GlowAI Privacy Policy

1. Introduction

Welcome to GlowAI ("GlowAI," "we," "our," or "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the GlowAI mobile application and related services. We comply with applicable data protection laws, including the GDPR, CCPA/CPRA and COPPA.

This is version 3 of this policy, dated October 23, 2026, and updated on October 27, 2026 to describe the safety check for Explore profile photos, and on November 3, 2026 to describe invite codes, effort boards, plan emails and purchase source. It adds Explore, the GlowAI community where people share guides, questions and discussions. If you do not use Explore, the parts about Explore do not apply to you.

By using GlowAI, you acknowledge that you have read and understood this Privacy Policy.

2. Who is responsible for your data

The data controller is Moon Labs LLC, a company registered in Armenia. You can reach us at munetic.studiogmail.com.

3. Information we collect

Personal information

Your email address and display name; account credentials (hashed passwords for email sign-in, or identifiers from Sign in with Apple or Google); and your preferences and settings. Legal basis: contract performance (GDPR Art. 6(1)(b)).

Profile and health-related data

Age, gender, height and weight; skin type and any allergies you enter; and the goals and answers you give the AI Coach (skincare, hair, grooming, fitness, nutrition, sleep). We ask your age to enforce our 13+ minimum and to tailor analysis. Some of this is health-related; we use it only to personalize your results and coaching, never for advertising. Legal basis: your consent (GDPR Art. 6(1)(a)); for health-related data, Art. 9(2)(a).

Facial image data (sensitive)

Photos you upload or capture in-app; facial landmarks and geometric measurements derived from your photos; analysis results computed from those geometric measurements, including harmony and attractiveness-style scores and tier and archetype labels; and AI-generated skin feature observations with personalized recommendations. Legal basis: your explicit consent (GDPR Art. 6(1)(a)).

What actually happens to a photo: we process facial photos only to measure facial geometry, observe skin features, compute your scores from those measurements, generate your recommendations, and store your scans in your account history so you can view them and use the results in the Coach. GlowAI performs no facial recognition, and neither your photos nor your measurements are used to identify you. Images travel over encrypted channels, are processed transiently by our AI provider, and are stored only in your own account history.

We send face images only to Google Gemini AI for analysis. Google processes them as our data processor under its Data Processing Addendum and does not use them to train or improve its products. Under the Gemini API terms, Google keeps request logs for a limited time, only to detect abuse and to meet legal requirements. We store your face images and analysis results in your account until you delete the scan or your account, so you can view your history and use results in the Coach.

TrueDepth camera and face tracking (iPhone with Face ID)

On iPhones with Face ID, the scan camera uses Apple's ARKit face tracking with the TrueDepth camera. While the camera is open, the app reads your head angles, where your face is in the frame and how wide it looks, how far your face is from the camera, the distance between your eyes, and whether your eyes are open and whether you are smiling. GlowAI does not read depth maps, and it does not save or upload the 3D face mesh.

Most of these readings stay on your iPhone. They guide you to a good photo and take the photo automatically when you are in position, then they are discarded. Two readings are sent to our server with your photos, over an encrypted connection: your distance from the camera (in metres) and the distance between your eyes (in millimetres). We use them only to correct lens distortion in that scan's measurements, because a photo taken close to the camera makes the nose look larger and the sides of the face look narrower. The camera distance is saved as one number in that scan's record in Google Firebase Firestore, inside your account, and is deleted when you delete the scan or your account. The eye distance is used during the analysis and is not saved. On your iPhone, the two numbers from your latest capture stay in the app until your next scan or until you sign out.

TrueDepth readings are never sent to any AI provider, analytics tool or other third party. We never use them for advertising, marketing, sign-in or authentication, to identify you, or to build a profile of you. The photo the camera takes is an ordinary colour photo with no depth data, and it is handled as described above.

Usage and technical data

App activity and interaction patterns, error logs and crash reports, device type, operating system and identifiers, and your device timezone (not GPS location).

Analytics and diagnostics: we use Mixpanel to understand which features are used, and Firebase Crashlytics to find and fix crashes. Mixpanel receives only bucketed, non-identifying usage events tied to a one-way salted hash, never your email or account ID. Crashlytics receives crash reports (device model, OS and app version, and where the app crashed); the salted hash is added to a crash report only if you have opted in to analytics. We never send your face images, facial measurements, analysis scores, or age to any analytics tool. Usage analytics is collected only after you opt in, and only if you are 13 or older, or 16 or older when your device is set to a European time zone or we cannot tell your region. Crash reporting is on by default once we know you are 13 or older, to keep the app stable; you can turn it off any time in Settings → Privacy. None of this is collected from users under 13. Legal basis: legitimate interests (GDPR Art. 6(1)(f)); for analytics, your consent (Art. 6(1)(a)).

Anonymous service counts: our own servers also count key moments, such as a scan started, finished or failed, a sign-up, a Coach message or a routine built, to check that the service works. These counts carry no account ID, no analytics identifier and no personal details, only rough groups, such as under or over 18, or a score range. They stay in our own Google Cloud logs and are never sent to Mixpanel or any other company. Legal basis: legitimate interests (GDPR Art. 6(1)(f)).

AI Coach, routines and products

Your AI Coach chat messages and any images you attach; routines you build and your device timezone (to schedule reminders); and products you save, including any product photos you add. Legal basis: contract performance and your consent (GDPR Art. 6(1)(b), 6(1)(a)).

Device, notifications and identifiers

Your push notification token, device name and model, OS and app version (for reminders and updates); a salted-hash analytics identifier (never your email or account ID); and your notification preferences, which you can change anytime in Settings. Legal basis: legitimate interests and your consent (GDPR Art. 6(1)(f), 6(1)(a)).

Explore, the GlowAI community

If you join Explore, we also keep: your handle, display name, bio and avatar; the posts, comments, polls, collections and routines you share, with their edit history; your votes, poll answers, saves, follows, blocks and mutes; the notifications you get; the reports you send and the notices, strikes and appeals about your account; the result of the safety check on each thing you post; and the date you agreed to the Explore terms, the community rules and this policy. To apply the age rules we read the age you gave us and, where your phone offers one, the age range from Apple's Declared Age Range or Google Play's Age Signals. These store signals can only lower the age we use, never raise it.

Legal basis: contract performance for running the community you joined (GDPR Art. 6(1)(b)); our legitimate interest in keeping Explore safe, which covers the safety checks, spam limits and keeping reports (Art. 6(1)(f)); legal obligations for notices, legal holds, reports to authorities and answers to lawful orders (Art. 6(1)(c)). For users under 18 we never rely on their consent or agreement as the legal basis; we use only the bases above.

Health topics. Posts can be about health, like skin, diet or medicine. That is sensitive data. When you join Explore we ask for your explicit consent to use the health topics you post about to show and check your posts (GDPR Art. 9(2)(a)). You can withdraw it at any time by deleting those posts or your account, or by emailing munetic.studiogmail.com. Posts about procedures, medicine or doses are shown to adults only.

If you report content without an account

When you use our web report form, we collect your name, your email, where the content is and your description of the problem, the statements you confirm and the signature you type. If you send a copyright notice or counter-notice, we also collect your postal address and phone number and a description of your work. We also keep a one-way code made from your IP address, which changes every day, to stop abuse of the form. We never store your IP address itself. You may send a child safety report without your name or email. We use your email to send you a reference number and our decision. Legal basis: our legal duties to handle notices about illegal content and copyright (GDPR Art. 6(1)(c)) and our legitimate interest in keeping Explore safe (Art. 6(1)(f)). If you send a copyright counter-notice, US law requires us to send a copy of it, including your name, address and phone number, to the person who sent the original notice. The data retention section says how long we keep your report.

4. How we use your information

Core services: facial geometry measurement, skin analysis and skincare recommendations; account authentication and management; and your analysis history and progress tracking. Service operation: performance monitoring and debugging, security and fraud prevention, and customer support.

We do not use your data for advertising, cross-app ad tracking, selling, or automated decisions with legal effects. We do use privacy-preserving usage analytics (bucketed and non-identifying) solely to improve GlowAI, as described in section 3.

In Explore we also use your data to show your posts to other people, to build your feeds and notifications, to check every post for safety before anyone else sees it, to handle reports and appeals, and to meet our legal duties. Explore feeds, ranking and notifications never use your scans, your face data or your archetype.

5. Data sharing and disclosure

Google Firebase (Google LLC, USA)

Purpose: authentication, database, cloud storage, and, via Firebase Crashlytics, crash reporting. Crash data shared: crash reports with device model, OS and app version, plus the one-way salted hash only if you opted in to analytics; no face images, measurements, scores, age or email. Crash reporting is on by default once we know you are 13 or older, with an opt-out in Settings, and it is never collected from users under 13. Face data handling: your facial images and scan results are stored in Firebase Cloud Storage and Firestore for the duration of your account; Firebase hosts them on our behalf and uses them for nothing else. Data is encrypted in transit and at rest. Safeguards: Data Processing Addendum, and the EU-US Data Privacy Framework or Standard Contractual Clauses for international transfers.

Google Gemini AI (Google LLC)

What we share: face images for facial and skin analysis and for generating recommendations, and Coach chats that include an attached image, for generating responses. Data processing: Google processes your face images as our data processor under its Data Processing Addendum and does not use them to train or improve its products. Under the Gemini API terms, Google keeps request logs for a limited time, only to detect abuse and to meet legal requirements. Safeguards: secured API channels and encryption in transit. We do not share your face photos with any other third party. The written parts of your results and your routines are produced from text about your scan, and Coach chats without a photo are answered, by Tokedy, with OpenRouter as the backup, both described next.

Tokedy, Inc. (USA), with the DeepSeek language model

What we share: text only, never your photos and never TrueDepth readings. To write your scan results and progress insights: your overall and per-area scores, your tier and archetype labels, plain-language descriptions of the facial features and skin concerns our analysis found in your photos, your score history, your age and gender, and the products you own. To build routines: your answers to the routine questions, the profile details you gave us (age, gender, height, weight, skin type, allergies and goals), and your saved products. In the Coach, for chats without a photo: your messages, the recent conversation, and the profile details, scan results, routines and saved products the Coach uses to answer you. Purpose: to write the text parts of your results, progress insights and routines, and the Coach's replies, with the DeepSeek language model. Tokedy runs this model on Amazon Web Services in the United States and in a partner data center in Armenia. Tokedy has zero data retention: it processes each request in memory, does not store your data and does not use it for training. If Tokedy is unavailable, the same request goes to OpenRouter, described next. Safeguards: encryption in transit, and a Data Processing Addendum with Standard Contractual Clauses for international transfers.

OpenRouter, Inc. (USA), with the DeepSeek language model

What we share: text only, never your photos and never TrueDepth readings. To write your scan results and progress insights: your overall and per-area scores, your tier and archetype labels, plain-language descriptions of the facial features and skin concerns our analysis found in your photos, your score history, your age and gender, and the products you own. To build routines: your answers to the routine questions, the profile details you gave us (age, gender, height, weight, skin type, allergies and goals), and your saved products. In the Coach: your messages and the recent conversation, so we can understand what you are asking, title the chat and keep a short summary of it. For your results, progress insights, routines and the Coach's replies, OpenRouter is the backup used only when Tokedy is unavailable, and then gets the same request Tokedy would have received. A Coach chat with a photo is answered by Google Gemini AI. Purpose: to write the text parts of your results, routines and Coach experience with the DeepSeek language model. OpenRouter passes each request to one of the companies that host this model for us: currently Wafer, Together AI and CoreWeave. These companies are based in the United States and may process data there or in other countries. We only allow hosts with zero data retention, which means they do not store your data or use it for training, and OpenRouter does not use it to train models. Safeguards: encryption in transit, and a contract with OpenRouter.

Mixpanel, Inc. (USA)

What we share: bucketed, non-identifying product-usage events (for example "scan completed" or a screen view) tied to a one-way salted hash; no face images, measurements, scores, age, name or email. Purpose: product analytics, to understand feature usage. Collected only with your consent, never from users under 13, and never from users under 16 when the device is set to a European time zone or the region is unknown. The data is stored in Mixpanel's EU data center, and Mixpanel does not store your IP address. Safeguards: Data Processing Addendum, and the EU-US Data Privacy Framework or Standard Contractual Clauses for international transfers.

RevenueCat, Inc. (USA)

What we share: your GlowAI account ID, and the purchase and subscription records that Apple or Google send for your in-app purchases (product, price, dates and status), your age group, and for members 18 or older where you found the app (see Invites, effort boards, emails and purchase source below). No face images, scan results, name or email. Purpose: to check which purchases and subscriptions you own, so your Premium features and credits work on your account, and to show the right plans. Legal basis: contract performance (GDPR Art. 6(1)(b)). Safeguards: Data Processing Addendum, and the EU-US Data Privacy Framework or Standard Contractual Clauses for international transfers.

Resend, Inc. (USA)

What we share: your email address and the content of account emails we send you, such as email verification and password reset links, and the plan emails described below. Purpose: to deliver these emails. Legal basis: contract performance (GDPR Art. 6(1)(b)) for account and billing emails, and your consent (Art. 6(1)(a)) for tips by email. Safeguards: Data Processing Addendum, and the EU-US Data Privacy Framework or Standard Contractual Clauses for international transfers.

Invites, effort boards, emails and purchase source

Invite codes. If you share your invite code, we store your code, which friends used it, and a one-way scrambled key made from the phone's app id, kept for up to 365 days, so one phone cannot claim the same reward twice. We never store the phone id itself.

Effort boards. Boards are off until you turn them on. They show your handle and only how many plan tasks you checked, your streak days and your routine days. They never use your photos or scores. Members under 18 are never on regional boards.

Emails. If you are 18 or older and turn on tips by email, we send a few emails about your plan through Resend, our email provider. Every email has a one-click unsubscribe. A reminder that a free trial is about to end is a billing notice and goes to every member with a verified email, unless they turn billing emails off.

Purchase source. To show the right plans, we send your age group (under 18, 18 or older, or unknown) to RevenueCat, our payment provider. For members 18 or older we also send where you found the app: your answer in sign-up and, on iPhone, Apple's AdServices token (for example, an Apple search ad). We never send your age group or source to advertisers. Legal basis: our legitimate interest in offering the right plans and knowing which channels work (GDPR Art. 6(1)(f)).

Deleting your account deletes all of the above.

OpenRouter, Inc. (USA), for Explore

What we share: the text you post or import in Explore (posts, titles, comments, poll options, collection titles and descriptions, text inside files you attach, your handle, display name and bio). We do not send your email address, your face scans or your scores, and the only photo we send is a profile photo you choose in Explore (see below). Purpose: an open-weight AI model checks the text against the community rules before anyone else can see it. The same kind of model also writes a summary of a post or its comments, or a translation, when a reader asks for one, turns a post into a routine or a schedule when you ask, and splits a document you import into posts. OpenRouter sends each request only to hosts we have checked: currently Wafer, Together AI and CoreWeave. Every request asks for zero data retention and no data collection, so the hosts do not store the text or train on it. If the safety check is not available, your post waits and is not shown; it is never published without a check. Explore never sends your text to Google. Safeguards: encryption in transit, and a contract with OpenRouter.

Profile photos. If you choose a photo as your Explore profile photo, we first make a small copy of it without its location or other hidden data, and an open-weight AI model that can read images checks that copy for nudity, sexual content, violence, self-harm, hate symbols and drugs. OpenRouter sends it only to image hosts we have checked (currently DeepInfra, CoreWeave, Together AI and Wafer), with zero data retention and no training, and never to Google. The model does not identify you and does not measure or score your face. Nobody else sees the photo until it passes. If the check is not available or is unsure, the photo waits for a person on our team. If it is refused, your profile keeps its letter avatar. You can remove the photo at any time by picking a letter avatar. Legal basis: our contract with you, because you asked for the photo to be shown, and our legitimate interest in keeping Explore safe (GDPR Art. 6(1)(b) and (f)).

OpenAI, L.L.C. (USA), for photo post checks (not on yet)

Photo posts in Explore are turned off. When we turn them on, a photo an adult posts will first be compared with lists of known abuse images, and then checked for safety by OpenAI's moderation model. Photos from users under 18 are never sent to OpenAI. We will turn this on only after we have a data processing agreement with OpenAI in place, and the app will tell you before you post a photo.

Child protection bodies, police and courts

If we find child sexual abuse material, we report it to the National Center for Missing & Exploited Children (NCMEC) in the United States, as US law requires (18 U.S.C. 2258A). NCMEC may pass the report to the police in the country concerned. If something shows a threat to someone's life or safety, we tell the police of the country concerned, or Europol if we do not know the country (DSA Art. 18). We also answer valid orders from courts and authorities. We share only what the report or the order needs.

International transfers

Our analytics, AI, purchase and email processors (Google, Mixpanel, Tokedy, OpenRouter, RevenueCat and Resend, and OpenAI once photo checks turn on) are based in the United States. Explore posts are stored on servers in the United States. Tokedy may process data in the United States or Armenia, and the model hosts listed under OpenRouter may process data in the United States or other countries. These transfers are protected by the EU-US Data Privacy Framework and/or Standard Contractual Clauses, together with the safeguards above. We require every service that receives your data from GlowAI to protect it at least as well as this policy does.

Outbound links

When someone posts an amazon.com link in Explore, we add GlowAI's Amazon Associates tag to it, so we may earn a commission if you buy through it. The link carries no information about you. Other links have no affiliate code. A product suggestion may offer a plain web search for the product name; tapping it opens a third-party site in your browser with its own privacy practices, which we do not control. We do not send your scan, your profile or any identifier with that search.

GlowAI does not sell your personal information, and does not share it for cross-context behavioral advertising, for monetary or other valuable consideration.

6. Explore: what other people can see

Other Explore users can see your handle, display name, bio and avatar, the posts, comments, polls, collections and routines you publish, and counts such as votes and how many people started a routine. Your routine streaks show on your profile only if you turn on Show milestones. You choose in Explore settings whether people can find you in search and who can reply to you. Nothing you post is visible to anyone else until it passes the safety check. Your scans and scores are never public, unless you choose to add a scan card to a post yourself, and posts with a face photo or a scan number never get votes or rankings.

Users from 13 to 17 use Explore like adults. In the UK, and in Vermont from January 1, 2027, their profiles start private by default, as section 14 explains.

7. Explore: safety checks, automated decisions and human review

Every post, comment, edit and profile field is checked before anyone else can see it, by an AI language model and by lists of words and phrases that break the rules. The check can have three results. It can let the post go live. It can show it to adults only and send it to a person for review. It can hold it so nobody sees it while a person reviews it. If the check fails or takes too long, the post stays hidden and waits for another check or for a person. The most serious cases, such as anything that may harm a child, a threat of violence, terrorism or a risk of self-harm, go at once to the person on our safety team who handles them.

Automated tools can only hold a post, limit who sees it, or limit a feature for a short time. They never give a strike, suspend or ban an account. Only a person on our team makes those decisions. While a person reviews a report, we may hide the content for a while: at once for the most serious reports, and when several different accounts that are at least 7 days old report the same thing. Hiding it is not a decision and does not add a strike. Each time we act on your content or account, you get a notice that says what we did, which rule it was about, whether an automated tool found or decided it, and how you can appeal. You can ask a person to review any decision by appealing in the app. The terms of use explain strikes and appeals.

8. Explore: anonymous posts

Anonymous posts are turned off for now. When they are on, other users see "Anonymous" instead of your name. The link between you and the post is kept in a separate, locked store. You can see your own anonymous posts. Inside Moon Labs, only our admin or our safety handler can open the link, and only with a written reason that is recorded. Our systems also use it, without showing it to anyone, to send moderation notices and strikes to the real author, to apply an under-13 account lock, to include your anonymous posts in your own data export, to delete them when you delete your account, and to answer a legal request or keep a legal hold. Your anonymous posts are deleted when you delete your account, unless a legal hold applies or an urgent safety report about them is still open. Once that report is decided, they are deleted.

9. Legal holds

Sometimes the law requires us to keep content after it is removed or after an account is deleted, for example when we report child sexual abuse material to NCMEC or when an authority orders us to keep evidence. In those cases we keep a copy under a legal hold. A hold for an NCMEC report lasts one year, as US law requires, and cannot be ended early. Other holds last until the order or the case ends. Held content is not visible to users in the app. Only the person on our safety team who handles these cases can open the saved copies, and every opening is recorded. The held item itself stays in place and is hidden from users; staff can see it only when they review it, and the most serious items are limited to our safety handler. Account deletion does not remove content under a legal hold.

10. Your privacy rights

Wherever you live, you can access your data, correct inaccuracies, delete your data, take a copy of it with you, and withdraw consent. In the EU and UK, you can also restrict or object to processing and lodge a complaint with your supervisory authority. In California, you additionally have the right to know the categories of data we hold, to opt out of sale or sharing (we do neither), and to be free from retaliation for exercising any of these rights.

11. How to exercise your rights

Delete your account: in the app, open Profile, then Privacy & Security, then Delete Account. Deletion is immediate on confirmation: all personal data, facial images and analysis results are permanently erased, and the action cannot be undone. A few Explore records are kept for a limited time, as the data retention section explains. The step-by-step detail lives on the account deletion page.

Export your data: in the app, open Profile, then Privacy & Security, then Export data, for a complete machine-readable (JSON) copy of your profile, scans, Coach chats, routines and saved products.

Delete a single scan: open History, select the scan, and choose Delete.

Explore: you can delete any post or comment you made, and download a copy of your Explore data, including your anonymous posts, from the app. To challenge a moderation decision, appeal it from the notice in the app.

Everything else (access, correction, portability questions): email munetic.studiogmail.com from your registered address. Replies usually come within 48 hours, and formal data-rights requests are completed within 30 days as the GDPR provides. We may need to verify your identity first.

12. Data security

Data is protected with HTTPS encryption in transit, AES-256 encryption at rest, strict access controls with multi-factor authentication, and regular security review of the systems that store it.

13. Data retention

Account data is retained for the lifetime of your account. Scan history, including facial images, is kept until you delete the individual scan or the account, so your history and Coach stay useful. Coach chat history is kept until the account is deleted. Aggregated usage analytics and diagnostics, which cannot identify you, are kept for up to 14 months and then aggregated further or deleted. The scrambled phone key from an invite is deleted after 365 days.

When you delete your account, deletion is immediate: your personal data, facial images and analysis results are permanently erased on confirmation, you lose access at once, and the action cannot be undone. If you leave a guest account that has an active subscription, we keep only a minimal purchase record, with no photos or scan data, so the purchase can move to your other account. It is deleted when the subscription ends.

Explore. Your profile, posts, comments, polls, collections, votes, follows, saves and drafts are kept until you delete them or your account, and are then deleted. Edit history is deleted with the post or comment. If a comment of yours has replies, we remove its text and your name and leave a "deleted" placeholder so the thread still makes sense. Some records are kept longer:

• Your handle stays reserved for 90 days after you delete your account, so nobody else can take it right away. When you change your handle, the old one is held for 30 days.
• While your account exists, we keep the reports you sent, and the moderation decisions, review records and appeals about your account, for as long as the account exists.
• After you delete your account, we remove your account ID from the reports you sent. Each of them is then deleted 365 days after we decided on it. An open report is kept until it is decided.
• After you delete your account, your account ID in moderation decisions, review records and appeals about your account is replaced with a scrambled code, and these records are deleted 365 days later. Reports other people sent about your content are kept with your account ID replaced by the same scrambled code. They follow the same rules as the reports that person sent: kept while their account exists, and deleted 365 days after the decision once it does not.
• Notices and strikes are deleted with your account. A strike counts against you for 180 days.
• Documents you send to prove your age, or your credentials when you apply for an expert badge, are deleted 30 days after the decision.
• Safety-check results that are not linked to your account are kept for 30 days so we do not check the same text twice.
• If you report through the web form, we keep your report with the name, email, postal address, phone number and signature you gave us, and the daily code made from your IP address. We keep it while the report is open and for 365 days after the decision. The counter that limits how many reports one network can send is deleted after 2 days.
• Content under a legal hold is kept as described in the legal holds section. If an urgent safety report about a post or comment of yours is still open when you delete your account, we keep that content hidden until the report is decided, and then delete it.

14. Children's privacy

You must be at least 13 years old to use GlowAI. GlowAI is not directed to children under 13. During sign-up we ask for the user's age and block accounts under 13, and we do not knowingly collect personal information, or any behavioral analytics, from anyone under 13. If we become aware that we have collected personal information from a child under 13, we will delete it promptly. If we learn that a user is under 13, that account is locked and cannot be unlocked by changing the age. Parents or guardians can contact us at munetic.studiogmail.com.

Explore and users under 18. If we do not know your age, we hide adult content from you. Users from 13 to 17 use Explore like adults: they can post, comment, vote, follow, mention people, share links and make a profile. For them, adult content (posts about procedures, medicine or doses) is filtered out on every surface, and they cannot post photos or files. They can use a profile photo, which passes the same check as everyone's before anyone sees it. Where a law asks for more, we follow it. In California they do not get a personalized For You feed. In the UK their For You feed stays off until they turn it on, and by default their name, bio and pinned post show only to their followers, adults cannot find them in search or follow them first, and only people they follow can reply to them; they can change these settings. From January 1, 2027 in Vermont and January 25, 2027 in New York, users under 18 get no personalized For You feed and no Explore notifications between midnight and 6 AM; in Vermont their notifications also start off, the UK defaults above apply, and an adult they do not follow cannot reply to or vote on their posts. In Mississippi, Tennessee and Texas, Explore is read-only for everyone for now, and in Ohio and Australia it is read-only for users under 16, because of those places' laws on minors' social media accounts: you can read guides and discussions, but you cannot post, comment or make a profile. If you are under 18 and we do not know your country, or you are in the US and we do not know your state, Explore is read-only for you until you tell us where you live. In the UK, or when we do not know your country, you can see content marked for adults only when your app store also confirms you are an adult.

15. Governing law and jurisdiction

This Privacy Policy is governed by the laws of Armenia, without regard to conflict-of-law principles. All disputes arising from or relating to this Policy shall be resolved exclusively in the competent courts of Armenia.

This does not take away any right you have under the law of the country where you live, including the right to complain to your data protection authority.

16. Contact

Email munetic.studiogmail.com. Every message is read by the founder, and replies usually come within 48 hours. The same address is our contact for data protection questions, for authorities and for general questions about Explore. Please do not send reports about child safety, intimate images or self-harm to this address. Report them in the app or through the reporting page, so that only the person on our safety team who handles them opens them. The child safety page explains how we handle child safety reports.