Gloune
Privacy Policy
Version v1-2026-08 · Last updated 26 August 2026
Who we are
Gloune ("we") is a personal appearance-simulation app. Contact: hello@gloune.com.
What we collect
- Account data: your email address, an optional first name, and your sign-in method.
- Photos of your face that you choose to take or upload, and the AI-generated stage images derived from them.
- Habit records: which levers you tick, per day.
- Consent records: versioned records of your age confirmation and consents (see below).
- Age confirmation: we store the fact that you confirmed being 18 or older — not your date of birth.
- Waitlist email (website only): if you join the waitlist we store your email solely to send one launch announcement and, optionally, a beta invitation. You can request removal any time at hello@gloune.com.
Biometric data
Your face photos are biometric data. We process them for exactly one purpose: generating your private appearance simulation and your month-over-month comparison. We ask for your explicit consent before your first photo, and record that consent with its document version. We do not use facial data for identification, advertising, profiling, or any other purpose.
What we never do
- We never use your photos or generated images to train any AI model, and we contractually require the same of our processing providers.
- We never sell or share your personal data with third parties for their own purposes.
- We never show your data to other users. Gloune has no social features.
How processing works
Photos are stored encrypted in a private bucket on Supabase (hosted in the EU, Frankfurt). To generate your stages, your photo is transmitted over an expiring, signed link to our image-generation processor (fal.ai) and processed transiently. Generated images are stored back into your private storage. All access to images is through short-lived signed URLs tied to your account.
AI transparency
Every generated image is labelled on screen as a simulation and carries machine-readable AI provenance marking embedded in the file (including IPTC "trained algorithmic media" metadata and the generator's watermark), in line with EU AI Act Article 50.
Deletion & your rights
"Delete everything" in the app removes your photos, generated images, records and account immediately and completely — there is no soft delete or retention window on our side. You may also request access, correction, or export of your data at hello@gloune.com. If you are in the EU/EEA or UK, these rights are backed by the GDPR; depending on your US state, similar rights may apply.
Age
Gloune is for adults (18+). Accounts declared under 18 are blocked from using the app.
Processors we use
- Supabase — authentication, database and encrypted storage (EU region).
- fal.ai — transient AI image generation.
- RevenueCat / Apple / Google — subscription billing. We never see your payment details.
Changes
We will post any changes here with a new version identifier, and material changes will be flagged in the app.