Privacy Policy

The Skinn ChatGPT integration processes focused public catalog queries and record IDs. It does not receive your full conversation, access your app account or private library, or request photos, medical histories or credentials. Query text is used to return matching records and is not intentionally retained in an integration query-history database.

Render hosts the integration and Convex supplies catalog data. OpenAI may supply an anonymized caller identifier on tool calls. We convert it to a keyed hash for shared fair-use quotas; it is not linked to your app account and is not used for authentication. Requests without it use a separate shared anonymous allowance. Requests from OpenAI connector networks do not share a per-IP user quota. Direct traffic outside those published networks has separate network-based abuse limits, using keyed address hashes. Rate counters expire within seven days. Infrastructure security and request logs can include network addresses, paths, status and timing; retention follows the hosting and monitoring services’ configured operational periods.

When enabled, Mixpanel receives aggregate tool names, response status and duration under one shared integration identifier. Query text, catalog results, app user IDs and caller IP addresses are excluded from these events. Aggregate metrics are retained for service reporting and cannot be separated into a personal conversation history. OpenAI processes your ChatGPT conversation under its own terms and privacy controls.

Cards may load app icons and public product or recipe images directly from our websites, catalog image providers or the named recipe publisher. Those hosts receive the network information needed to deliver the image. Image requests omit referrer information. Download links open the App Store under Apple’s terms and privacy controls.

Stop future requests by disconnecting or not invoking the plugin. Contact our support page for access or deletion questions. The integration does not create an app account or change existing app analytics choices.

Account data. When you sign in with Apple, we receive your Apple user ID. We use this only to identify your account across devices.

Scans. When you scan a barcode, we send the barcode number to our server to look up the product. When you photograph an ingredient label, we send the image to our server so our AI can read the ingredients. Photos are used only to produce the scan result and are not retained beyond what is needed to return that result.

Preferences. Skin type, allergens, and personalization settings you set inside Glow are stored on your device and synced to your account.

Usage data. We collect basic anonymous usage data (which screens are used, error reports) so we can fix bugs and improve the app. This data is not sold and does not include the contents of your scans.

Glow uses Apple’s TrueDepth API only as an on-device guide during a scan: it helps the app detect when your face is centered and confirm we are capturing each angle (front, left, right) clearly before taking a photo. The TrueDepth signal is processed live on your device.

We do not collect face data. Glow does not store, transmit, or retain depth maps, face geometry, face mesh data, or any other face data produced by the TrueDepth API. This data never leaves your device.

We do not share face data. Because no face data is collected, none is shared with Optimal Apps, our servers, our AI providers, advertisers, analytics tools, or any other third party.

We do not use face data for identification, advertising, or training. The TrueDepth signal is used only as a live scanning aid and is discarded as soon as the scan completes. It is never used to identify you, build a profile, target advertising, or train machine-learning models.

The photographs you choose to capture during a scan are handled under “Scans” above: they are sent to our server only to produce that scan’s skin analysis result and are not retained beyond what is needed to return that result.