Glass Shoe

Privacy Policy

Effective 2026-08-26

1. What we collect

We do not collect your name — there is nowhere to enter one, and we do not ask Apple or Google for one when you sign in with them. Account info is your email only; profile preferences (sports, styles, fit preference, arch, concerns); the optional onboarding details you choose to give us — your birthday and which size scale you shop (men's / women's / unisex). Your birthday is used to confirm you're old enough to use Glass Shoe, and we keep the broad age bracket it implies (e.g. 25–34) to understand which age groups keep using the app — plain audience measurement, never advertising. The size scale personalizes your sizing and recommendations. Both answers are skippable, and neither is ever sold or used to identify you. Your usual shoe size; foot data — for each foot: length, width, arch height and instep, plus what we derive from those (your estimated size, foot shape, toe-box shape), how confident the scan was, and which capture method you used; fit feedback you submit; shoes you save or mark as owned; a record of the consents you give (which document, which version, when), which we keep as proof that we asked; and product interaction events (e.g. app opens, scans completed, buy-link taps). Our default camera/LiDAR scan computes measurements on your device; a small set of scan photos (your feet with the detected outline) is kept on your device so you can review the scan. While you are signed in, those scan photos are also backed up to your account — a private, encrypted storage folder on our servers that only your own account can read — so your scans follow you to a new phone. Backup is on by default and you can turn it off anytime in Profile → Privacy & data, which also deletes every photo already backed up; deleting a scan or your data deletes its backup too. Backed-up photos are used for nothing except showing you your own scans — never to train AI, never shown to anyone else, never sold. If you use the optional "Analyze a photo" feature, we analyze the photo on your device first, and in that case it is never transmitted for analysis. Only if the on-device analysis cannot find both feet, and you are signed in, and you give separate permission at that moment, do we send that photo to a third-party AI service (Anthropic) to estimate your foot shape; it is deleted by them within 30 days and is never used to train AI models. We ask before the photo leaves your device for that service, and you can turn that permission on or off anytime in Profile → Privacy & data. Either way a copy stays on your device (and in your account backup, if that is on) along with the resulting shape estimate — and nowhere else on our servers.

2. Biometric data

Foot measurements may be treated as biometric data under laws including the Colorado Privacy Act (C.R.S. § 6-1-1314), the Illinois Biometric Information Privacy Act (BIPA), and the EU/UK GDPR. This section is our biometric policy for those laws.

  • Consent. We collect and process foot measurements only with your explicit, separate consent, given before your first scan.
  • Purpose. Solely to compute how shoes fit you and recommend sizes.
  • We never use your foot data to identify, authenticate, or recognize anyone. We do not match it against any other person's data, and we do not use it as a login, a key, or a way to tell who you are.
  • No sale. We never sell, lease, trade, or otherwise disclose your foot data for anyone else's benefit. The only parties who ever touch it are the processors named in §4, acting on our instructions under contract.

3. Retention, destruction & incident response

Your foot measurements are deleted at the earliest of these:

  • immediately when you withdraw biometric consent, delete your data, or delete your account — in Profile → Privacy & data or from our Data & Privacy Rights page;
  • within 45 days after we determine we no longer need them for the purpose in §2; and
  • 24 months after your last interaction with Glass Shoe — an outer limit that applies even if you never ask us to delete anything.

Destruction means the record is deleted from our live systems, and from backups on their normal rotation (no longer than 90 days). Scan photos and any analyzed photo live on your device and, if photo backup is on, in your account's private storage; the server copies are deleted when you delete the scan, turn photo backup off, or delete your data or account — and in every case under the same outer limits above. Deleting the app deletes the device copies; your account backup (if on) remains so your scans survive a reinstall, until you delete it by any of the routes above.

Security-incident protocol. If we discover a breach affecting foot measurements, we investigate and contain it, notify affected users by email without unreasonable delay (and in every case within any deadline your state's law sets), notify regulators where required, and record what happened and what we changed.

4. Sharing

"Feet like yours" and community fit stats use only aggregated, anonymized data — never your identity or individual records. When you open a retailer link we do not send the retailer your identity or your measurements; the link may carry an anonymous affiliate code so the retailer can credit Glass Shoe for the referral. We do not track you across other companies' apps or websites.

5. Your rights

Depending on your jurisdiction you may have rights to access, export, correct, or delete your data. Use the in-app export/delete tools, our Data & Privacy Rights page, or contact us.

6. Security

Data is protected with row-level security; access is scoped to your account. If a security incident affects your personal data we will notify you as required by law.

7. US state privacy rights

If your state has a comprehensive privacy law (including California, Colorado, Connecticut, Texas, Oregon, and Virginia):

  • We do not sell your personal information and do not share it for targeted or cross-context behavioral advertising, and have not done so in the preceding 12 months. Retailer links contain only an anonymous code identifying Glass Shoe as the referral source — nothing about you. Because we don't sell or share, we don't offer a "Do Not Sell or Share" link; any Glass Shoe website will honor the Global Privacy Control where applicable law requires.
  • Sensitive information: your foot measurements are used only to provide the fit services you request — never to identify you, never for advertising, and never sold or shared. Because of this service-only use, no "Limit the Use of My Sensitive Personal Information" link is required or offered.
  • Retention: measurements are kept while your account is active; they are deleted immediately when you withdraw biometric consent or delete your data, and when you delete your account. Order records are kept as tax and accounting law requires.
  • You may request access, correction, deletion, or a portable copy using the in-app tools (Profile → Privacy & data) or by emailing hello@glassshoe.app. We verify requests via your account email and respond within 45 days. If we refuse a request you may appeal by replying "Appeal"; if the appeal is denied you may contact your state Attorney General. Oregon residents may request a list of specific third parties that received their personal data.

8. Children

Glass Shoe is a general-audience app for users 16 and older. It is not directed to children: there is no kids' mode, no child-themed content, and we never market it as a children's product. We do not knowingly collect personal information from anyone under 16, and never from a child under 13; if we learn we have, we delete it promptly. Onboarding asks for your date of birth and blocks accounts below the minimum age. Parents or guardians may contact hello@glassshoe.app.

Scanning a child's feet. A parent or guardian may use their own account to measure a child's feet. When that happens we are collecting the measurement from the adult account holder, not from the child, and the adult controls it — it is exported and deleted with the rest of that account's data, on the same schedule in §3. As with every scan, a child's measurements are used only to recommend shoe sizes and are never used to identify or recognize anyone. By scanning someone else's feet you confirm you are their parent or guardian, or otherwise have their permission. We do not use a child's measurements for advertising and we never sell them.

9. Consumer health data

Foot measurements may be regulated as consumer health data in some states (e.g. Washington, Nevada). Our separate Consumer Health Data Privacy Policy covers this; it is also available in the app under Profile → Privacy & data → Disclosures.

10. Where we operate, and international transfers

Glass Shoe is available in the countries listed on its App Store page. We are based in the United States, and your data is stored and processed in the United States by our providers (see §4). If you are outside the United States, using Glass Shoe means your data is transferred to and handled in the US, where privacy laws differ from your own and where public authorities may in some circumstances be able to access it.

When we transfer data out of the UK, the European Economic Area, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum or Swiss addendum as applicable), which are already in place with our providers, together with an assessment of the risks of each transfer. You can ask us for a copy of those safeguards at hello@glassshoe.app.

11. If you are in the UK, the EEA, or Switzerland

This section applies in addition to the rest of this policy, and prevails over it if they conflict.

  • Who is responsible. Glass Shoe's developer is the controller of your data.
  • Legal bases. To perform our contract with you (account, saved shoes, fit results); on your explicit consent for foot measurements and photo analysis, agreed separately before your first scan and withdrawable anytime; to meet legal obligations; and our legitimate interest in basic security and in understanding which age groups keep using the app — you can object to that.
  • Your rights. Access, rectification, erasure, restriction, objection, and portability; withdraw consent at any time without affecting what we did before. We make no automated decisions producing legal or similarly significant effects. We answer within one month.
  • Complaints. Email us first — we acknowledge within 30 days and tell you the outcome. You may also complain to your own supervisory authority, the UK ICO, or the Swiss FDPIC, without contacting us first.
  • Representatives. Where the law requires an EU or UK representative, their name and address are published here.
  • Children. Glass Shoe is for people aged 16 and over — at or above the age of digital consent everywhere in the EEA and UK.

12. If you are in Canada

We are accountable for your data under PIPEDA and, in Quebec, the Act respecting the protection of personal information in the private sector. Our privacy officer is reachable at the address above. Foot measurements are sensitive information collected only with your express consent, asked separately before your first scan. Your data is stored in the United States by the providers named in §4 under written agreements requiring comparable protection; US courts and public authorities may in some circumstances be able to access it. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

13. If you are in Australia or New Zealand

You may request access to, or correction of, your personal information using the in-app tools or by emailing us. We will tell you if a breach is likely to cause you serious harm. In New Zealand our privacy officer is reachable at the same address.

14. If you are in Japan or South Korea

Your data is transferred to and stored in the United States by the providers named in §4 — Supabase for your account and measurements, and Anthropic only if you separately allow the optional photo analysis. The United States has no single comprehensive federal privacy law; protection comes from sector-specific and state laws, and our providers are bound by written processing agreements. We ask for your agreement before the transfer happens, tell you what is sent, and declining means the app uses only on-device analysis.

15. Changes

If we ever want to collect, use, or share your foot data in a way this policy doesn't already describe, we will ask for your consent first — we will not quietly broaden it by editing this page.

16. Contact

hello@glassshoe.app

This policy mirrors the Privacy Policy presented in the Glass Shoe app. If the two ever differ, the version presented in the app at the time of your acceptance governs.