Last updated: April 25, 2026
Privacy Policy — Glowyug Android App
Glowyug(“we”, “our”, or “us”) provides a personalized face yoga and facial wellness application for Android devices. This Privacy Policy explains how we collect, use, store, process, and protect your personal data in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDP) and Google Play Developer Policies.
The Short Version
- We collect only the minimum data required to deliver your customized face yoga plan.
- Camera & Photo Privacy: Selfies uploaded for skin analysis or exercise checks are stored in your private encrypted account. We never sell your photos and never use them to train public or third-party AI models.
- We never sell your personal information or contact details to third parties.
- Payment data is securely processed via certified, RBI-licensed payment gateways (e.g. Razorpay) or Google Play Billing. We never store or access your credit/debit card numbers or UPI PINs.
- You can request complete account and data deletion at any time directly in the app or by emailing our Grievance Officer.
1. Who We Are (Data Fiduciary)
Glowyug is the Data Fiduciary responsible for your personal data under the DPDP Act, 2023. For questions or requests regarding your personal data, you may reach our Grievance Officer at grievance@glowyug.com.
2. Data We Collect
Depending on how you interact with the Glowyug Android mobile app, we collect the following categories of information:
| Category | Data Items | Purpose & Handling |
|---|---|---|
| Account Information | Email address, display name, language preferences. | To create your account, sync your routines, and authenticate logins. |
| Quiz & Health Insights | Focus areas (e.g. jawline, forehead, cheeks), posture goals, routine answers. | To tailor personalized daily face yoga routines suitable for your needs. |
| Camera & Photo Data | Selfies or facial photos captured strictly with your explicit in-app camera permission. | Used solely for your personal visual progress journal and skin comparison. Only you can view them; photos are stored in private cloud storage and are never shared or used for AI model training. |
| Usage & Practice Data | Exercises completed, streak counts, session duration, user feedback. | To keep track of your active streak and enhance exercise recommendations. |
| Device & Diagnostics | Device model, Android OS version, app version, crash logs (Sentry/Firebase). | To debug crashes, ensure app stability, and optimize performance across devices. |
| Payment Information | Order ID, transaction ID, plan purchased, timestamp. | Processed by PCI-DSS compliant payment gateways (Razorpay / Google Play). We do not store card or UPI credentials. |
3. How We Use Your Data (Purposes)
- Personalized Programs: Tailoring exercise sequences to your selected facial focus areas.
- Progress Tracking: Recording completed exercises, active streaks, and personal milestones.
- App Performance & Stability: Identifying bugs and crashes to ensure smooth performance on Android devices.
- Customer Support & Communications: Sending transactional emails, account recovery links, and responding to support queries.
- Compliance & Fraud Prevention: Complying with Indian financial and taxation laws and protecting against unauthorized access.
4. Lawful Basis for Processing (DPDP §4 & §7)
We process your data strictly under the lawful grounds recognized by the DPDP Act 2023:
- Consent: Provided explicitly by you during sign-up, quiz submission, camera permission grants, or notification opt-ins.
- Legitimate Uses: Fulfilling purchases, account security, anti-abuse measures, and statutory tax reporting.
5. Data Sharing & Third-Party Processors
We never sell, rent, or trade your personal information. We share data only with trusted infrastructure processors bound by strict confidentiality and data protection agreements:
- Google Cloud Platform & Firebase: Secure cloud hosting, database, authentication, and file storage (located in the
asia-south1Mumbai region). - Razorpay / Google Play Billing: Secure, encrypted payment processing and subscription management.
- Sentry: Real-time application crash reporting and diagnostics (no facial images or personal media are shared).
- SendGrid: Transactional authentication messages and receipt delivery.
6. Data Storage & Security
Your primary account data and media reside in secure Google Cloud data centers located in Mumbai, India (asia-south1).
- All network transmissions are encrypted using modern TLS 1.3 / HTTPS protocols.
- All persistent data at rest is encrypted using industry-standard AES-256.
- Access to production databases is restricted to authorized personnel with multi-factor authentication (MFA) and audited access logs.
7. Data Retention & Deletion
We retain your personal data only as long as your account remains active or as required by applicable laws:
- Active Accounts: Data is retained to provide uninterrupted routine and streak tracking.
- Upon Deletion Request: Your personal account profile, quiz data, and uploaded photos are permanently purged from active systems within 30 days.
- Statutory Tax Records: Invoice records are retained for the statutory period mandated under the Indian Income Tax Act (8 years).
8. Your Rights & How to Delete Your Account (Google Play Compliance)
Under sections 11–14 of the DPDP Act 2023 and Google Play User Data policies, you hold full control over your personal information:
How to Delete Your Account and Data:
- In-App: Navigate to
Account → Delete Account. Confirming the prompt permanently deletes your profile, workout logs, and private photos. - By Email Request: If you no longer have access to the app, email support@glowyug.com with the subject “Account Deletion Request” from your registered email address. We will verify and process the deletion within 30 days.
9. Children’s Privacy
The Glowyug application is intended for individuals aged 18 and older. We do not knowingly collect personal data from minors. If you believe a minor has registered without parental consent, please contact us immediately for prompt data removal.
10. Grievance Officer & Redressal Mechanism
In accordance with the DPDP Act, 2023 and Information Technology Rules, our Grievance Officer details are published below:
11. Changes to This Privacy Policy
We may update this policy periodically to reflect evolving features or legal standards. When material changes occur, we will notify you through an in-app notice or email at least 14 days before changes take effect.