Privacy Policy

Glowa AI ("Glowa," "we," "us") provides an AI-powered skin intelligence and patient communication platform used by licensed medical spa practices ("practices"). This policy describes how we collect, use, and protect information through the Glowa platform, including the online intake/consultation forms hosted at intake.glowaai.com and the practice dashboard at portal.glowaai.com.

If you are a patient or lead of a specific practice, that practice is responsible for its own use of your information and its relationship with you. Glowa acts as the technology platform the practice uses to collect, store, and communicate with you on the practice's behalf.

Through the intake form and dashboard, we may collect:

• Contact information — name, phone number, email address
• Health and treatment information you provide — medical history, allergies, medications, skin concerns and goals
• Photographs submitted for AI skin analysis and treatment planning
• Consent and signature records from the intake form
• Messages exchanged with a practice via SMS or email through the platform
• Basic technical information (such as IP address) used for security and fraud prevention

Information collected through the platform is used to:

• Provide AI-generated skin analysis and treatment planning support to the practice you're engaging with
• Let practice staff communicate with you — appointment reminders, follow-ups, and replies to your inquiries — where you've consented to SMS and/or email communication
• Operate, secure, and improve the Glowa platform
• Comply with legal obligations

Communication consent is collected separately from other intake consents and is optional — it does not affect your ability to complete an intake or receive care. You may opt out of SMS at any time by replying STOP, or of email by using the unsubscribe link in any message. See our SMS & Email Communication Terms for the specific opt-in language used in the intake flow.

No mobile phone number or opt-in data collected for SMS messaging purposes is shared or sold to any third party for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We do not sell your information. We share it only as needed to provide the service:

• With the specific practice you are a patient or lead of
• With service providers who help us operate the platform — including cloud hosting and database storage, SMS delivery (Twilio), email delivery (SendGrid/Twilio), and AI model providers used to generate skin analysis and messaging assistance — under obligations to protect it, and never for their own marketing purposes
• If required by law, or to protect the rights, safety, or property of Glowa, a practice, or others

Identifying and health-related fields are encrypted at rest. Access to patient and lead data is scoped to the practice you engage with. No method of transmission or storage is completely secure, but we work to protect information using industry-standard practices appropriate to health-related data.

We retain information for as long as needed to provide the service to the relevant practice and to meet legal, recordkeeping, or safety obligations. You may request deletion or a copy of your information by contacting us below; requests may be directed to the relevant practice where required by applicable recordkeeping obligations.

You can ask to access, correct, or delete the information a practice holds about you, or withdraw SMS/email consent at any time, by contacting the practice directly or by emailing us at the address below.

Glowa's platform is intended for use by adults seeking aesthetic treatments and is not directed at children under 18.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Questions about this policy or your information can be sent to sonat@glowaai.com.