Privacy Policy

This Privacy Policy applies when you use MaxGlow through our iOS app, website, and related services. It covers personal information we collect directly from you, from your device, and from service providers that help us operate MaxGlow.

If you download the app, authenticate through Apple or Google, or subscribe through Apple, those companies may also process information under their own terms and privacy notices.

The information we collect depends on how you use MaxGlow, but it generally falls into the following categories:

• Account and identity information, such as your email address, authentication provider details, display name, and account settings.
• Profile and wellness information you choose to provide, such as onboarding responses, goals, posts, notes, feedback, avatar images, meal photos, lab files, medical records, and Apple Health export files.
• Generated service data, such as coach replies, summaries, bios, snapshots, insights, weekly reviews, analysis results, and internal delivery status needed to provide the product.
• Subscription and transaction metadata, such as trial status, entitlement state, product identifiers, renewal status, and provider customer identifiers from Apple and RevenueCat. We do not receive your full payment card number.
• Device and delivery information, such as push notification tokens, platform, app environment, notification preferences, and basic technical signals used to secure and operate the service.

Because MaxGlow is built around health and self-tracking workflows, some information you provide may be sensitive. Please only upload content you are comfortable sharing for processing by MaxGlow and its service providers.

We use personal information to operate, maintain, and improve MaxGlow, including to:

• Create and manage your account and authenticate sign-in.
• Store your uploads and deliver posts, coach conversations, insights, and weekly reviews.
• Analyze the information you provide so MaxGlow can generate personalized coaching, summaries, and structured memory.
• Sync subscription status and determine which product features should be available.
• Send product, service, push, and account-related messages.
• Protect the service, enforce rate limits, investigate abuse, and troubleshoot incidents.
• Meet legal obligations and respond to lawful requests.

MaxGlow uses automated systems and third-party AI models to process the information you submit. The following categories of personal data may be sent to third-party AI services for processing:

• Post text, display text, and associated context such as detected emotion, intent, and tags.
• Uploaded images, PDFs, CSVs, Apple Health export files, medical records, and lab files, which may be transformed into derived summaries, structured signals, and report content.
• Onboarding responses, profile information, and bio content, which may be summarized to create context used across the service.
• Prior posts, coach conversation history, and activity data, which may be analyzed over time to generate personalized insights, snapshots, and weekly review experiences.

This data is sent to the third-party AI providers identified in Section 5 below, which currently include OpenAI, Google, and Anthropic but may change as we adopt new or different models. MaxGlow requests your consent before sharing personal data with these AI services. You can withdraw consent at any time by contacting privacy@maxglow.ai.

AI-generated content can be inaccurate, incomplete, or inappropriate, and should not be treated as medical advice or relied on as the sole basis for important decisions.

MaxGlow is a consumer wellness product, not a medical provider. Unless we expressly agree otherwise in writing, MaxGlow is not offered as a HIPAA business associate service for healthcare providers or clinical use cases.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

We may share information with trusted processors and other parties when needed to run MaxGlow, including:

• Supabase for authentication, database infrastructure, and file storage.
• Third-party AI model providers (which currently include OpenAI, Google, and Anthropic, and may change over time) for post analysis, context extraction, image description, coaching replies, content generation, and insight selection. Data sent may include post text, uploaded files, image content, conversation history, profile context, and prior activity. We may route requests through API intermediaries such as OpenRouter, which process data in transit but do not use it for their own model training.
• Modal for background job execution and scheduled processing tasks.
• RevenueCat and Apple for subscription administration and entitlement syncing.
• Professional advisers, hosting providers, support tools, and similar vendors that help us run the business.
• Regulators, law enforcement, courts, or other third parties when required by law or necessary to protect rights, safety, and security.
• A buyer, investor, or successor in connection with a merger, acquisition, financing, or sale of assets.

We require that third-party processors who receive personal data provide protections for that data that are consistent with this Privacy Policy. Our agreements with these providers include obligations regarding the use, security, and confidentiality of personal data.

We keep personal information for as long as needed to provide the service, maintain legitimate business records, resolve disputes, enforce agreements, and comply with law.

• Account data is generally retained while your account is active and for a reasonable period afterward for security, support, billing, and legal purposes.
• If you request account deletion, we currently queue the account for permanent deletion after a 30-day grace period reflected in the in-app flow.
• Backups, logs, and records required for fraud prevention, legal compliance, or dispute resolution may remain longer where permitted or required.

We use reasonable technical and organizational safeguards to protect personal information, but no system can be guaranteed completely secure.

Our providers may process information in countries other than where you live. When required, we use appropriate safeguards for cross-border transfers.

Depending on your location, you may have legal rights over your personal information. MaxGlow also offers practical controls inside the product.

• You can update your display name and certain account preferences inside the app.
• You can turn push notifications and email notifications on or off from your account settings.
• You control which files, posts, and health exports you choose to upload, and you can manage device permissions through iOS settings.
• You can request access, correction, or deletion by contacting privacy@maxglow.ai.
• If applicable law gives you additional rights, including portability or objection rights, we will honor them where required.

MaxGlow is intended for adults and is not directed to children under 18. If we learn that we collected personal information from a child without proper authorization, we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time to reflect product, legal, or operational changes. If we make material changes, we may notify you through the app, by email, or by updating the effective date above.

Questions or privacy requests can be sent to privacy@maxglow.ai.