GlowDesk Privacy Policy
Effective Date: July 1, 2026
Last Updated: July 26, 2026
1. Introduction
GlowDesk is owned and operated by Abdullah Qayyum, based in Lahore, Pakistan. GlowDesk is a two-sided health and beauty clinic platform connecting consumers with clinics across Pakistan. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the GlowDesk mobile application.
By using GlowDesk, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
For Consumers:
- Full name and email address (provided via Google Sign-In)
- Profile photo (imported from your Google account)
- Health information you voluntarily provide, including skin type, allergies, medical notes, date of birth, and gender
- Appointment history and booking records
- Reviews, comments, and posts you interact with
- Device push notification token for sending appointment reminders and updates
For Clinic Staff (Owners, Managers, Staff):
- Full name and username
- Clinic and branch assignment
- Appointment scheduling and client management activity
- Commission and billing records
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the GlowDesk platform
- Connect consumers with health and beauty clinics and facilitate appointment bookings
- Send appointment confirmations, reminders, and real-time notifications
- Maintain accurate billing, invoice, and commission records
- Improve our services, features, and user experience
- Ensure platform safety, prevent fraud, and enforce our Terms of Service
- Respond to your support requests and inquiries
4. Information Sharing
We do not sell, rent, or trade your personal information to any third parties.
We share your information only in the following circumstances:
- With the clinic you book an appointment with — including your name and any health information you have provided — so they can deliver their services
- With trusted third-party service providers who help us operate our platform, including Supabase (data storage and authentication), Expo (push notification delivery), and Sentry (error monitoring and crash reporting). These providers are contractually obligated to protect your data and may not use it for their own purposes.
- When required to comply with applicable Pakistani law, a court order, or a lawful government request
5. Health and Medical Information
Any health information you provide — such as skin type, allergies, medical notes, and before/after treatment photos — is treated with the highest level of care.
- Health information is shared only with clinic staff directly involved in your treatment
- Clinic staff members cannot view your phone number or WhatsApp number under any circumstances — this restriction is enforced at the database level
- Before/after treatment photos are accessible only to you, your treating staff member, the branch manager, and the clinic owner. No other party can access these photos.
6. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including:
- Row-level database security ensuring each user can only access data they are authorized to view
- Encrypted authentication tokens stored securely on your device
- Secure HTTPS connections for all data transmission
- Immutable audit trails for financial records (invoices and commission logs cannot be altered or deleted)
- Regular security reviews and automated monitoring
7. Data Retention
- Your account and associated data are retained for as long as your account remains active
- Appointment records, invoices, and medical notes are retained for a minimum of 5 years in accordance with Pakistani healthcare record-keeping practices
- If you request deletion of your account, we will remove your personal profile and contact information. Anonymized records required for legal or financial compliance may be retained as required by law.
8. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of any inaccurate or incomplete information
- Request deletion of your account and associated personal data
- Withdraw consent for non-essential communications, including marketing notifications
- Opt out of push notifications at any time through your device settings
To exercise any of these rights, please contact us at devlook4uuu@gmail.com.
9. Push Notifications
GlowDesk sends push notifications for appointment confirmations, status updates, reminders, and clinic activity. You can disable push notifications at any time through your device's notification settings. Disabling notifications will not affect your ability to use the app.
10. Cookies and Analytics
GlowDesk does not use cookies. We use Sentry solely for the purpose of detecting and fixing technical errors and crashes within the application. No behavioral tracking or advertising analytics are used.
11. Children's Privacy
GlowDesk is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we become aware that a minor has provided us with personal information, we will take steps to delete such information promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify you through the app or via email. The "Last Updated" date at the top of this policy will always reflect the most recent revision.
Your continued use of GlowDesk after any changes constitutes your acceptance of the updated policy.
13. How to delete your account:
To request account deletion, email us at: devlook4uuu@gmail.com
We will delete your account and all associated data within 30 days.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Name: Abdullah Qayyum
Email: devlook4uuu@gmail.com
Location: Lahore, Pakistan