Glow Up Diary (the "App") is developed and published by Abdul Ahad, operating as Undercover Mysteries ("we," "us," or "our"), based in Pakistan. This policy explains what information the App collects, how it is used, who it is shared with, and the choices you have. By using the App, you agree to the practices described here.
To use the App, you create an account using either an email address and password, or Google Sign-In. Depending on the method you choose, we collect:
Account authentication is handled by Firebase Authentication, a Google service. We do not see or store your password directly — Firebase manages this on our behalf.
Your selfie photos are uploaded to Cloudinary, a third-party cloud media storage service, so that they are accessible across all your devices. Photos are stored in a private folder tied to your account identifier and are not publicly accessible. Cloudinary's privacy practices are described at cloudinary.com/privacy.
In addition to the photo files themselves, the following information about each selfie is stored in our cloud database (Cloud Firestore, a Google service), tied to your account:
If you purchase a Pro subscription, the transaction itself is processed entirely by Apple's App Store or Google Play — we never see or store your payment card details. To manage entitlements, we use RevenueCat, a third-party subscription management service, which receives your app-assigned user ID and your purchase/subscription history. RevenueCat's own privacy practices are described at revenuecat.com/privacy.
Free-tier use of the App includes ads served by Google AdMob. When an ad is shown, Google's AdMob SDK may collect your device's advertising identifier and ad interaction data, in accordance with Google's own privacy policy. You can read Google's practices at policies.google.com/privacy.
Your light/dark theme preference and your daily reminder time and on/off setting are stored locally on your device only. Daily reminders are scheduled and delivered entirely on-device — no notification content is ever sent through a remote server.
We do not sell your personal information, and we do not use your photos or selfie metadata for advertising targeting.
The App relies on the following third-party services, each of which processes a defined slice of your data under their own privacy practices:
| Service | Purpose | Data involved |
|---|---|---|
| Firebase Authentication (Google) | Account sign-in | Email, password (handled by Firebase) |
| Cloud Firestore (Google) | App data storage | Profile info, selfie metadata, reference URLs |
| Google Sign-In | Optional sign-in method | Name, email, profile photo URL |
| Cloudinary | Photo storage and delivery | Selfie photo files |
| Google AdMob | Advertising (free tier) | Advertising ID, ad interaction data |
| RevenueCat | Subscription management | User ID, purchase/subscription history |
We retain your account and app data for as long as your account exists. When you delete your account from within the App:
Depending on where you live, you may have rights including the ability to access, correct, export, or delete your personal information. You can exercise most of these directly in the App, or by contacting us using the details below.
If you are in the European Economic Area or UK, you have rights under the GDPR. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what is collected and to request deletion. We do not sell personal information as defined under CCPA.
Our infrastructure providers (Google/Firebase and Cloudinary) may process and store data on servers located outside your home country. By using the App, you understand your information may be transferred to and processed in countries with different data protection laws than your own.
The App is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
We rely on Firebase's and Cloudinary's built-in security infrastructure to protect your data. Photos are stored in private, access-controlled folders on Cloudinary. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
For any questions about this Privacy Policy, your data, or to request deletion of your Cloudinary photo files, contact:
Abdul Ahad (Undercover Mysteries)
Email: undercovermysteries0@gmail.com