Last updated: 25 June 2026
Glowcast ("Glowcast", "the app", "we", "us" or "our") is operated by PocketCraft OÜ, a company registered in Estonia, European Union. This Privacy Policy explains what the Glowcast app collects, why, how we protect it, and the choices and rights you have.
By using Glowcast you agree to the practices described below. If you do not agree, please stop using the app.
Glowcast is a personal tanning and skin-care assistant. It helps you tan more safely by analysing a photo of your skin, taking local UV and weather conditions into account, and building a personalised tanning plan with reminders.
Data controller: PocketCraft OÜ, Estonia (EU).
Contact: support@pocketcraft.site
No account needed. You can use Glowcast without registering, signing in, or giving us your email, phone number, or real name.
We collect only what the app needs to function. It comes from three places: what you give us, what is gathered automatically, and a dedicated section for the skin-photo feature.
Your tanning profile — answers you enter during onboarding and while creating a plan, such as skin type or sensitivity and your tanning goals.
Photos for skin analysis — an image you capture with the camera or choose from your photo library, used only to analyse your skin (see Section 2.4).
Any feedback or messages you choose to send us.
Device & technical data: device model, operating-system version, app version, language and time zone.
An anonymous identifier: a randomly generated ID that keeps your analytics and subscription consistent. It is not tied to your real-world identity.
Location, only with your permission: used to fetch the local UV index and weather so the app can suggest safe tanning times (see Section 4).
Usage data: screens viewed, features used, and session activity, used to understand and improve the app.
Crash & diagnostic data: if the app crashes, technical details about the event and device state.
A push-notification token: used to send you tanning reminders and plan updates, if you allow notifications.
We do not collect your email address, phone number, contacts, or real name (unless you choose to enter a name). We do not access Apple Health / HealthKit data, and we never receive or store your payment-card details — all purchases are processed by Apple.
When you use the skin-scan feature you provide a photo of your skin. We use it only to estimate tanning-relevant characteristics (such as skin tone) and to generate your guidance — never to identify you.
Your photo is sent over an encrypted (HTTPS/TLS) connection to OpenAI, which processes it solely to extract these skin characteristics and return them to the app. The photo is processed only for the moment needed to produce a result; we do not store it on any server, and under OpenAI's API data-usage policy it is not used to train OpenAI's models. Only the resulting analysis (text) is saved locally on your device.
We do not create or store facial-recognition templates, face geometry, or any biometric identifier.
We use the information above to:
provide the core features — skin analysis, your personalised tanning plan, UV/weather guidance, and reminders;
keep the app reliable and improve it (usage analytics and crash diagnostics);
manage your subscription and validate purchases;
respond to your support requests;
comply with our legal obligations.
Legal bases (GDPR / UK GDPR). We rely on: performance of our service (to give you the features you ask for); your consent (for camera, photo-library, location and notification access, which you can withdraw at any time in iOS Settings); and our legitimate interests in keeping the app secure and improving it.
Glowcast uses a small number of trusted providers. We share only what each needs, and we do not sell your data.
OpenAI — receives the skin photo solely to return the analysis, as described in Section 2.4.
Apple (App Store / StoreKit & WeatherKit) — processes all purchases (we never see your card details), and Apple WeatherKit receives your location coordinates to return the UV index and weather. Apple states it does not associate WeatherKit location data with your identity.
Firebase Analytics (Google) — anonymous usage and event data, to understand how the app is used.
Firebase Crashlytics (Google) — crash logs and device state, to diagnose and fix bugs.
Amplitude (incl. Session Replay) — usage events and in-app screen interactions; session recordings have sensitive inputs masked. Used for product analytics.
Apphud — manages subscriptions; receives an anonymous identifier and your purchase/subscription status.
Advertising & tracking. Glowcast shows no ads. We do not use your data for third-party advertising and do not track you across other companies' apps or websites.
On your device: your tanning profile, scan results and history are stored locally on your device.
With our providers: analytics, crash, subscription and skin-analysis data are handled by the services listed in Section 4.
Retention: on-device data remains until you delete it or uninstall the app. Analytics data is retained in aggregated form for up to 24 months. Skin photos are not stored persistently (see Section 2.4).
Security: all network transmission is encrypted with HTTPS/TLS, we follow a data-minimisation principle, and access to any stored data is restricted.
You have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority (in Estonia, the Data Protection Inspectorate / Andmekaitse Inspektsioon).
You have the right to know what personal information is collected, to request its deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information. We will not discriminate against you for exercising your rights.
Delete the app to remove all data stored on your device. For anything held by our providers, email support@pocketcraft.site and we will respond within 30 days. We may ask for your app's anonymous identifier to locate the relevant data.
Glowcast is not intended for children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
Some of our providers — including OpenAI, Google (Firebase), Amplitude and Apphud — process data outside Estonia, including in the United States. Where data leaves the EEA/UK, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
We may update this Privacy Policy from time to time. We will post the revised version with a new "Last updated" date and, for significant changes, notify you in the app. Continued use after an update means you accept the revised policy.
Questions about this policy or your data? Contact:
PocketCraft OÜ — Estonia, EU Email: support@pocketcraft.site