Privacy Policy | Glojour

Este documento se publica en turco y en inglés. A continuación figura el texto en inglés.

1. The short version

Glojour is a social platform that hosts and publishes the content its members create and share: aesthetic treatment journeys, questions and doctors' answers. Members can also find verified doctors, send them a consultation request and chat with them. Glojour is not a health service. We do not diagnose, treat or give medical advice, and we do not arrange treatment, travel or bookings.
Glojour acts in three roles: the community platform for what you choose to publish, the technology provider and data processor for the clinics that use it, and the data controller for your account, for running and securing the platform, and for sending your health information to the doctor you choose. Who is responsible for your data explains each one.
Some of what you share can be health data, such as before and after photos or the treatment you ask about. We process it only on the legal bases the law allows for it, and we explain them below.
We never use health information for advertising, to build analytics profiles of individual people, or to train AI models, and we never sell personal data.
If you write to a clinic on WhatsApp and that clinic uses Glojour, your messages are delivered through Meta's WhatsApp Business Platform and stored in Glojour so that the clinic's team can answer you. The clinic is responsible for that conversation.
You can delete your account at any time from your settings. Anyone, including someone who only wrote to a clinic on WhatsApp, can ask us to delete their data: see Data Deletion.

2. Who is responsible for your data

Glojour is operated by Ali Can Akdoğan. Under Turkish Law No. 6698 on the Protection of Personal Data (KVKK), the data controller is this natural person, who runs Glojour as a sole proprietorship.

Address: Tomtom Mah. İstiklal Cad. Turhol Han No: 189 İç Kapı No: 3, Beyoğlu, İstanbul
Email: info@glojour.com
Phone: +905335604450

Glojour's three roles

Glojour acts in three roles. Which one applies depends on what you do, and it decides who is responsible for your data.

(a) Community platform. When you choose to publish a post, a journey, a question or a comment, Glojour publishes and hosts it, and is responsible for publishing and moderating it. For the health information in what you publish yourself, the legal basis is that you have made it public (KVKK Art. 6(3)(ç)).
(b) Technology provider and data processor for clinics. Clinics use Glojour as their software: the request desk and patient records, the team inbox and the WhatsApp channel. Once a clinic has received your information, the clinic is the data controller for it and processes it on its own legal basis as a health professional. Glojour processes it only on the clinic's behalf and instructions, as its data processor, under our Data Processing Terms, and does not use it for purposes of its own. What a clinic does with your information in its own practice, for example in its own patient records outside Glojour, is the clinic's responsibility.
(c) Data controller. Glojour is the data controller for your account, for the security of the platform, for running the platform, and for the single act of sending your health information to the doctor or clinic you choose. We send your health information to a doctor only on your explicit consent (KVKK Art. 6(3)(a)).

3. What we collect, why, and on what legal basis

We collect personal data in four ways: from you, when you create an account, post, send a request or write to us; automatically, when you use the site; from others, when a doctor or clinic records information about you, when Google sends us your details because you chose to sign in with Google, or when Meta delivers a message you sent to a clinic on WhatsApp; and, for doctors, from public professional sources. The cards below list each activity. Legal bases refer to Turkish Law No. 6698 (the KVKK).

Your account and signing in

Whose data: All members
Glojour's role: Data controller (role c)
What data: Your email address, your password (we keep only a one-way hash of it), your account type (patient or doctor) and, if you signed up with your email address, the version and date of the texts you accepted. If you sign in with Google, the name, email address and profile photo link Google sends us.
Purpose: To create your account, recognise you when you sign in and keep your account secure.
Legal basis: Entering into and performing our contract with you (KVKK Art. 5(2)(c)).
How long we keep it: Until your account is deleted.

Your profile and the age check

Whose data: Patient members
Glojour's role: Data controller (role c)
What data: Your first and last name, the display name and handle other members see, your profile photo, your city and country, and your date of birth. Your date of birth is never public; only you and authorised Glojour staff can see it.
Purpose: To show your profile, and to make sure that the platform is used only by adults and that sensitive photos are never shown to minors.
Legal basis: Performance of our contract (Art. 5(2)(c)) and our legitimate interest in protecting minors (Art. 5(2)(f)).
How long we keep it: Until your account is deleted.

What you publish in the community

Whose data: Members who post
Glojour's role: Community platform (role a)
What data: Your posts, journeys and their chapters, comments, questions, reactions, saves and follows; the photos you upload, including before and after photos; and the treatment, city and recovery stage you add to a post. This can include health data. We remove location data from photo files when you upload them.
Purpose: To publish and host what you choose to publish, after our moderators have reviewed it, under the identity you choose (your name or anonymously), and to keep the community safe.
Legal basis: For health information in what you choose to publish, the fact that you have made it public yourself, in line with your choice to publish it (KVKK Art. 6(3)(ç)). For everything else, performance of our contract (Art. 5(2)(c)) and our legitimate interest in keeping the community safe (Art. 5(2)(f)).
How long we keep it: Until you delete it or your account is deleted.

Consultation requests and chats with doctors

Whose data: Patients, doctors and clinic teams
Glojour's role: Data controller (role c); The clinic's data processor (role b)
What data: The treatment and message in your request, your phone number and budget range if you choose to give them, and the page you sent the request from; the messages in your chats and the photos and files you attach. This can include health data.
Purpose: To send your request, at your request, to the doctor you chose, and to let you continue your conversation with that doctor and their clinic team on Glojour.
Legal basis: For sending your health information to the doctor or clinic you choose, and keeping it on Glojour for that purpose, your explicit consent (KVKK Art. 6(3)(a)); for your other details, performance of our contract (Art. 5(2)(c)). Once your request has reached the clinic, the clinic is the data controller for its own use of the information, on its own legal basis as a health professional, and Glojour processes the clinic's records only on the clinic's behalf, as its data processor.
How long we keep it: Until your account or the doctor's account is deleted.

The pre-consultation form

Whose data: Patients who fill it in
Glojour's role: Data controller (role c)
What data: Your answers to questions such as pregnancy or breastfeeding, blood thinners, chronic conditions and previous procedures. These answers are health data. You can skip any question.
Purpose: To keep your answers private until you choose to share them with a doctor. They are shown only to the doctor you share them with, and you can withdraw the sharing at any time.
Legal basis: Your explicit consent (Art. 6(3)(a)).
How long we keep it: Until you delete them (you can do so at any time in your settings) or your account is deleted.

The AI preview (switched off)

Whose data: Members who used the preview before it was switched off
Glojour's role: Data controller (role c)
What data: The face photo you uploaded, the area you chose, the preview image generated, your statement that you are 18 or older, and the record of your consent. If you shared a preview with a doctor, that doctor could see it too. The preview is switched off, so no new photos are taken.
Purpose: To create an illustrative preview on your photo. A preview is not a prediction of your result and not a medical assessment.
Legal basis: Your explicit consent, asked for separately at the start of the preview (Art. 6(3)(a)).
How long we keep it: The photo and preview files are deleted automatically 180 days after they were made; the record of your consent is kept until your account is deleted.

Doctor accounts and verification

Whose data: Doctors
Glojour's role: Data controller (role c)
What data: Your name, title, specialty and place of practice; your phone number (never public); your diploma and licence details and the documents you upload; the information and images you publish on your doctor page and clinic site; professional details we find in public sources such as your website, Google Business Profile or Instagram account and put to you for confirmation; and the campaign tag and referring site domain that brought your sign-up.
Purpose: To open your doctor account, verify your identity and your right to practise, show you to patients as a verified doctor, let our team reach you, and measure which channels bring doctors to Glojour.
Legal basis: Performance of our contract (Art. 5(2)(c)); our legitimate interest in preventing fake doctor profiles and in measuring our channels (Art. 5(2)(f)); and, for information you have published yourself, the fact that you made it public (Art. 5(2)(d)).
How long we keep it: Until your account is deleted. Sign-up source information is kept for at most 24 months.

The clinic desk, the team and patient records

Whose data: Clinic teams and the people clinics record
Glojour's role: The clinic's data processor (role b); Data controller (role c)
What data: Team members' names, email addresses, roles and permissions, online status and records of who did what; the notes, tasks and stages clinics keep about requests; and the names, phone numbers, email addresses and notes of people a clinic adds or imports itself.
Purpose: To let clinics handle their requests, patient records and patient conversations as a team.
Legal basis: The clinic is the data controller for what it records about its patients; Glojour processes that information only on the clinic's behalf and instructions, as its data processor. For team members' own account details, Glojour is the data controller and relies on performance of our contract (Art. 5(2)(c)).
How long we keep it: Until the clinic's account is deleted, or earlier when the person concerned asks for deletion and the request is carried out.

The WhatsApp channel

Whose data: People who write to a clinic's WhatsApp number connected to Glojour, and that clinic's team
Glojour's role: The clinic's data processor (role b)
What data: Your WhatsApp phone number; the text of the messages you and the clinic send; for a photo or file you send, only its caption; when each message was sent, delivered and read; the notes and labels the clinic team adds to the conversation; and which team member sent each reply. We do not download the photos or files you send into Glojour, and we do not store your WhatsApp profile name.
Purpose: To bring your messages to the team of the clinic you wrote to and let the team reply to you through Glojour.
Legal basis: The clinic you wrote to is the data controller for these conversations; Glojour stores and transmits the messages only on the clinic's behalf and instructions, as its data processor, and does not use them for purposes of its own.
How long we keep it: For as long as the clinic uses Glojour, or earlier when your deletion request is carried out.

Safety, moderation and preventing abuse

Whose data: All users and visitors
Glojour's role: Data controller (role c)
What data: Reports you make and reports made about you, moderation decisions and account restrictions; records of which record our authorised staff viewed and when; the IP address, account ID or email address we hold to limit abuse; and technical error records.
Purpose: To protect the platform, its members and their data, to remove unlawful content, and to find and fix errors.
Legal basis: Our legitimate interest (Art. 5(2)(f)), our legal obligations (Art. 5(2)(ç)) and the establishment, exercise or defence of legal claims (Art. 5(2)(e)).
How long we keep it: Records held to limit abuse, at most one hour. Reports and moderation records until your account is deleted, and after that with every link to you removed.

Measuring how Glojour is used

Whose data: Members and visitors
Glojour's role: Data controller (role c)
What data: Which pages and posts you see and for how long, your device type and country; if you are signed in, usage events linked to your account and the campaign tag and referring site domain that brought you to Glojour. We do not store your raw IP address for this: views are counted with a key derived one way from your IP address and the date. Page visit statistics are also collected with Vercel Web Analytics, which uses no cookies.
Purpose: To understand how Glojour is used, improve its pages and feed, and measure which channels work. We use these records only to count totals, never to build a profile of you, to target advertising or to train AI models.
Legal basis: Our legitimate interest (Art. 5(2)(f)).
How long we keep it: View records for 90 days, then only daily totals that cannot be linked to anyone. Usage events until your account is deleted, when they are deleted with it. Doctors' sign-up source information for at most 24 months.

Support and what you write to us

Whose data: Anyone who writes to us
Glojour's role: Data controller (role c)
What data: The message you send through the support window or by email, your email address and the page you sent it from; and the service emails we send you (such as welcome, request notifications and password resets).
Purpose: To answer your question and send the notices your account needs. We do not send you marketing messages.
Legal basis: Performance of our contract (Art. 5(2)(c)) and our legitimate interest (Art. 5(2)(f)).
How long we keep it: Until your account is deleted or you ask us to delete it. The emails you sent us are deleted from our mailbox at the same time.

Doctors who are not members

Whose data: Doctors who are not Glojour members
Glojour's role: Data controller (role c)
What data: Name, specialty, institution and district as they appear in public professional sources. No contact details are kept.
Purpose: To plan inviting doctors to review content in their specialty or to join Glojour.
Legal basis: Our legitimate interest (Art. 5(2)(f)) and data the person has made public (Art. 5(2)(d)).
How long we keep it: Deleted when you ask to be removed from the list.

Doctors who ask us to call them

Whose data: Doctors who ask to be called through the form on our page for doctors
Glojour's role: Data controller (role c)
What data: Your first and last name, your phone number, your specialty if you chose one, the page's language, the campaign tags of the ad or link that brought you and the name of the referring site, when you sent the form and the version of the contact permission text it showed; afterwards, notes of our calls with you.
Purpose: To call you and write to you on WhatsApp, show you Glojour, help you open your account and prepare your profile if you wish, and measure which ads and links reach doctors.
Legal basis: Steps taken at your request before entering into a contract (Art. 5(2)(c)) and our legitimate interest in measuring the results of our ads (Art. 5(2)(f)). For calls and WhatsApp messages, the permission you gave on the form (Law No. 6563).
How long we keep it: If you open an account, this record is linked to it and kept until your account is deleted. If you do not, it is deleted when you ask.

Traffic records (Law No. 5651)

Whose data: Everyone who uses the site
Glojour's role: Data controller (role c)
What data: For every request: the IP address, the date and time, the page address asked for (with secret values such as sign-in codes removed), the method (GET, POST), the result and the browser details; for a file upload, also the account that uploaded it and where the file is stored.
Purpose: To meet our duty as a hosting provider under Article 5 of Law No. 5651 to keep traffic data, and to answer lawful requests from competent authorities.
Legal basis: It is expressly provided for by law (Art. 5(2)(a)) and it is our legal obligation (Art. 5(2)(ç)).
How long we keep it: One year, then deleted. The records are held in our database in Frankfurt, Germany, sealed every day, and searched only by authorised administrators in answer to a request from a competent authority. They are kept for this period even if your account is deleted.

Legal obligations and requests

Whose data: Anyone concerned
Glojour's role: Data controller (role c)
What data: Your requests under the KVKK and their outcome; information that is the subject of lawful requests from competent public authorities.
Purpose: To let you exercise your rights and to meet our legal obligations.
Legal basis: Our legal obligations (Art. 5(2)(ç)) and the establishment, exercise or defence of legal claims (Art. 5(2)(e)).
How long we keep it: The record of a deletion request and of what was done is kept for three years after the request is closed, as the Regulation on the Deletion, Destruction or Anonymisation of Personal Data requires, and then deleted; any free-text reason in it is deleted when the request is carried out. Information that is the subject of an active legal dispute or a request from a competent authority is kept until the dispute or request is resolved.

4. Health data

Health data is a special category of personal data under Article 6 of the KVKK. On Glojour it includes before and after photos, the treatments and recovery stages in your posts and journeys, the content of your consultation requests and chats, and your answers to the pre-consultation form.

What you publish. When you choose to publish a post or a journey that includes health information, the legal basis is that you have made it public yourself (KVKK Art. 6(3)(ç)). Before a post that other people can see goes to review, you tick a box confirming that you know it will be public and may include information about your health, that anyone else in the photos has agreed, and, for an anonymous post, that photos may still show who you are. Posts and photos appear only after our moderators review them. You can post anonymously, and you can delete a post at any time. Photos marked as sensitive are never shown to signed-out visitors or to members we cannot confirm are adults.
What you send to a doctor. Sending your health information to the doctor or clinic you choose, and keeping it on Glojour for that purpose, rests on your explicit consent (KVKK Art. 6(3)(a)). You give it by ticking a box, once for each doctor, before your first request, message or shared answers reach that doctor; our Explicit Consent Text sets out what it covers. You can withdraw it at any time in Settings › My consents or by writing to info@glojour.com; the clinic is told, nothing more from you is sent to it, and withdrawal does not affect processing that took place before it. Once the clinic has received your information, it is responsible for it as a health professional and data controller.
The pre-consultation form. You can skip any question. Your answers stay private until you choose to share them with a doctor; they are then shown only to that doctor, and you can withdraw the sharing at any time.
Your consultation requests, chats and pre-consultation answers are visible only to you, the doctor you chose, the members of that doctor's clinic team who have permission to see them, and authorised Glojour staff where support, safety or the law requires it.
Photos in posts are stored in private storage and shown only through links that expire within an hour.
We never use health information for advertising, to build analytics profiles of individual people, or to train AI models, and we never sell it.

5. Data we receive through Meta products

Glojour uses Meta products in two places. Both go through our app on Meta's developer platform, Glojour Chat.

A clinic can connect its WhatsApp business number to Glojour through Meta's official WhatsApp Business Platform (Cloud API). When you write to that number, the clinic is the business you are talking to.

What Meta sends us: Your WhatsApp phone number, your WhatsApp profile name, the text of your message, the caption and a reference for any photo or file, the time of the message, and, for the clinic's replies, whether each one was delivered and read.
What we keep: Your phone number, the message text and captions, the times, the delivery and read status, and the notes and labels the clinic team adds. We do not store your profile name and we do not download your photos or files into Glojour; they stay with WhatsApp. Your WhatsApp conversation is not linked to a Glojour account, even if you have one.
How it is used: Only on the clinic's behalf: to show the conversation to the clinic's team and to let the team reply to you. The team can reply freely within 24 hours of your last message; after that, only with a message template approved by Meta. We send messages only to people who wrote to the clinic first.
Encryption: Meta's WhatsApp Business Platform decrypts messages on Meta's servers to deliver them to the business. A conversation with a clinic through Glojour is therefore not end-to-end encrypted between you and the clinic in the way a chat between two personal WhatsApp accounts is. Connections between Meta, Glojour and the clinic's team are encrypted.
Who can see it: The members of that clinic's team who have access to its inbox, and authorised Glojour staff, who use that access only for support, security and legal obligations.
What we never do: We do not use WhatsApp data for advertising, sell it, share it with data brokers, combine it with other data to build a profile of you, or send it to AI services on our own initiative.
How long: For as long as the clinic uses Glojour, or until your deletion request is carried out. Meta processes the messages as a service provider for the business and keeps them for up to 30 days to deliver them, under Meta's own terms.
Deletion: See Data Deletion: if you wrote to a clinic on WhatsApp.

Instagram

A doctor can choose to connect their own Instagram professional account to import their posts into Glojour as drafts. This is available to a limited number of doctors. We receive the account's basic profile information and its posts (images, videos and captions). The access token is kept, encrypted, in a cookie on the doctor's own device for up to seven days and is not stored in our database. Imported posts are saved to the doctor's media library and are published only if the doctor publishes them. A doctor can remove Glojour from the apps connected to their Instagram account at any time, and can delete imported posts from their media library.

6. AI features

Some Glojour features use AI models run by our service providers. None of them makes decisions about you that have legal or similarly significant effects.

AI preview: switched off. While it was on, the preview made an illustrative image from a face photo. fal.ai generated the image, and Anthropic's model checked the photo and the result for safety. A preview ran only after a separate explicit consent and a check that the member was 18 or older. The preview now takes no new photos. Photos and previews made while it was on are deleted 180 days after they were made, or sooner if you ask us at info@glojour.com. If we switch it on again, we will update this policy first.
Translation. When someone asks to see a post or comment in their language, its text is sent to Anthropic to be translated.
Writing assistant for clinic teams. When a clinic team member uses it, the text of the consultation request record they are working on is sent to Anthropic to draft or summarise a reply. A person always decides what is sent.
Doctor pages. A doctor's own page text is sent to Anthropic to draft or translate it, when the doctor turns this on.

Glojour does not use your content or any health information to train AI models. Drafts made with the writing assistant are kept with the request record they belong to.

The doctor and clinic you choose, when you send them a consultation request or write to them, and the members of their team who have permission to see your request or chat.
Other members and the public, for what you choose to publish. A published post shows your display name, or no name if you post anonymously.
Our service providers, who process data on our behalf and only to provide their service. They are listed in the next section.
Public authorities, when the law requires it, for example on a court order or a lawful request from an authorised body.
Our professional advisers, such as lawyers, where needed to protect our rights.

We do not sell personal data, and we do not share it with advertisers or data brokers.

8. Our service providers

These companies process personal data for us. They receive only what their service needs.

Supabase

What for: Database, sign-in and file storage
What data: All data on the platform
Where: Servers in Frankfurt, Germany; company in the United States

Vercel

What for: Hosting and delivering the site; cookie-free visit statistics
What data: The IP address, browser details and page address of every request; page content
Where: Application servers in Frankfurt, Germany; content delivery network worldwide; company in the United States

Resend

What for: Sending service emails (account confirmation, password resets, notifications)
What data: Your email address, your name and the content of the email
Where: Sent from the Tokyo, Japan region; account and sending records in the United States; company in the United States

Google

What for: Sign in with Google (if you choose it) and the mailbox that receives the emails you send us
What data: With Google sign-in, your name, email address and profile photo; the emails you send us
Where: United States and worldwide

Anthropic

What for: AI: translating posts and comments on request, the writing assistant for clinic teams, and drafting and translating doctor page text; while the preview was on, the safety check of preview photos
What data: The text of a post or comment someone asks to translate; when the writing assistant is used, the text of the request record being worked on; a doctor's own page text; while the preview was on, the photo uploaded for a preview and the image generated
Where: United States

fal.ai

What for: Generating the AI preview image while the feature was on; it receives nothing while the preview is switched off
What data: The photo uploaded for a preview and the image generated
Where: United States

9. Transfers outside Turkey

Our database and application servers are in Frankfurt, Germany, and several of our service providers are based in the United States or process data in other countries, as shown above. Using Glojour therefore means that your personal data is transferred outside Turkey.

These transfers from Turkey are governed by Article 9 of the KVKK, which requires appropriate safeguards for regular transfers abroad, such as the standard contracts published by the Turkish Personal Data Protection Board. We are preparing those contracts with our service providers; we will notify each signed contract to the Board within five business days and update this section.

10. How long we keep data

We keep personal data only for as long as its purpose requires. The period for each activity is in its card above. In short: most data is kept until you delete it or your account is deleted; abuse-limiting records for at most one hour; traffic records under Law No. 5651 for one year; view records for 90 days; doctors' sign-up source for at most 24 months; and AI preview photos for 180 days after they were made.

After an account is deleted or a deletion request is carried out

Within 30 days of a deletion request, we delete everything we hold about the person or make it irreversibly anonymous. We keep only the following, each for the period shown:

a record of the request and of what was done, without any reason the person wrote: three years after the request is closed, as the Regulation on the Deletion, Destruction or Anonymisation of Personal Data requires;
information that is the subject of an active legal dispute or of a request from a competent authority: until the dispute or request is resolved;
if the account was suspended for abuse: an irreversible digest of its email address and phone numbers, never the address or number itself, for two years, so that the same person cannot sign up again;
traffic records under Law No. 5651 (IP address, time, page, method and result; for uploads, the account): one year;
copies in our database backups, which are overwritten on a rolling basis within seven days;
for doctors, the articles they published on the Glojour blog, which are taken offline, and the texts they wrote about treatments, which are no longer used: both are unlinked from the doctor's account, and their unpublished text stays in our database.

Safety records and statistics that remain after an erasure carry no link to the person. Data Deletion explains each item in more detail.

11. How we protect data

Every connection to Glojour is encrypted (HTTPS).
Database access rules decide, row by row, who can read each record. A doctor sees only the requests sent to them; a clinic team member sees only what their permissions allow.
Photos, chat attachments and verification documents are kept in private storage and shown only through links that expire.
We remove location data from photo files when you upload them.
Only authorised staff can open members' records, and we record staff access to AI preview photos and every moderation action.

No system is perfectly secure. If a breach affects your personal data, we will notify the Personal Data Protection Board and you as the law requires.

12. Your rights and how to use them

Under Article 11 of the KVKK, you have the right to:

learn whether your personal data is processed;
request information about the processing if it is;
learn the purpose of the processing and whether the data is used in line with that purpose;
know the third parties in Turkey or abroad to whom your data is transferred;
ask for incomplete or inaccurate data to be corrected;
ask for your data to be deleted or destroyed under the conditions in Article 7 of the KVKK;
ask for the third parties your data was transferred to be notified of a correction or deletion;
object to a result that is against you and arises from analysis of your data exclusively by automated systems;
claim compensation if you suffer damage because your data was processed unlawfully.

How to apply. Write to info@glojour.com from the email address registered on your Glojour account, or use the account deletion option in your settings to have your account deleted. If you have no Glojour account, write to the same address and we will verify your identity before acting; Data Deletion explains how. You can also apply in writing to the address in Who is responsible for your data. Under the Communiqué on the Procedures and Principles of Application to the Data Controller, an application states your name and surname, your Turkish identity number (or, if you are not a Turkish citizen, your nationality and passport or identity card number), your address for notifications, your email address or phone number, and what you are asking for. You can write to us in Turkish or English.

We answer in writing or electronically, free of charge, within 30 days at the latest. If we refuse your request, if you find our answer insufficient, or if we do not answer in time, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within 30 days of learning our answer, and in any case within 60 days of your application.

If you use Glojour from the European Union, you may also have rights under the EU General Data Protection Regulation, including the right to receive your data in a portable format, and you can complain to the data protection authority where you live.

13. Deleting your data

You can delete your account at any time from your account settings. Everyone, with or without an account, can ask us to delete their data. The steps, the timeline and what remains afterwards are on our Data Deletion page.

14. Cookies

Glojour uses only the cookies it needs to keep you signed in, to remember your language and, for doctors who connect Instagram, to keep that connection. We use no advertising or tracking cookies. Details are in our Cookie Policy.

15. Children

Glojour is for adults. You must be 18 or older to use it; we ask for your date of birth when you set up a patient profile, and the AI preview checks your age again. If we learn that an account belongs to someone under 18, we close the account. A parent or guardian can ask us to delete its data.

16. Changes to this policy

When this policy changes, we publish the new version here with its date and a note on what changed. If a change affects how we use data you have already given us, we will tell signed-in members on the site before it takes effect.

17. Contact

For questions about this policy or your personal data, write to info@glojour.com.