Privacy Policy
Here's what we hold, and why.
Last updated 14 October 2026.
Who's behind Glow
Glow is made by Wild Hearts Publishing Pty Ltd, ABN 34 695 911 025. When this policy says "we" or "us", that's who it means.
Any question about your data goes to info@wildheartspublishing.com.au. A person reads it, not a bot.
What we actually collect
Your account email and password, held by our authentication provider, Supabase. Your daily entries (mood, the Glow Move you did or didn't do, your evening sentences). Your wins. Your answers to the five starting questions and to each week's question. Your Glow Wheel scores. Your Sunday letters and the record of which chapter recaps you've opened. And, if you choose to add them, your private Glow Mirror photos.
We also count page views, using Vercel's analytics. It is cookieless, it does not identify you, and it never builds a profile of you or follows you anywhere else. That is the only measurement on the site.
That is the whole list. No data broker feed, nothing sold on.
Where it lives
Everything sits in Supabase's cloud database and storage, in its Asia Pacific (Mumbai, India) region, encrypted at rest. Your Glow Mirror photos are stored in a private bucket and are never public, never shared, never visible to anyone but you.
Glow itself runs on Vercel, whose servers for Glow90 are in the United States (Washington, D.C.). Vercel hosts the app and handles every request on its way to Supabase. That's infrastructure, not a company that uses your data for its own purposes.
So your data is processed outside Australia, and outside the country you live in if that is somewhere else. We use providers that offer standard data protection terms, and we require every company named on this page to give your data the same level of protection we do.
Who else touches your data, and why
No AI. Nothing you write and no photo you take is sent to any AI model, for any reason. Your Sunday letter and your chapter recaps are put together from your own entries inside Glow90, and nothing is used to train any model. Your Glow Mirror photos are never scored, analysed or compared by anything. They stay exactly where you put them.
A safety rule, in plain words. Glow90 does not use AI to read, analyse or interpret what you write. If certain safety-related words or phrases appear in something you write, the app shows a support card straight away. That is a fixed word-matching rule, not AI, and it is not diagnosis or monitoring.
Apple. You subscribe through Apple, which takes the payment and holds your payment details. We never see your card or your Apple ID email. We receive a record that your subscription is active, which plan it is, when it started and when it ends, whether it has been refunded, and a private identifier that links it to your Glow90 account.
Browser push services. If you turn on the web reminder, delivery goes through your browser's own push service (Google, Mozilla or Apple), which receives the reminder and the address of your browser.
Resend. When we email you, Resend delivers it. It receives your email address and the email itself, which for a Sunday letter means your week as it appears in the app. It doesn't use either for anything else.
Google Analytics. Only if it's switched on for this site, and as of this writing it isn't. If we do turn it on, it will be anonymised, cookie-based visit analytics only, never linked to your Glow account or your name, and never used for advertising.
None of the above is selling your data. We don't have a data broker relationship, and we never will.
How long we keep things
Your mood, moves, evening sentences, wins, starting answers and weekly answers are kept for as long as your account exists. They're the evidence your Sunday letters, chapter recaps and day-90 Glow Reveal are built from, so we don't trim them on a clock.
An earlier version of Glow90 included an AI chat, removed on 17 September 2026. Anything written to it before then is no longer used by anything, and is deleted with your account, or sooner if you email and ask.
Glow Mirror photos are kept until you delete them, one at a time, all at once, or with your account. That includes after your ninety days end, and whether or not you are still subscribed. We never delete them for you on a schedule; that's your call alone. At the end of the programme we ask once whether you'd like to keep them, save a copy or delete them, and nothing happens if you don't answer.
Emails we send you
Your Sunday Letter, each Sunday morning your time, so it reaches you even in a week you didn't open the app. Turn these off with the link at the bottom of any letter; the letters themselves stay in your Glow Book.
An occasional check-in if you haven't been in Glow90 for five days or more: never more than one a week, never more than three in your ninety days, and then they stop. Every one has a link to turn them off.
Receipts and renewal notices for your subscription come from Apple, not from us. We don't send billing emails.
We keep a record of which emails were sent to you and when, so nothing is ever sent twice. It's deleted with your account.
Keeping or deleting your data
Save a copy of any Glow Mirror photo, or all of them at once, to your own device from the Glow Book, any time, including after a subscription ends.
Delete a Glow Mirror photo any time, one tap, gone for good. Or delete them all at once from the Glow Book.
Change your starting answers or any weekly answer from the Glow Book whenever you like.
Want your whole account gone? Open the Account tab and choose to delete it. Your entries, answers, wins, letters and photos are removed straight away, and so is your login. There's no waiting period and nobody to talk into letting you go.
If you'd rather we did it, email info@wildheartspublishing.com.au and we'll delete your account and everything in it within 30 days.
If data protection law applies to you (the EU, the UK and elsewhere)
Why we use your data. To run your account and your subscription we rely on the contract between us. For the optional parts, what you write about how you feel, your mood and your Glow Mirror photos, we rely on your consent, which you give by choosing to enter them and can withdraw by deleting them or your account. To keep Glow90 secure and prevent misuse we rely on our legitimate interests.
Your rights. You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to move it to another service, and you can withdraw your consent at any time. You can do most of this yourself in the app: change your answers, delete a photo, or delete your whole account instantly. For anything else, email us. You also have the right to complain to your local data protection authority.
We don't make decisions about you by automated means that have legal or similarly significant effects.
Payments
You subscribe through Apple, in the iPhone app. Apple takes the payment and keeps your card details. We never see them.
Cancelling
You cancel with Apple, in your Apple ID settings. No phone call, no survey and no retention pitch from us. You keep access until the end of the period you already paid for.
Glow90 isn't clinical care
Glow90 is a wellbeing programme built on The Momentum Series, not therapy or medicine. It won't diagnose, prescribe or treat anything, and it isn't a substitute for medical or mental health care.
If you are in crisis, please call your local emergency number if you are in immediate danger, or use findahelpline.com to reach a crisis line in your country. In Australia: Lifeline is 13 11 14, any hour, and if you are in danger at home, 1800RESPECT is 1800 737 732.
Governing law
This policy is governed by the laws of Queensland, Australia.
Questions
info@wildheartspublishing.com.au. We'll answer in plain English, same as this page.
Also worth reading: our Terms.