Privacy Policy

Gold Tusk Inc., operating as GlowUp ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Services").

Please read this Privacy Policy carefully. By using the Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

2.1 Information You Provide Directly

Account and Profile Information:

• Full name, date of birth, gender
• Race/ethnicity (used for personalized biomarker reference ranges)
• Email address (if provided)
• Health and wellness goals you select

Health and Medical Information:

• Laboratory test reports you upload (PDF or image files)
• Biomarker values extracted from your lab reports
• Biological age calculations
• Health notes, supplement information, meal and nutrition data
• Health goals and protocol selections

Communications:

• Messages and queries you send through the AI chat feature
• Feedback or correspondence you send to us

Payment Information: Payment is processed through Apple App Store or Google Play Store. We do not directly collect or store your payment card information.

2.2 Information Collected Automatically

• Device type, model, operating system and version
• Unique device identifiers and app version
• Features you use, actions you take, date and time of activities
• Error logs and performance data

2.3 Information from Third-Party Sources

Apple HealthKit (iOS): If you choose to connect Apple HealthKit, we may access workout, sleep, heart rate, step count, body measurement, and respiratory data. HealthKit data is used solely to provide personalized health insights to you. Health metrics read from HealthKit may be included in the data sent to our AI processing providers (see Section 5) to generate those insights. We never use HealthKit data for advertising or marketing, and we never sell it.

2.4 Information Generated by Our Services

• Biological age estimates calculated from your biomarker data
• Biomarker status classifications
• Health insights and recommendations generated by AI analysis
• Conversation summaries and vector embeddings

• To extract and analyze biomarkers from your uploaded lab reports
• To calculate your estimated biological age
• To provide personalized health insights and recommendations
• To power the AI chat assistant with context about your health
• To respond to your inquiries and support requests
• To detect, prevent, and address fraud, abuse, or security issues
• To analyze usage patterns and improve the Services

Your health data is stored on secure cloud servers hosted on Google Cloud Platform. We use encryption at rest (industry-standard encryption with unique per-user keys) and encryption in transit (HTTPS/TLS).

Third-Party AI Services: AI chat, meal photo analysis and lab report analysis are performed by AI providers outside GlowUp. We ask for your permission in the app before any of your data is sent to them. Because these features are core to GlowUp, there is no separate AI-off mode; to withdraw your permission, delete your account (Settings > Account > Delete Account), which stops all AI processing and deletes your data, or contact us at privacy@glowuphealth.co.

What we send: your chat messages and any photo or document you attach; meal photos, descriptions and nutrition label scans; lab reports you upload and the biomarkers extracted from them; your profile (first name, age, gender, region, height, weight and goals); health data you log in GlowUp (meals, supplements, protocols, reminders, notes); and Apple Health / Health Connect metrics if you connect them.

Who we send it to: Anthropic, PBC (Claude API) — AI chat, meal photo analysis, lab report analysis; and OpenAI, L.P. — search and summarization of your own past conversations. No other AI provider receives your data. We will update this policy and ask again in the app before adding another AI provider.

What we never send: your email address, phone number, account credentials, or payment card details.

How they protect it: both providers act as our processors under written data processing agreements that require confidentiality and security protections equivalent to those described in this policy. They may use your data only to return our result, are contractually prohibited from training their models on it, and delete API inputs and outputs within 30 days.

Payment Processing: Apple App Store, Google Play Store, and RevenueCat for subscription management.

We may also disclose your information when required by law, in connection with business transfers, or with your consent. We may use de-identified or aggregated data for research and analytics.

We retain your information for as long as your account is active or as necessary to provide the Services. You can delete your account and all associated data in the app under Settings > Account > Delete Account, or by contacting us at privacy@glowuphealth.co. We will delete your data within 60 days of a deletion request.

We implement encryption at rest with unique per-user keys, encryption in transit (HTTPS/TLS), secure authentication via Firebase, role-based access controls, and cloud infrastructure hosted on Google Cloud Platform. However, no method of transmission or storage is 100% secure.

• Access: View your health data within the app at any time
• Correction: Update your profile through app settings
• Deletion: Delete your account in-app under Settings > Account > Delete Account, or contact privacy@glowuphealth.co
• HealthKit: Revoke permissions via Settings > Privacy > Health
• Notifications: Disable through device settings

California residents have rights under CCPA/CPRA including the right to know, delete, correct, and opt-out of sale/sharing. Residents of Virginia, Colorado, Connecticut, and other states with privacy laws may have similar rights. Contact privacy@glowuphealth.co to exercise these rights.

If you access the Services from outside the United States, your information may be transferred to and processed in the United States.

The Services are not intended for individuals under 18. We do not knowingly collect personal information from children under 18.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the effective date.

Gold Tusk Inc.
Email: privacy@glowuphealth.co

GlowUp is not a covered entity under HIPAA. We are a consumer wellness application committed to protecting your health information as described in this policy.

Information you provide may be used to improve our AI systems. Contact privacy@glowuphealth.co to opt out.