Privacy Policy
Last updated: 2026-03-01
1. Introduction
Welcome to GlowLens (glowlens.ai). We take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service. GlowLens is an AI-powered cosmetic ingredient analysis tool that helps you understand the ingredients in your skincare and cosmetic products. This policy applies to all users of our website and services.
2. Data Controller
The data controller responsible for processing your personal data is:
Nico Jaroszewski Schlosstalstrasse 202 8408 Winterthur Switzerland
Email: info@glowlens.ai
3. Data We Collect
We collect the following categories of personal data:
**Account Data (via Clerk):** When you create an account, we collect your email address, display name, and authentication credentials. This data is processed by our authentication provider Clerk.
**Usage Data:** We collect information about your interactions with our service, including product searches, ingredient analysis results, saved products, and preferences.
**Technical Data:** When you access our website, we automatically collect certain technical information, including your IP address, browser type and version, device type, operating system, referring URL, and pages visited.
**Cookie Preferences:** We store your cookie consent preferences to respect your choices regarding optional data processing.
4. How We Use Your Data
We use your personal data for the following purposes:
- To provide and operate the GlowLens service, including AI-powered ingredient analysis - To create and manage your user account - To store your product analysis history and preferences - To improve and optimize our service based on usage patterns - To ensure the security and integrity of our platform - To comply with legal obligations - To communicate with you about service updates when necessary
5. Legal Basis for Processing
We process your personal data on the following legal bases:
**Consent (Art. 6(1)(a) GDPR / Art. 31 nDSG):** For the use of non-essential cookies and analytics. You may withdraw your consent at any time through our cookie settings.
**Contract Performance (Art. 6(1)(b) GDPR / Art. 31 nDSG):** For processing necessary to provide the core features of our service, including account creation, ingredient analysis, and storing your analysis history.
**Legitimate Interest (Art. 6(1)(f) GDPR / Art. 31 nDSG):** For ensuring the security of our platform, preventing abuse, and making basic service improvements. Our legitimate interest does not override your fundamental rights and freedoms.
6. Third-Party Services
We use the following third-party services to operate GlowLens. Each service processes only the data necessary for its specific purpose:
**Clerk** — Authentication and user management. Processes your email address and display name. Privacy policy: https://clerk.com/privacy
**Google (Gemini API)** — AI-powered ingredient analysis. Processes your product search queries and ingredient lists. No personal account data is shared with Google for this purpose. Privacy policy: https://policies.google.com/privacy
**Bright Data** — Product image search. Processes search queries to find product images. No personal data is included in these queries. Privacy policy: https://brightdata.com/privacy
**Backblaze B2** — Image storage. Stores product images associated with analyses. No personal user data is stored in this service. Privacy policy: https://www.backblaze.com/company/privacy.html
**Convex** — Database and backend infrastructure. Stores user data, analysis results, and preferences. Privacy policy: https://www.convex.dev/privacy
7. Cookies
Our website uses cookies and similar technologies. Essential cookies are necessary for the operation of our website and cannot be disabled. Optional cookies (analytics and marketing) are only set with your explicit consent. For detailed information about the cookies we use, please see our Cookie Policy.
8. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. You may request deletion of your account and associated data at any time by contacting us at info@glowlens.ai. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.
For users who use our service without creating an account (guest users), technical data is retained for a limited period of 90 days and then automatically deleted.
9. Your Rights
Depending on your location, you have the following rights regarding your personal data:
- **Right of Access:** You may request a copy of the personal data we hold about you. - **Right to Rectification:** You may request correction of inaccurate or incomplete data. - **Right to Deletion:** You may request deletion of your personal data. - **Right to Data Portability:** You may request your data in a structured, commonly used, machine-readable format. - **Right to Object:** You may object to the processing of your personal data based on legitimate interests. - **Right to Withdraw Consent:** Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal. - **Right to Lodge a Complaint:** You have the right to lodge a complaint with a supervisory authority.
For users in Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC). For users in the EU/EEA, you may contact your local Data Protection Authority (DPA).
To exercise any of these rights, please contact us at info@glowlens.ai.
10. International Data Transfers
Your data may be processed by third-party service providers located outside of Switzerland and the European Economic Area (EEA). Where such transfers occur, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on the service provider's participation in recognized data protection frameworks. We only transfer data to countries or organizations that provide an adequate level of data protection or where suitable safeguards are implemented.
11. Children's Privacy
GlowLens is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete such data as soon as possible. If you believe that a child under 16 has provided us with personal data, please contact us at info@glowlens.ai.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically. Continued use of GlowLens after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Nico Jaroszewski Schlosstalstrasse 202 8408 Winterthur Switzerland
Email: info@glowlens.ai