Skip to content

Privacy Policy

What Glamorph collects, why we use it, who receives it, and the choices available to you.

Last updated: September 27, 2026

This Privacy Policy explains how Glamorph ("we", "us", or "our") collects, uses, shares, and protects personal data when you use our mobile apps, web app, public booking pages, websites, and related services (collectively, the "Service"). Glamorph is based in Greece and processes personal data under the EU General Data Protection Regulation (GDPR) and other applicable data-protection laws.

Key Points

  • We collect and use data needed to provide, secure, support, and improve the Service
  • Your photos, documents, client records, and other content remain yours
  • We do not sell personal data or share it with advertisers
  • Beauty professionals and workspace owners control the client data they place in Glamorph. Glamorph processes that data to provide the Service
  • Account deletion starts a reversible 30-day grace period. Legal-retention duties and shared-workspace data can limit what is erased
  • Data is encrypted in transit, and access is restricted according to account and workspace permissions
  • Marketing-site analytics require consent. Mobile product analytics can be disabled in Settings

Information We Collect

Depending on the features you use, we collect the following categories of information:

  • Account and authentication data: name, email address, profile photo, account identifiers, login method, session and security records, workspace invitations, and membership role. When you use Apple or Google sign-in, we receive the profile data that provider makes available and never receive that provider's password. Where email sign-in is available, we store a protected password verifier, not your plain-text password.
  • Professional, onboarding, and support data: profession, business profile, experience level, stated goals or challenges, referral source, language, timezone, currency, feedback, cancellation reason or comment, and information you send to support.
  • Client, appointment, and service records: client names and contact details, preferences, allergies or sensitivities, formulas, notes, services, appointments, sessions, dates, and history. Some of this information may be sensitive. The professional or business using Glamorph is responsible for having a lawful basis, giving required notices, and respecting the rights of its clients.
  • Online-booking and communication data: customer contact details, selected service and professional, requested time, verification status, booking state, rescheduling or cancellation activity, reminder delivery, and calendar-export information.
  • Documents and media: consultation and consent forms, answers, signatures, finalized PDFs, photos, videos, albums, and shareable-gallery settings or access records.
  • Workspace, team, and calendar data: workspace profile, members, professional profiles, permissions, calendar visibility, working hours, time off, closures, breaks, and other scheduling records.
  • Financial and merchant-payment data: manual payment and expense records, amounts, methods, currency, tax or tip values where used, transaction and refund status, provider identifiers, merchant country, connected-account capabilities, terminal or location identifiers, and secure authorization credentials needed for an enabled provider. Payment credentials are handled by the payment provider. Glamorph does not receive or store full card numbers, CVCs, PINs, or customer bank-login credentials.
  • Subscription data: selected plan and calendar capacity, entitlement and trial status, billing period, storefront or web-billing channel, purchase and renewal status, and provider transaction identifiers. RevenueCat manages subscription entitlements across supported billing channels.
  • Device, technical, and analytics data: device and browser type, operating system, app version, IP address in security logs, push token, pseudonymous identifiers, feature interactions, page or screen context, errors, crashes, and performance data. We do not collect IDFA or GAID advertising identifiers.
  • Communication preferences: push, transactional-email, marketing-email, and analytics choices, together with the delivery status needed to honor them.

How We Use Your Information

We use information to:

  • Provide client records, sessions, calendars, online booking, documents, media, payments, expenses, and team workspaces
  • Authenticate users, enforce workspace roles and permissions, and protect accounts
  • Sync data between devices and support offline-first mobile work with cloud backup
  • Publish and operate booking pages and send verification, confirmation, reminder, rescheduling, and cancellation messages
  • Create, sign, finalize, store, and share documents or galleries at the professional's instruction
  • Manage free, trial, and paid access and verify App Store, Google Play, and web subscription status
  • Connect an eligible Stripe, SumUp, or Square account and initiate or reconcile supported payments, refunds, and provider status updates
  • Send service, security, billing, booking, and support communications, plus marketing messages only where permitted
  • Prevent fraud and abuse, investigate incidents, enforce our terms, and meet legal obligations
  • Measure reliability and product use, troubleshoot errors, and improve the Service within the analytics choices described below

Legal Basis for Processing (GDPR)

Depending on the context, we rely on:

  • Performance of a contract: to create and secure your account and provide the product features, synchronization, communications, storage, subscriptions, workspaces, and support you request.
  • Consent: for marketing emails, marketing-site analytics, optional profile or onboarding responses, and certain device permissions or communications where consent is required. You can withdraw consent at any time.
  • Legitimate interests: to secure and improve the Service, prevent fraud, diagnose failures, and understand pseudonymous product use, after balancing those interests against your rights.
  • Legal obligation: to keep or disclose records when tax, accounting, payment, regulatory, or other law requires it.
  • Professional and workspace client data: the professional or business normally determines why client and team data is used and acts as its controller. Glamorph processes that data on its instructions to provide the Service, except where we independently need to process limited data for security, billing, legal compliance, or our own service operations.

Service Providers and Payment Partners

We disclose only the data reasonably needed for the selected feature. These companies process data under their own terms or privacy notices and, where applicable, on our behalf:

  • Apple / Google authentication: verifies your identity and supplies the profile information you choose to share. We do not receive your Apple or Google password.
  • Apple App Store / Google Play: app distribution, purchases, refunds, and store-subscription management. Glamorph receives purchase receipts and entitlement status, not your complete store-payment credentials.
  • RevenueCat: subscription and entitlement management for supported app-store and web-billing channels. Receives a Glamorph user identifier and purchase, product, and entitlement data. Privacy Policy
  • Stripe: web-subscription billing and optional merchant onboarding and payment processing. Depending on the feature, Stripe may receive billing contact details, merchant verification data, customer payment credentials, transaction details, and fraud-prevention data. Privacy Policy
  • SumUp: optional connected-merchant, checkout, reader, and payment processing. Glamorph exchanges authorization, merchant, checkout, transaction, refund, and device-status data needed for the integration. Privacy Policy
  • Square: optional connected-merchant, terminal, checkout, and payment processing. Glamorph exchanges authorization, merchant, location, terminal, transaction, refund, and webhook data needed for the integration. Privacy Notice
  • Cloudflare (R2 and CDN): object storage, protected media delivery, network delivery, and security. Privacy Policy
  • Hetzner: EU application and database hosting. Privacy Policy
  • Expo: mobile push-notification delivery using device tokens and message content. Privacy Policy
  • Amazon Web Services SES: transactional and permitted marketing-email delivery using the recipient address and message content. Privacy Notice
  • PostHog: EU-hosted product analytics using a pseudonymous identifier and bounded usage events. Marketing-site collection requires consent. Mobile users can opt out in Settings. Privacy Policy
  • Sentry: EU-hosted error and crash reporting using error context, device metadata, and a pseudonymous user identifier rather than your name or email. Privacy Policy
  • Google Analytics: marketing-website traffic measurement only after cookie consent. Privacy Policy

We do not sell or rent personal data, and we do not share it for third-party advertising. A professional may intentionally share a gallery, document, booking page, or payment request with a client. That is a product action chosen by the professional, not a sale of data.

Optional Merchant Payment Providers

This section applies only when an eligible professional connects Stripe, SumUp, or Square and uses Glamorph to request, collect, or reconcile a customer payment. Merchant payments are optional and separate from Glamorph subscription billing.

Subscription billing and client-payment integrations serve different purposes. Subscription providers receive the information needed to process your Glamorph purchase and verify access. Connected payment providers receive the information needed for your transactions with clients, as described below. A provider may perform both roles, depending on the transaction.

  • Glamorph stores the connected provider, merchant and authorization identifiers, country and currency, capability or onboarding status, and relevant account, location, reader, or terminal state. Verification and bank details requested on a provider-hosted surface are submitted to that provider. Glamorph does not store full verification documents or bank-login credentials.
  • To initiate and reconcile a payment, deposit, balance, tip, refund, or dispute, we process amount, currency, status, timestamps, provider identifiers, applicable fees, webhook results, and the related Glamorph customer, appointment, session, or workspace reference. Contact details may be sent to the provider when needed for checkout, receipts, fraud prevention, or payment communications.
  • The connected provider, its financial partners, and payment networks process payment credentials. Glamorph may receive limited payment-method information such as brand and last four digits for records, receipts, support, and fraud prevention, but not the full card number, CVC, PIN, or customer bank-login credentials.
  • We use provider data only to operate the connection, show status, support payments and eligible refunds, reconcile Glamorph records, prevent abuse, and provide support. Disconnecting a provider stops future access through Glamorph but does not erase records that Glamorph or the provider must retain. Each provider independently processes and retains data under its own agreement and privacy notice.

Data Storage & Security

Our primary application and database servers are hosted by Hetzner in the European Union. Media is stored in Cloudflare R2 and is restricted by default. It is delivered through controlled URLs or through a shareable link or gallery that an authorized professional chooses to create. Data is encrypted in transit using TLS 1.2 or later. Mobile authentication tokens are kept in iOS Keychain or Android Keystore. We also use account, workspace-role, database, network, and administrative access controls. No system is completely secure, so we cannot guarantee absolute security.

On-Device and Browser Storage

The Glamorph mobile app stores a local SQLite copy of core work data for offline use, including client, session, calendar, media-reference, payment, and preference data. Authentication credentials use operating-system secure storage. Local data syncs with our servers when a connection is available and is normally removed from that device when the app is uninstalled. The web app and websites use essential browser storage for sessions, security, preferences, and consent. Product analytics use is described in Cookies & Tracking.

Data Retention and Account Deletion

We keep account and business data while the account is active and for the periods needed to provide the Service. A self-service account-deletion request suspends the account immediately and starts a 30-day grace period during which the user can reactivate it. After that period, Glamorph permanently deletes the login account and personal or orphaned-workspace data through its deletion process. Records belonging to a workspace with other members may remain with that workspace, and ownership may be transferred so the business can continue operating. Separately, when paid or trial access expires, business data may remain read-only for up to 90 days and may then be purged after warning notices. Free-plan inactivity follows the status shown in the product. Soft-deleted files, operational backups, logs, and queued cleanup copies can remain for a limited technical retention period, generally up to 30 days. We may retain limited subscription, payment, refund, dispute, tax, accounting, fraud, security, consent, or legal-claim records for longer when required or reasonably necessary. Payment and billing providers keep the data they control under their own policies.

International Data Transfers

Our primary application servers are in the European Union, and our configured PostHog and Sentry projects use EU hosting. Other providers—including Apple, Google, RevenueCat, Stripe, SumUp, Square, Cloudflare, Expo, Amazon Web Services, and their partners—may process data in other countries. Where applicable law requires a transfer mechanism, we rely on safeguards such as adequacy decisions, the European Commission's Standard Contractual Clauses, or another lawful mechanism used by the relevant provider.

Your Rights

Subject to applicable law and any valid exceptions, you may have the right to:

  • Access: ask for a copy of personal data we hold about you.
  • Rectification: correct inaccurate or incomplete personal data.
  • Erasure: request account or personal-data deletion, subject to shared-workspace, legal-retention, and other lawful exceptions.
  • Restriction: ask us to limit certain processing.
  • Portability: receive eligible data in a structured, commonly used, machine-readable format.
  • Object: object to processing based on legitimate interests or to direct marketing.
  • Withdraw consent: withdraw consent at any time without affecting processing that was lawful before withdrawal.

Contact privacy@glamorph.com to exercise a right concerning your Glamorph account. We normally respond within one month. For client data placed in Glamorph by a beauty professional or workspace, contact that business first because it normally controls the record. We will assist it as required. You may also complain to the Hellenic Data Protection Authority or your local supervisory authority.

Children's Privacy

Glamorph accounts are for beauty professionals and authorized team members aged 16 or older. We do not knowingly create accounts for children under 16. A professional may record information about a minor client only when legally permitted and after obtaining any required parent or guardian authorization. Contact privacy@glamorph.com if you believe an account was created by a child under 16.

Cookies & Tracking

Our marketing website uses essential storage and a consent banner. Google Analytics and marketing-site PostHog analytics load only after analytics consent, which can be changed through the consent controls. The web product uses essential session or security storage and sends bounded first-party service events to our API for product operation and analytics. The mobile app uses pseudonymous, EU-hosted PostHog product analytics under legitimate interest with an opt-out in Settings > Privacy, and Sentry for pseudonymous crash reporting. We do not use IDFA, GAID, or third-party advertising pixels.

Changes to This Policy

We may update this Policy when our Service, providers, or legal obligations change. We will post the revised version with a new effective date and give additional notice of material changes where appropriate. If a change requires consent, we will request it rather than treating continued use as consent.

Contact Us

For privacy questions, rights requests, or complaints, contact privacy@glamorph.com.