Privacy Notice

GlowUp365 ("we", "us") operates GlowUp365 and is the data controller for personal data processed via the Service.

1. Data we collect

• Account data: name, email, login credentials.
• Profile data: goals, quiz answers you choose to provide.
• Usage data: habits, journal entries, progress within the program.
• Technical data: IP address, device identifiers, browser telemetry.
• Support communications you send us.

2. Why we use it (purposes & legal basis)

• Provide and operate the Service — contract performance.
• Account creation and authentication — contract performance.
• Security and fraud prevention — legitimate interests.
• Product improvement and analytics — legitimate interests.
• Customer support — contract performance / legitimate interests.
• Marketing emails — only with your consent.

3. Who we share data with

• Paddle — our Merchant of Record, for payments, subscription management, tax compliance and invoicing.
• Hosting & infrastructure providers (Lovable Cloud / Supabase).
• Authentication providers (Google) when you sign in with them.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

4. International transfers

Data may be processed outside the EEA by our service providers. We rely on Standard Contractual Clauses or equivalent safeguards for such transfers.

5. Retention

We keep your data while your account is active. After deletion we remove or anonymise personal data, except where retention is required by law (e.g. tax).

6. Your rights (GDPR)

You have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to withdraw consent. You may also lodge a complaint with your supervisory authority. We aim to respond within one month. To exercise rights, contact us via paddle.net or our support address.

7. Security

We use appropriate technical and organisational measures (encryption in transit, access controls, hashed passwords) to protect your data.

8. Cookies

We use essential cookies needed to run the Service (e.g. keeping you signed in). We do not use marketing cookies.

9. Changes

We will update this notice when our practices change. The latest version is always available on this page.