Effective Date: 6 August 2026
Welcome to MacGlow ("MacGlow", "we", "our", or "us").
MacGlow is a mobile application designed to help you understand how the food you eat affects the way you look and feel — your skin, energy, sleep, digestion, hair and nails. MacGlow is a wellness companion. It is not a calorie counter, a diet app, or a medical device.
This Privacy Policy explains how we collect, use, store and protect your information when you use the MacGlow application.
MacGlow is operated by Luke Gallagher, an individual based in the United Kingdom, acting as the data controller for the purposes of UK GDPR and the Data Protection Act 2018.
Contact: cpressure93@gmail.com
Most of what MacGlow knows about you never leaves your phone.
Your meals, wellness scores, health details, cycle information and personal preferences are stored locally on your device. We do not upload them, we cannot see them, and they are not held on any server we control.
The exceptions are set out in full below: your account credentials, your subscription record, and photographs you choose to take of food or ingredient labels.
The following is stored locally on your device and is not transmitted to us or to anyone else:
Profile details — your name, date of birth, profile photograph, and your notification and reminder preferences
Food log — every meal you record, along with the wellness scores calculated for it
Glow Score — your overall score and its history
Wellness trackers — water intake, sleep hours, sleep alarm settings, cached daily step count, and activity streaks
Cycle tracking — whether the feature is enabled, your cycle length, and your last recorded period start date
Food sensitivities — any sensitivities or intolerances you record
Onboarding answers — your skin concerns, dietary description, lifestyle and energy answers, and your goals
Saved meals and serving sizes — custom meals you create and portion sizes you have used before
If you delete the MacGlow app from your device, this information is deleted with it. We hold no copy and cannot recover it for you.
If you use the backup feature, MacGlow creates a file that you choose where to send using your device's standard share options. That file goes wherever you send it. We do not receive it.
When you create an account, we use Supabase to manage authentication. The following is stored on Supabase's servers:
Your email address
Your password, stored in an encrypted, irreversible form that we cannot read
If you sign in with Apple, the identity token Apple provides, which may include your name and email address (or Apple's private relay address, if you chose to hide your email)
This is used solely to let you sign in and to keep you signed in across sessions. It is not used for marketing, and it is not shared or sold.
Supabase Inc. acts as a data processor on our behalf. Your authentication data is stored in Supabase's London (eu-west-2) region.
MacGlow uses RevenueCat to manage subscriptions. When you subscribe, restore a purchase, or when your subscription renews, RevenueCat receives:
Your purchase receipt from Apple
An anonymous identifier generated by RevenueCat
Basic device and operating system information
We do not send RevenueCat your name, your email address, or any of your wellness or health data.
Your actual payment is handled entirely by Apple. We never see, receive or store your payment card details.
Food and ingredient label photographs do leave your device.
When you photograph a meal or an ingredient label, the image is sent to our processing service (a Cloudflare Worker operated by us) and forwarded to Google's Gemini API, which identifies the food or reads the label. The result is returned to your device.
These images are sent for the sole purpose of analysing that photograph. They are not linked to your account, your name or your email address — no identifying information is attached to the request. Our own processing service does not store or log the images: each one is passed to Google and discarded.
Google may retain these images. We use Google's Gemini API on its standard tier, under which Google may retain submitted content and use it to develop and improve its own products and services, in accordance with Google's terms and privacy policy. We have no control over that retention and cannot delete images once they have been submitted to Google.
If you would prefer not to send photographs at all, you can log food by searching for it by name or by scanning a barcode instead. Both of those work without sending any image.
Your profile photograph is different. It is stored only as a file on your device and is never uploaded anywhere.
With your permission, MacGlow reads your daily step count from Apple Health.
This is the only data type we read
We never write any data back to Apple Health
Your step count is cached on your device to display in the app and is never transmitted anywhere
You can grant or withdraw this permission at any time in the Health app under Sharing, or in your device Settings under Privacy & Security.
MacGlow does not use Apple Health data for advertising, and does not share it with any third party.
Open Food Facts — when you scan a barcode or search for a food by name, the barcode or your search text is sent to Open Food Facts, an open food database, to retrieve product information. No identifying information about you is sent.
Our food scoring service — when you log a food by name, the name of the food is sent to our Cloudflare Worker to calculate its wellness scores, and to retrieve a representative image. No identifying information about you is sent.
Image sources — MacGlow may load food images from public image hosts such as Wikimedia. This involves a standard image request and no personal data.
MacGlow contains no analytics software, no crash reporting software, and no advertising software.
We do not track you across other apps or websites. We do not use advertising identifiers. We do not build a profile of you. We do not sell your data, and we never will.
Apple provides us with anonymous, aggregated App Store statistics — such as how many people downloaded the app — which we cannot connect to any individual. RevenueCat provides us with aggregated subscription figures on the same basis.
MacGlow does not currently send push notifications. The notification preference in your profile stores a setting on your device only, and no device token is collected or transmitted.
If we introduce push notifications in a future version, we will update this policy before doing so.
Under UK GDPR, we process your information on the following bases:
Contract — processing your account details and subscription so we can provide the service you have signed up for
Consent — reading your step count from Apple Health, and processing photographs you choose to take. You may withdraw either at any time.
Legitimate interests — keeping the app secure and functioning correctly
Where you have provided health information (such as cycle tracking, food sensitivities or skin concerns), this is special category data. It is stored solely on your own device, and we neither receive nor process it.
On your device — for as long as you keep the app installed. Deleting the app deletes it.
Your account — for as long as your account exists. Delete your account and it is removed from Supabase.
Subscription records — retained by RevenueCat and Apple in line with their own policies and applicable financial record-keeping requirements.
Photographs — not retained by us. Images sent to Google for analysis may be retained by Google under its own terms, as described above.
You can delete your account at any time from within the MacGlow app, in your Profile settings. Deleting your account removes your authentication record from Supabase.
To remove the information held on your device, delete the app from your iPhone.
Please note that deleting your account does not cancel your subscription. Subscriptions are managed by Apple and must be cancelled in your App Store account settings.
If you would prefer, you can email us at cpressure93@gmail.com and we will delete your account for you.
Under UK GDPR you have the right to:
Access the personal data we hold about you
Have inaccurate data corrected
Have your data erased
Restrict or object to processing
Receive your data in a portable format
Withdraw consent at any time
Because almost all of your MacGlow information is held on your own device rather than by us, in most cases you already have direct access to it and can export or delete it yourself. For anything held on our behalf, email cpressure93@gmail.com and we will respond within one month.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
MacGlow is not intended for children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Your account password is stored in an encrypted, irreversible form by Supabase and cannot be read by us. Connections between the app and every service described in this policy are encrypted in transit.
Information stored on your device is protected by your device's own security — your passcode, Face ID or Touch ID. We would encourage you to keep these enabled.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your authentication data is stored in the United Kingdom. Some of the services we use — including Google, Apple, RevenueCat and Cloudflare — may process data outside the UK. Where that happens, those transfers are covered by appropriate safeguards, such as standard contractual clauses or adequacy decisions.
MacGlow provides general wellness information only. It is not medical advice, it does not diagnose or treat any condition, and it should not replace guidance from a qualified healthcare professional. If you have concerns about your health, please speak to your doctor.
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Where changes are significant, we will make that clear within the app.
If you have any questions about this Privacy Policy or how your information is handled:
Email: cpressure93@gmail.com
We aim to respond within 48 hours.