01Who we are
GlowHub is a beauty and wellness community app published by Techforge Developer Limited, a company registered in Nigeria. In this policy, "GlowHub", "we" and "us" mean Techforge Developer Limited. "You" means anyone who uses the GlowHub app or website.
We are the data controller for the personal data described here. This policy applies to the GlowHub mobile apps for Android and iOS, the GlowHub web app, and this website.
02What we collect
We collect only what the app needs to work. There is no hidden collection and we do not buy data about you from anyone else.
| Category | What it includes | Why |
|---|---|---|
| Account details | Email address, password (stored only as an encrypted hash, never in readable form), username, sign-up date | To create your account, sign you in, and let you reset your password |
| Profile information | Display name, profile photo if you upload one, bio, and any beauty profile details you choose to add such as skin type, hair type or concerns | To personalise your feed and help other members give you relevant answers. All of this is optional. |
| Content you create | Questions, answers, comments, reactions, bookmarks, challenge check-ins, and any images you attach | To run the community. Public posts are visible to other members. |
| GlowPoints activity | Points earned and spent, tier level, streaks, challenge participation | To operate the rewards system and prevent point farming |
| Device and technical data | Device type, operating system version, app version, IP address, crash reports, and a push notification token if you enable notifications | To deliver notifications, keep the app stable, and detect abuse |
| Usage data | Screens opened, features used, session length, in aggregated form | To understand which parts of GlowHub are useful and which are not |
| Payment records | Subscription status, amount, date, and a transaction reference for GlowHub Premium | To give you access to what you paid for and to keep accurate records |
We never see your card details. Payments are handled entirely by our payment processor. Your card number, CVV and PIN are entered on their secure page and are never transmitted to or stored by GlowHub.
What we do not collect
- Your precise location. GlowHub does not request or use GPS.
- Your contacts, calendar, call logs or SMS messages.
- Health records, or any special category data beyond the beauty preferences you voluntarily enter.
- Data from advertising trackers. GlowHub does not run third-party ad networks and does not track you across other apps or websites.
03How we use your data
- To create and secure your account, and to verify your email address
- To publish the questions, answers and reactions you post
- To show you a feed that reflects the categories and concerns you care about
- To send notifications you have opted into, such as replies to your question or a challenge check-in reminder
- To operate GlowPoints, tiers and challenges fairly, including detecting artificial point farming
- To moderate content, investigate reports, and enforce our community guidelines
- To fix bugs, measure performance, and improve features
- To provide customer support when you contact us
- To meet legal obligations and respond to lawful requests from authorities
We do not sell your personal data, and we never have. We do not share it with advertisers or data brokers.
04Anonymous posts, and what that means
GlowHub lets you post questions and answers anonymously. This is one of the reasons the community works, so we want to be precise about it.
What anonymity means: your username, profile photo and profile details are hidden from other members on that post. Nobody browsing GlowHub can tell it was you.
What anonymity does not mean: the post is still linked to your account in our database. We need this to award GlowPoints, to let you edit or delete your own post, and to act on reports of abuse. A very small number of authorised staff can access this link, and only for moderation, safety, legal or technical reasons.
If you need to raise something where even that link is a concern, contact us at support@glowhub.ng and we will discuss options with you.
06Our legal basis for processing
Under the Nigeria Data Protection Act 2023 and the NDPR, and under the UK and EU GDPR where those apply to you, we rely on:
- Contract — to provide the service you signed up for, including your account, your posts and your subscription
- Consent — for optional things like push notifications, your profile photo, and the beauty details you choose to share. You can withdraw consent at any time in Settings.
- Legitimate interests — to keep the community safe, prevent fraud and abuse, and improve the product, balanced against your rights
- Legal obligation — to keep financial records and respond to lawful requests
07How long we keep your data
| Data | Kept for |
|---|---|
| Account and profile | As long as your account is open |
| Everything, after you delete your account | Removed within 30 days, apart from the exceptions below |
| Payment and transaction records | Up to 6 years, as required by Nigerian tax and accounting law |
| Moderation records for serious violations | Up to 2 years, so that banned users cannot immediately return |
| Crash logs and aggregated usage statistics | Up to 12 months, and no longer linked to you |
See Delete your account for exactly how deletion works and what happens to your posts.
08Your rights
You have the right to:
- Access a copy of the personal data we hold about you
- Correct anything inaccurate — most of this you can do yourself in Settings
- Delete your account and your data
- Object to or restrict certain processing
- Port your data, receiving it in a machine-readable format
- Withdraw consent at any time, without affecting anything done before you withdrew it
- Complain to the Nigeria Data Protection Commission, or to your local supervisory authority if you are outside Nigeria
To exercise any of these, email support@glowhub.ng. We respond within 30 days and we do not charge for it. We may ask you to confirm your identity first, so that nobody else can request your data.
09How we protect your data
- All traffic between the app and our servers is encrypted with TLS
- Data is encrypted at rest by our database provider
- Passwords are stored only as salted hashes and cannot be read by anyone, including us
- Database access is restricted by row-level security rules, so one member's account cannot read another's private data
- Staff access is limited to those who need it, and is logged
No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the Nigeria Data Protection Commission within 72 hours of becoming aware of it, as the law requires.
10Age requirement: 18+
GlowHub is an 18+ platform. It is not intended for anyone under 18, and we do not knowingly collect data from minors. Because members can post anonymously, we do not permit under-18 accounts under any circumstances, including with parental consent.
If you believe someone under 18 has created an account, email support@glowhub.ng and we will close the account and delete its data promptly.
11Where your data is stored
GlowHub is built and run from Nigeria, but our infrastructure providers operate data centres outside the country, including in the European Union and the United States. This means your data may be transferred and stored abroad.
When that happens, we rely on providers who offer appropriate safeguards, including standard contractual clauses and recognised security certifications, so that your data receives a comparable level of protection wherever it sits.
12Changes to this policy
We will update this page when our practices change. The effective date at the top always tells you which version you are reading. If a change materially affects your rights, we will notify you in the app or by email before it takes effect, and where the law requires it we will ask for your consent again.
13Contact us
Data protection enquiries
Techforge Developer Limited
Lagos, Nigeria
Email: support@glowhub.ng
We answer privacy requests within 30 days. If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission at ndpc.gov.ng.