Privacy Policy

Last updated: October 24, 2026

This Privacy Policy describes how Glowy ("we", "us", or "our"), operated by SOCIAN SOFT S.R.L., collects, uses, and shares your information when you use our mobile application (the "App").

1. Information We Collect

a. Information Automatically Collected

When you use the App, some data is collected automatically by the third-party services below, to understand how the App is used, to fix errors, to manage subscriptions and, in the free version, to show ads:

• Usage Data: We use Firebase Analytics (Google) to understand how the App is used, for example app opens, sessions and screens, when onboarding starts and ends (with the number of daily reminders you chose), when the subscription offer is shown, when a subscription is bought from that offer and which plan was chosen, in-app purchases, when the AI service is busy, and when an AI affirmation is reported. This data is linked to pseudonymous identifiers, an app-instance ID and your device's Advertising ID, and Google estimates your general location from your IP address. It is not anonymous. Since version 1.0.4 of the App, your name, goal, mood, chosen categories and the text you type are never sent to Firebase Analytics. Earlier versions sent your goal, your mood, your chosen categories and the App's random identifier when onboarding ended, and the text of any feedback you sent from Settings together with that identifier. Your name was never sent.
• Crash Reports: We use Firebase Crashlytics (Google) to collect crash and error reports: stack traces, the state of the App and device details (such as model and operating system version) at the time of the error, a Crashlytics installation ID and a list of recent Analytics events. If an AI answer cannot be read, the error report can include part of that answer, which may repeat words you typed. Crash reports are kept for 90 days.
• Advertising: The free version of the App shows banner ads from Google Mobile Ads (AdMob). To show and measure ads and to prevent fraud, the AdMob SDK collects your IP address (used to estimate your general location), your interactions with ads and the App, diagnostic data, and device identifiers such as the Advertising ID and app set ID. Google uses this data as an independent controller, under its own privacy policy. Where the law requires it, for example in the European Economic Area, the United Kingdom and Switzerland, we ask for your consent through Google's consent form before any ad is requested, and you can change your choice at any time in Settings → Ad privacy choices. On iOS, Google uses the IDFA only if your system tracking permission allows it. On Android, you can reset or delete your Advertising ID in your device settings. Subscribers do not see ads.
• Subscription Data: We use RevenueCat to manage, validate, and track your in-app purchase and subscription entitlements. RevenueCat creates an anonymous ID for every installation of the App, including the free version, and keeps your purchase history, locale and currency. We never receive or store your payment card numbers. All payments are handled by Apple (App Store) or Google (Google Play).

b. Information You Provide & Local-First Architecture

The App is designed to be local-first and does not require any registration or account:

• Your name, goal, mood, chosen categories, reminder settings, liked and saved affirmations, your own affirmations, AI results and streak are stored on your device. Your goal, your mood and the text you type in the AI field leave your device only when you use AI affirmations (see section c below) and, in versions before 1.0.4, with the onboarding event described in section a.
• The App does not send your name or email address to any server. We do not run a database for your data. Our only server is the AI server described in section c. If you email us, we receive your email address and your message and use them only to answer you.
• Device backup: If backup is turned on in your device settings (Android backup to your Google account, or an iCloud or computer backup on iPhone), your device may include the App's data, such as your name and your own affirmations, in that backup and restore it when you reinstall the App. We cannot access these backups. You can turn backup off in your device settings.

c. AI Affirmations (optional, Glowy Pro)

The first time you turn on AI, the App asks for your permission. After you allow it, each time you tap Generate the App sends the following to our server:

• the mood and the goal you chose in the App;
• the text you type in the AI field, if any;
• a random identifier created by the App on your device, used only to limit how often requests can be made.

Your name is never sent. If the service is busy, the App may resend the same request automatically when the wait time ends. Our server runs on Cloudflare Workers. It forwards your mood, your goal and your text, without the identifier, to OpenRouter, which passes them to an AI model provider. If a model does not answer, our server tries another one, up to four models in total. It returns the generated affirmations to the App. Our server does not save the request or the response. If an AI model fails, our server may log a short error message, which could include part of your text; these logs are deleted automatically within 7 days. The App uses free AI models, whose providers may store requests and use them to improve their models. This is why your name is never sent. Please do not include personal or sensitive details, such as health information, in the text you type. Cloudflare processes your IP address to protect the service from abuse (rate limiting). The generated affirmations are saved only on your device.

Reporting AI affirmations: You can report an AI affirmation with the flag button next to it. The App removes it from your AI affirmations on your device and records in Firebase Analytics that a report was made. The text of the affirmation is not sent.

2. How We Use Your Information

We use the collected information solely to:

• Provide, maintain, and improve the App's features and user experience.
• Diagnose technical bugs and crashes to ensure app stability.
• Process and verify subscription entitlements via the Apple App Store, Google Play and RevenueCat.
• Generate AI affirmations when you request them, and limit how often requests can be made to prevent abuse.
• Count reports of AI affirmations, to improve the AI feature.
• Show ads in the free version, following your ad consent choices.
• Comply with applicable legal obligations.

3. Sharing Your Information

We do not sell, rent, or trade your personal data. We share it only with the recipients below. Most act as our service providers. Google, for ads in the free version, and the AI model providers, which may use your requests to improve their models, also use the data for their own purposes. Depending on our Google Analytics data-sharing settings, Google may also use analytics data to improve its own products and services.

• Google (Firebase & AdMob): For usage analytics, crash reporting, and ad serving in the free version.
• RevenueCat: For secure in-app subscription and receipt validation.
• Cloudflare: Hosts the server that forwards AI requests.
• OpenRouter and the AI model providers it selects: Generate AI affirmations from the data listed in section 1.c, only when you use that feature.
• Apple App Store and Google Play: For billing, payment processing, and application distribution.

Our providers may process your data outside the European Economic Area, including in the United States. Google may process data wherever it has facilities, and OpenRouter may transfer data to its servers in the United States.

4. Your Rights & Data Control

Data stored only on your device is erased when you clear the App's data or uninstall the App. This does not erase copies already sent to the services in section 1, or a device backup.

• Ad consent: Where consent is required, you can change your choice at any time in the App under Settings → Ad privacy choices.
• AI affirmations: Sending data to the AI service is based on your consent. Nothing is sent unless you turn on AI and tap Generate, and the AI switch is off each time you open it. A request that is waiting because the service was busy may still be sent automatically. To withdraw your consent, clear the App's data in your device settings; the App will then ask again. Requests already sent may be kept by the AI provider under its own terms.
• Deleting your data: To ask us to delete data held by our providers, email hello@socian.eu. For subscription records, include your Google Play order number (it starts with "GPA.") or your App Store order ID, so that we can find them. Analytics and crash data are linked only to random identifiers that we cannot connect to you, so we usually cannot find them; they are deleted automatically after the periods in section 5.

Under the GDPR you have the right to access, rectify, erase, and restrict the processing of your personal data, to object to it, and to lodge a complaint with a supervisory authority (in Romania: ANSPDCP, www.dataprotection.ro). For any questions about your data rights, please contact us.

5. Data Retention and Security

• Firebase Analytics keeps event data linked to the identifiers above for up to 14 months. Reports that combine many users are not affected by this limit.
• Firebase Crashlytics keeps crash reports for 90 days.
• Error logs on our AI server are deleted automatically within 7 days.
• RevenueCat keeps purchase records while we use its service, unless we delete them earlier at your request.
• Google keeps advertising data under its own privacy policy.
• Data stored on your device stays there until you delete it, clear the App's data or uninstall the App.
• All data the App sends is encrypted in transit (HTTPS/TLS).

6. Children

Glowy is meant for adults aged 18 and over. It is not directed at children, and we do not knowingly collect data from children. If you think a child has used the App, contact us at hello@socian.eu.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated "Last updated" date.

8. Contact Us

If you have any questions, suggestions, or concerns regarding this Privacy Policy or your data, please contact us at:

SOCIAN SOFT S.R.L.
Email: hello@socian.eu