Make today count with GlowUp Daily

Privacy Policy

Effective date:

GlowUp Daily respects your privacy. We collect the minimum data needed to provide the app and improve features.

1) Who we are (Data Controller)

Data Controller: David Gradinariu
Contact email: glowupdailyapp@gmail.com
Data Protection Officer: Not required; no DPO appointed. You may contact us via the details above.

2) Scope

This Privacy Policy explains how GlowUp Daily (“we”, “us”, “our”) processes personal data when you use our Android app and related services. It applies to users located in the European Economic Area (EEA), including Romania, and worldwide. We comply with the EU General Data Protection Regulation (GDPR) and applicable Romanian law.

3) What personal data we collect

We only collect the information necessary to provide and improve the app. Categories include:

If you decline consent, only non-personalized ads are shown and profiling is not used.

Account identifiers

• Email address
• Firebase User ID (UID)
• Google account ID token (for sign-in, not retained long-term)

Profile and app content you provide

• Goals/fitness goals
• Profile data: display name, age, height, weight, fitness level, workout preferences
• Daily task completions (physical, mindset, social)
• Journal entries (free text you create)
• AI chat history/messages (content you submit for AI features)
• User-created tasks, completion states, and dates
• “Mental wins” entries and dates
• Nutrition data per date (meals, calories/macros, timestamps)
• Nutrition targets (calories/macros, manual overrides)
• Streak count and last completed day

Device and app data

• Device identifiers created by Firebase (e.g., for Auth)
• Notification tokens (for push or reminders, if enabled)
• App version, OS version, and technical logs (e.g., error logs)

Media (optional)

If you choose to take or upload a photo (e.g., for AI features), the image and derived metadata are processed to provide the feature. You can always decline camera or storage permissions.

Health-related measurements (optional)

Health-related measurements via camera (e.g., estimated heart rate, blood oxygen / SpO₂) are processed solely on the user’s device to produce on-screen estimates. Image frames or optical signals captured for this purpose are not persisted, uploaded, or shared with any external servers or third parties. The app only uses the camera for this specific feature if you grant camera permission.

Payment and subscription data

We do not receive your card details. We may receive subscription status/entitlements and purchase tokens or order identifiers from Google Play Billing to verify your access.

Server logs

Requests to our Cloud Functions (e.g., promo code validation, email change confirmation, Gemini proxy) may log timestamp, UID, and technical request metadata.

We do not collect precise location, contact lists, SMS, call logs, or health data from connected devices.

Advertising data (if ads are enabled)

If you consent to advertising, we may collect the following via Google AdMob:

• Advertising ID (Google Advertising ID)
• Approximate location (derived from IP, if required for ads)
• Device and app interaction information
• Ad interaction data (impressions, clicks, frequency capping)
• Information used for personalized or non-personalized ads, depending on your consent

4) Sources of data

• Directly from you (account setup, profile, tasks, journal, meals, AI chats)
• Automatically from your device when using the app (technical logs)
• From Google Play Billing (subscription status and entitlement verification)

5) Purposes and legal bases for processing (GDPR Art. 6)

We process your personal data for the following purposes and under the listed legal bases:

• Provide and operate the app (authentication, syncing, storing your content)
  Legal bases: Performance of a contract (Art. 6(1)(b)), Legitimate interests (Art. 6(1)(f))
• Account creation, sign-in, and session management (Firebase Auth, Google Sign-In)
  Legal bases: Contract, Legitimate interests
• Display, save, and sync your data (Firestore)
  Legal bases: Contract, Legitimate interests
• AI features (optional) Your prompts/inputs (and optional images) are proxied to Google’s Generative Language API to generate responses.
  Legal bases: Contract (feature requested), Consent (image processing), Legitimate interests
• Notifications and reminders (optional) Local notifications and scheduling to remind you of tasks.
  Legal bases: Consent (opt in/out in system/app settings)
• Subscription management and access control (Google Play Billing verification)
  Legal bases: Contract, Legitimate interests, Legal obligation (for receipts where required)
• Security, fraud prevention, and debugging
  Legal bases: Legitimate interests, Legal obligation
• Legal compliance and enforcement (e.g., responding to lawful requests)
  Legal bases: Legal obligation
• Health-related measurements via device camera (e.g., heart rate, SpO₂; processed locally on the device, never stored or transmitted)
  Legal bases: Explicit consent for special category data (Art. 9(2)(a)), Performance of a contract / requested service (Art. 6(1)(b))

Advertising (Google AdMob)

The app displays advertisements using Google AdMob. Depending on your consent:

• Personalized ads are shown if you provide consent under GDPR.
• Non-personalized ads may be shown without personalized profiling.

Legal bases:

• Consent (Art. 6(1)(a)) for personalized advertising
• Legitimate interests OR consent for non-personalized ads (as required by Google’s policies)
• Legitimate interests for measurement, fraud prevention, and frequency capping

We do not sell your personal data.

6) AI features and your content

If you use AI features, we proxy your text (and optional images) through our Cloud Function to Google’s Generative Language API. We do not use your personal data to train our own models. Your inputs may be processed by Google under their terms to generate responses. See Google’s policy: Google Privacy Policy.

Please do not include sensitive personal data in prompts or images unless you consent to its processing for this purpose. You can avoid AI processing by not using these features or disabling related permissions (e.g., camera).

7) Payments and subscriptions

Subscriptions are handled through Google Play Billing. We do not process or store your card or payment instrument details. We may process subscription status/entitlements, purchase tokens, or order identifiers provided by Google to verify and manage your access.

Refunds are subject to Google Play’s policies and your local consumer law.

8) Notifications and device permissions

• Notifications: We ask permission before sending notifications. You can opt out anytime in Android system settings.
• Exact alarms: The app may schedule time-based reminders. On newer Android versions, exact alarms may require an additional permission, which you can manage in system settings.
• Camera / Photos / Storage (optional): If you choose to use features requiring media, we will request access. You can decline and still use the app’s core features.
• Camera permission & consent: We will request your explicit permission before accessing the camera for health-related measurements. By allowing camera access for these features you provide explicit consent for local processing of the measurements. You may revoke camera permission at any time in your device settings; revoking permission will disable the related feature.

9) Children’s privacy

The app is intended for users aged 16 and older. If you are under 16, you must not use the app. If a parent or guardian believes a child under 16 has provided personal data, please contact us to request deletion.

10) Data retention

• Account and profile data: Retained while your account is active. Deleted upon your deletion request (subject to legal obligations).
• Journal entries, AI chat history, tasks, nutrition logs, and mental wins: Retained while your account is active until you delete them or request account deletion.
• Technical logs: Retained only for the limited period needed for security and diagnostics.
• Payment and subscription records: Retained as required by law and to manage your subscription.

We periodically minimize or aggregate data where feasible.

11) Data sharing and processors

Note on camera-based health measurements: Any health-related measurements derived from the camera (e.g., heart rate, SpO₂) are processed locally on the device and are not shared with Google, Firebase, or any other processors or third parties. No image frames or optical signals used to produce these estimates are uploaded. We share personal data only with trusted service providers acting as processors, and only as needed to provide the app:

• Google Firebase (Auth, Firestore) Hosting, storage, authentication
  Data: Account identifiers, user content, technical data
  Location: EU and/or international (see transfers below)
  Privacy: Google Privacy Policy
  DPA/SCCs: Available from Google; we rely on their DPA and SCCs where applicable
• Google Cloud Functions Secure endpoints for AI proxy, promo validation, email change workflows
  Data: UID, requests, and content routed to AI (if used)
  Privacy/DPA: As above (Google)
• Google Play Billing Subscription management and purchase verification
  Data: Purchase tokens, order identifiers, subscription status
  Privacy: Google Privacy Policy
• Email service (if configured) Gmail SMTP (Google) or SendGrid (Twilio)
  Purpose: Transactional emails (e.g., email change confirmations)
  Data: Email address and message content
  Privacy: Gmail Privacy, SendGrid Privacy
• Google AdMob (Advertising)
  Purpose: Serving ads, performing ad measurement, fraud prevention, frequency capping
  Data processed:
  • Advertising ID
  • Device information
  • Approximate location (coarse, if required)
  • Ad interaction events (e.g., impressions, clicks)
  
  Privacy: Google Privacy Policy
  Legal basis: Consent (personalized ads); Legitimate interests or consent (non-personalized ads)
  Location: EU and/or international (Google may store/process data outside the EEA under SCCs)

We may disclose data if required by law or to protect our rights, users, or the public, in compliance with GDPR. We never share your data with advertisers and we do not sell personal data.

12) International transfers

We may transfer data outside the EEA (for example, to Google in the United States). Where transfers occur, we rely on:

• Adequacy decisions (where applicable)
• Standard Contractual Clauses (SCCs)
• Other appropriate safeguards under GDPR Art. 46

You may request a copy or further information about these safeguards by contacting us.

Local-only processing exception: Health-related measurements that are processed exclusively on the user’s device are not transferred internationally, as they are not uploaded or shared.

13) Security

We implement technical and organizational measures appropriate to the risk, including:

• Encryption in transit (TLS) for network communications
• Access controls and least-privilege principles for databases
• Authentication and authorization via Firebase
• Operational logging and monitoring for our Cloud Functions

No system is perfectly secure. Please protect your account credentials and your device.

14) Your GDPR rights

Subject to conditions and exceptions, you have the following rights:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase data (“right to be forgotten”) (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time (where processing is based on consent)

If data are processed only locally and not retained (e.g., camera-based on-screen measurements), certain rights such as access to a stored copy of those ephemeral data may not be applicable because we do not retain those data. However, you always have the right to withdraw consent for processing (e.g., by revoking camera permission) and to request information about the app’s processing practices by contacting us at glowupdailyapp@gmail.com.

You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP):
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, România Website: dataprotection.ro Email: anspdcp@dataprotection.ro Phone: +40 318 059 211

15) How to exercise your rights

• In-app: You may review and edit much of your data directly within the app.
• Deletion: Request account deletion via the app (if available) or by emailing us at glowupdailyapp@gmail.com. We will verify your identity and process the request within the statutory timeframe.
• AI content: Delete AI chat history from within the app (if available) or contact us directly.

16) Data we do not process

We do not collect sensitive data unless you voluntarily include it in journal entries, AI prompts, or other free-text fields. Please avoid sharing sensitive information unless necessary.

We do not perform marketing profiling or automated decision-making that produces legal effects concerning you.

We do not retain or transmit health data obtained through on-device camera measurements. If you voluntarily include health information in journal entries or AI prompts, that content may be retained as described elsewhere.

17) Cookies and tracking

Our Android app does not use browser cookies. However, service SDKs may use identifiers or technologies for core functionality and advertising.

Advertising SDKs (Google AdMob)

The app uses Google AdMob, which may use:

• Mobile advertising identifiers (e.g., Google Advertising ID)
• IP-based approximate location
• Device signals
• Local storage mechanisms for ad frequency, measurement, and fraud prevention

These technologies support personalized or non-personalized ads, depending on your consent via the GDPR consent dialog (Google User Messaging Platform – UMP).

Users in the European Economic Area (EEA) are shown a consent form (Google User Messaging Platform – UMP) where they can choose:

• Personalized ads (consent)
• Non-personalized ads (limited processing)
• Reject all advertising data processing

If you decline consent, only non-personalized ads are shown.

18) Third-party links

The app may contain links to third-party sites (e.g., Google policies). We are not responsible for the privacy practices of those third parties. Please review their privacy policies when visiting their sites.

19) Changes to this policy

We may update this policy from time to time. When we do, we will update the “Effective date” shown at the top. If changes are material, we will provide additional notice (for example, in-app notification).

20) Contact us

For questions or requests about this Privacy Policy or your personal data, please contact us at:
Email: glowupdailyapp@gmail.com

Terms of Service

Please read these terms carefully before using GlowUp Daily.

1) About these Terms

These Terms of Service (“Terms”) govern your access to and use of the GlowUp Daily Android application and related services (“Service”). By creating an account, accessing, or using the Service, you agree to these Terms. If you do not agree, please do not use the Service.

Provider: David Gradinariu
Contact: glowupdailyapp@gmail.com

If you are an individual consumer residing in the EU/EEA (including Romania), you benefit from mandatory consumer protection rights. Nothing in these Terms limits those rights.

2) Eligibility

• You must be at least 16 years old to use the Service.
• If you use the Service on behalf of an entity, you confirm you have authority to bind that entity.
• You must comply with applicable laws and these Terms at all times.

3) Account and Security

• Account creation: You may sign in using Firebase Authentication (e.g., Google Sign-In or email/password).
• Accuracy: You must provide accurate information and keep your account details up to date.
• Security: Keep your credentials confidential and notify us promptly of any unauthorized use or security breach.
• One account per person. Your account is personal and non-transferable.

4) Description of the Service

GlowUp Daily provides tools for habit-building and personal well-being, including:

• Daily task tracking, streaks, journaling, “mental wins,” and custom tasks
• Nutrition logging and targets (calories/macros) that you enter
• Optional AI features (text and optional images) routed securely to Google’s Generative Language API
• Local notifications and reminders
• Planned in-app subscriptions via Google Play Billing that grant access to premium features

The Service may provide optional, on-device estimations of health-related metrics (for example, estimated heart rate or blood oxygen / SpO₂) using your device camera and flash where available. By enabling and using these features, you expressly consent to the app accessing the camera for this purpose.

The Service displays advertisements, including personalized and non-personalized ads delivered via Google AdMob, depending on your consent and device settings.

• Local processing: Measurements are processed locally on your device to create on-screen estimates. Image frames, optical signals, or derived raw data used to produce these estimates are not uploaded, stored on our servers, or shared with third parties, unless you explicitly opt into a feature that does so and give separate consent.
• Not a medical device: These measurements are provided for informational and wellness purposes only and do not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for any medical concerns.
• Accuracy and risk: Estimates may be inaccurate due to device differences, user behavior, or environmental factors. You acknowledge and accept these limitations and agree not to rely on the results for safety-critical decisions.

5) User Content and License

Your Content: You may submit content such as journal entries, tasks, goals, AI prompts, nutrition logs, and images (“User Content”). You retain ownership of your User Content.

License to us: Solely to operate, improve, and provide the Service, you grant us a non-exclusive, worldwide, royalty-free license to host, store, reproduce, process, and display your User Content. This license ends when your content is deleted from our systems, subject to reasonable backup/archival cycles and legal obligations.

Responsibility: You are responsible for your User Content and must have the necessary rights to share it. Do not upload unlawful, infringing, or harmful content.

Backups: We are not responsible for backing up your User Content. Please consider exporting or keeping your own copies.

6) AI Features

Processing: When you use AI features, your prompts (and, if you choose, images) are routed through our Cloud Functions to Google’s Generative Language API to generate responses.

Limitations: AI may produce inaccurate or inappropriate output. You are responsible for verifying results. Do not rely on AI features for medical, nutritional, legal, or safety-critical decisions.

Permissions: Do not upload third-party personal data or sensitive data unless you have a lawful basis and consent where required.

Opt-out: You can avoid AI processing by not using AI features and by disabling related permissions (e.g., camera).

7) Acceptable Use

You agree not to:

• Use the Service unlawfully or infringe the rights of others (privacy, intellectual property, personality rights)
• Upload malicious code or attempt to circumvent security
• Reverse engineer or scrape the Service except where legally permitted
• Use the Service to provide competing services or for advertising/spam
• Harass, defame, or harm others, or share content that is hateful, violent, or otherwise prohibited by law
• You may not use the Service to manipulate, interfere with, or fraudulently engage with advertisements (e.g., automated clicks, incentivized click behavior).

We may suspend or terminate accounts that violate these Terms.

8) Third-Party Services

The Service integrates with third-party providers, including:

• Google Firebase (Authentication, Firestore)
• Google Play Billing
• Google Cloud Functions (including our Gemini proxy)
• Email providers (Gmail SMTP or SendGrid) for transactional emails
• Google AdMob (advertising services — personalized and non-personalized ads)

Advertising services are subject to Google’s Advertising Terms and Privacy Policies. Your ad choices, including GDPR consent, are managed through the consent form shown in the app.

Your use of these components may also be governed by their respective terms and privacy policies. We are not responsible for the operation or practices of third-party services.

9) Subscriptions, Billing, and Promotions

Provider: Subscriptions are purchased and managed through Google Play (Google Play Billing). We do not store your payment card details.

Pricing: Prices, currency, and taxes are displayed in Google Play before purchase.

Auto-renewal: Subscriptions renew automatically unless canceled before the renewal date.

Cancellation: You may cancel anytime via Google Play > Payments & subscriptions. Access remains available until the end of the paid period.

Free trials: If offered, trials convert to a paid subscription unless canceled before the trial ends. Eligibility and duration may vary.

Changes: We may change subscription pricing, features, or tiers with reasonable prior notice. Changes take effect at the next billing cycle, subject to applicable law.

Refunds: Refunds are handled under Google Play policies and applicable law. Partial refunds are typically not provided once a billing period begins, unless required by law. You may request refunds directly through Google Play.

Promotions and promo codes: We may offer promo codes granting time-limited access. Conditions will be disclosed at redemption. Misuse (e.g., resale, fraud) may result in revocation.

Pre-contract EU Consumer Information (distance services)

• Trader identity: See Section 1.
• Main characteristics: Digital fitness and well-being tools as described in Section 4.
• Total price: Displayed in Google Play prior to purchase, including taxes where applicable.
• Duration: Subscription period shown at checkout; auto-renews until canceled.
• Termination: Cancel anytime in Google Play; effective at end of billing period.
• Functionality and interoperability: Android app via Google Play; requires compatible device, internet access, and a Google account.
• Digital content/performance: Access begins immediately after purchase unless otherwise stated.

Right of withdrawal (cooling-off): Under EU law, for digital content/services delivered immediately, consumers may lose the 14-day withdrawal right once performance begins, if they consent to immediate performance and acknowledge losing the right. Google Play will present applicable disclosures where relevant. Your statutory rights remain unaffected.

10) Privacy and Data Protection

Your use of the Service is also governed by our Privacy Policy, which explains what data we collect and how we process it under GDPR and Romanian law.

Where we rely on consent (e.g., notifications, camera), you may withdraw consent at any time in your device settings or within the app settings (where available).

Advertising displayed in the Service is governed by our Privacy Policy, which explains how Google AdMob processes data depending on your consent.

11) Intellectual Property

Our IP: The Service and its content — including the software, user interface, trademarks, logos, graphics, and other materials (excluding your User Content and any open-source components) — are owned by us or our licensors and are protected by copyright, trademark and other intellectual property laws.

Limited license to you: Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to install and use the app on an Android device that you own or control, solely for your personal, non-commercial use.

Feedback: If you provide suggestions, ideas, or other feedback about the Service, you grant us a worldwide, perpetual, irrevocable, royalty-free license to use, modify, and implement that feedback without obligation to you.

Open source: The Service may include open-source software governed by separate licenses. To the extent any open-source license grants you rights that conflict with these Terms, the open-source license will govern for that component.

12) Service Changes and Availability

We may modify, suspend, or discontinue the Service (or parts of it) at any time. Where practicable, we will provide reasonable notice for material changes. We may also push updates to the app for performance, security, or new features.

While we strive to keep the Service available, we cannot guarantee uninterrupted or error-free operation. We are not liable for temporary outages, maintenance periods, or interruptions beyond our reasonable control.

13) Health and Wellness Notice (No Medical Advice)

GlowUp Daily provides general wellness and habit-building tools and content. It is not a medical device and does not offer medical, diagnostic, nutritional, or treatment advice.

Always consult a qualified health professional for any medical questions or concerns. If you experience adverse symptoms, discontinue use and seek professional medical help immediately. Do not rely on the Service for safety-critical or medical decisions.

14) Termination

• By you: You may stop using the Service at any time. You may request account deletion as described in our Privacy Policy. To stop future subscription charges, cancel via Google Play.
• By us: We may suspend or terminate your access with notice where practicable, or immediately for material breach, fraud, or legal reasons.
• Effect: On termination, your license to use the Service ends and you must cease use. Sections that by their nature should survive termination (for example, intellectual property, disclaimers, limitation of liability, indemnity, and governing law) will continue to apply.

15) Disclaimers

To the maximum extent permitted by applicable law:

• The Service is provided “as is” and “as available” without warranties of any kind (express or implied), including fitness for a particular purpose, accuracy, availability, or non-infringement.
• AI outputs may be inaccurate or inappropriate; you should verify information before relying on it.
• We do not warrant that the Service will be uninterrupted, secure, or error-free.
• Consumer guarantees that cannot be excluded by law remain in force.

16) Limitation of Liability

To the maximum extent permitted by applicable law:

• We are not liable for indirect, incidental, special, punitive, or consequential damages, including loss of profits, data, or goodwill, or for service interruption, even if we have been advised of the possibility of such damages.
• Our aggregate liability arising out of or related to the Service will not exceed the greater of: (a) the total amount you paid to us for the Service in the 12 months immediately before the claim; or (b) EUR 50.
• Nothing in these Terms excludes or limits liability for death or personal injury caused by our negligence, fraud, or any other liability that cannot be excluded under applicable law. Your mandatory EU/EEA consumer rights remain unaffected.

17) Indemnity

To the extent permitted by applicable law, you agree to indemnify, defend, and hold us harmless from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising from: (a) your breach of these Terms; (b) your User Content; or (c) your unlawful or negligent use of the Service.

18) Communications; Electronic Notices

You consent to receive communications and notices electronically (for example, in-app messages, email, or via Google Play). These electronic communications satisfy any legal requirement that such notices be in writing.

If you withdraw consent to electronic communications where permitted by law, we may be required to suspend or restrict access to certain features.

19) Governing Law and Dispute Resolution

Governing law: These Terms are governed by Romanian law, with EU law applicable where mandated.

Jurisdiction: The courts of Romania shall have jurisdiction, without prejudice to any mandatory rights that allow consumers to bring claims in their country of residence.

Amicable resolution: Please contact us first so we can try to resolve any issue informally.

EU ODR: You may use the EU Online Dispute Resolution platform: https://ec.europa.eu/odr.

Romania consumer ADR: See the National Authority for Consumer Protection (ANPC) resources: https://anpc.ro/.

These alternative dispute resolution processes do not limit your right to bring a claim before competent courts.

20) International Use

The Service may be accessed worldwide. You are responsible for complying with local laws when using the Service. We may restrict access to the Service in jurisdictions where use is prohibited.

21) Changes to these Terms

We may update these Terms from time to time. When we do, we will post the updated Terms with a new “Effective date.” If changes are material, we will provide additional notice (for example, via an in-app notification). Continued use of the Service after the effective date constitutes acceptance of the updated Terms.

22) Miscellaneous

• Entire agreement: These Terms, together with the Privacy Policy and any service-specific terms, constitute the entire agreement between you and us concerning the Service.
• Severability: If any provision of these Terms is held to be unlawful, void, or unenforceable, that provision will be limited or removed to the minimum extent necessary and the remaining provisions will remain in full force and effect.
• No waiver: Our failure to enforce any right or provision in these Terms will not operate as a waiver of such right or provision.
• Assignment: You may not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.
• Force majeure: We are not liable for delays or failures in performance resulting from events beyond our reasonable control, such as network outages, natural disasters, strikes, or other force majeure events.

23) Contact

If you have questions about these Terms or the Service, please contact us at:
Email: glowupdailyapp@gmail.com