, and other states have rights under applicable state privacy laws.
To exercise your rights, email legal@glowmeup.com.
7. Data Security & Retention
We use industry-standard security measures. Data is retained only as long as necessary for business or legal purposes.
8. Children's Privacy
The Platform is not intended for anyone under 18. We do not knowingly collect data from minors.
9. International Data Transfers
Data is primarily processed in the United States with appropriate safeguards.
10. Changes to This Policy
Material changes will be notified. Continued use after changes constitutes acceptance.
11. Contact Us
Email: legal@glowmeup.com
Address: Glow Me Up LLC, [REGISTERED DELAWARE ADDRESS — REQUIRED BEFORE PUBLISHING]