Last updated: 2026, September 12
This Privacy Policy applies to all mobile applications (collectively referred to as "Applications" or "Apps" and individually as "Application") and related services provided by Glowiszyn UG (haftungsbeschränkt).
This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use our Services and tells You about Your privacy rights and how the law protects You. By downloading, installing, or using any of our Applications, You agree to the collection and use of information in accordance with this Privacy Policy.
This is an "umbrella" Privacy Policy that governs all mobile applications, games, websites, and related services that are published now or at any time in the future by Glowiszyn UG (haftungsbeschränkt), regardless of the platform on which they are distributed (including, without limitation, the Apple App Store and the Google Play Store). Every application released by Us is automatically covered by this Privacy Policy unless that particular application provides its own separate privacy policy that expressly supersedes this one.
Any specific applications named in this document (for example, FaceWAT) are listed only as illustrative examples. The fact that an application is not named in this document does not exclude it from the scope of this Privacy Policy.
Different applications collect different data. This Privacy Policy describes the full range of data that Our applications may collect. It does not mean that every application collects every category of data described here. The data actually processed depends on the features of each individual application:
The specific data practices of each individual application are disclosed in that application's store listing — for example, the App Privacy details on the Apple App Store and the Data safety section on Google Play. Where those app-specific disclosures differ from this general Policy, the app-specific disclosures describe what that particular application actually does.
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Usage Data is collected automatically when using the Service. This allows us to ensure the technical functionality of our Apps.
This data may include information such as:
Depending on the specific functionality of the Application You are using, We may request access to or collect certain information from Your Device to provide features (e.g., photo editing, location tagging, audio processing). This includes, but is not limited to:
We use this information to provide features of Our Service, to improve and customize Our Service. The information may be processed on Your device or uploaded to the Company's servers and/or a Service Provider's server (e.g., for cloud processing or backup).
The Company may use Personal Data for the following broad purposes:
We may share Your personal information in the following situations:
Our Applications are often provided as "Freemium" services supported by advertising. We work with third-party service providers to display ads and analyze user behavior. These third parties may access your data (such as Advertising ID and IP address).
Key partners we work with include, but are not limited to:
We advise You to review the Privacy Policies of these third-party services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
If you order a physical print (poster, canvas or acrylic glass) of your artwork through the "PopArt Studio" app, we additionally process the following data solely to fulfil that order, on the legal basis of contract performance (Art. 6(1)(b) GDPR) and our legal retention obligations (Art. 6(1)(c) GDPR):
For this purpose your data is shared with the following processors/recipients:
The image editing itself happens locally on your device; the image is only transmitted when you actively place a print order. The uploaded image is automatically deleted from our server after the order is processed, and at the latest after 72 hours. Order and invoice data are retained for the statutory retention periods (generally 6–10 years).
The application Live Deficit can, at Your explicit request, read active energy burned (calories) from the health platform on Your device — Health Connect on Android and Apple HealthKit ("Apple Health") on iOS. This is used solely to import Your active energy into the app's daily calorie-deficit calculation, so that You do not have to enter workouts manually.
Because health and fitness data is a special category of personal data, We process it only on the basis of Your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), which You give by connecting Health in the app and which You may withdraw at any time with effect for the future. Live Deficit's use of Health Connect data adheres to the Google Play Health Connect permissions policy, including the requirements that Health Connect data is not used for advertising and is not shared.
The application Flea Market Finder shows flea markets and similar events nearby. It needs no user account and contains no advertising and no analytics or tracking SDK.
On our websites and in our Applications we offer the option to subscribe to a free email newsletter informing You about news, new features and the release of the products You subscribed to, as well as occasional updates about our other apps and offerings. You can unsubscribe at any time. The newsletter is operated by Us on our own system at newsletter.glowiszyn.com, running on the same server in Germany as our other services. No external email service provider is involved and Your data is not shared with any third party.
Sign-up uses the double opt-in procedure: after submitting the form You receive an email asking You to confirm by clicking a confirmation link. You are only added to the list after that confirmation, so nobody can subscribe someone else's address. If You do not confirm within 30 days, We delete Your data completely and without further notice; the confirmation link itself expires after seven days.
As proof of consent We record the time of sign-up and of confirmation, the IP address used, Your browser identification (user agent), the page You signed up on, and the exact wording and version of the consent text. Later changes to Your preferences and Your unsubscription are recorded as well.
Only Your email address is required. In addition We store the language of the emails (German or English), derived from the page You sign up on, and the service through which You signed up. You can change the language at any time yourself (see below).
We send the newsletter solely on the basis of Your consent pursuant to Art. 6(1)(a) and Art. 7 GDPR in conjunction with Sec. 7(2) No. 2 of the German Act Against Unfair Competition (UWG). We do not rely on the existing-customer exemption under Sec. 7(3) UWG. Recording the sign-up procedure is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in being able to prove the consent required by law.
Our newsletters contain no tracking pixels ("web beacons"), no open tracking and no redirected counting links. We therefore do not learn whether or when You opened an email, nor which links You clicked. No analysis of Your reading behaviour and no profiling takes place.
At the end of every email, next to the unsubscribe link, You find a personal link where You can change the language of the emails or unsubscribe, without registering. You can exercise Your right of access to all data stored about Your address including the consent record (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and Your other rights at any time by sending an informal email to hello@glowiszyn.com. We handle Your request without undue delay and within one month at the latest.
You can stop receiving emails and thereby withdraw Your consent with effect for the future at any time – via the unsubscribe link in every email, via the unsubscribe function of Your email client (We support the "List-Unsubscribe" standard including one-click unsubscribe per RFC 8058), or informally by email to hello@glowiszyn.com. The lawfulness of processing carried out before the withdrawal remains unaffected.
We store Your data for as long as Your subscription lasts. After You unsubscribe, the subscription data is deleted automatically after two years at the latest. Proof of Your consent is kept for up to three years after the end of the subscription in order to defend against potential claims (Art. 6(1)(f) GDPR); processing of that data is limited to this purpose. To make sure an unsubscribed address is never contacted again by mistake, We additionally keep a non-reversible checksum (HMAC hash) of the address on a suppression list; the address itself cannot be reconstructed from it. You can trigger immediate and complete erasure yourself at any time (see above) or request it informally from Us.
To prevent automated sign-ups and the subscription of addresses belonging to other people, the form uses a field invisible to You (a "honeypot"), a minimum dwell time, and a limit on attempts per IP address and per email address. No cookies are set and no external services are involved.
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of Our Service.
You can request deletion of your data by contacting us or, where applicable, using the delete function within the App.
If You are located in the European Economic Area (EEA), You have certain data protection rights. Glowiszyn UG aims to take reasonable steps to allow You to correct, amend, delete, or limit the use of Your Personal Data.
Where the GDPR applies, We process Your Personal Data on the following legal bases:
You have the right to:
Without prejudice to any other remedy, You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of Your habitual residence, place of work, or place of the alleged infringement. The authority competent for Us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
https://www.ldi.nrw.de
Our Services are not addressed to anyone under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personally identifiable information from anyone under these ages. If We become aware that We have collected Personal Data from a child without verification of parental consent, We take steps to remove that information from Our servers.
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy or our data practices, please contact us: