Privacy Policy for Let's Glow
Version 2.32 – Effective: September 25, 2026
This Privacy Policy provides comprehensive information about the personal data we collect, for what purposes, on what legal basis, and what rights you have. Please read it carefully. If you have any questions, you can contact us at any time.
1. Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Johannes Reusch
Heinrich-Heine-Platz 9A
10179 Berlin, Germany
Email: support@lets-glow.de
Phone: +49 30 54858929
Josefine Patzelt is co-founder of Let's Glow.
For data protection inquiries, please contact us at the email address above.
2. Overview – Our Principles
- Data Minimization: We only collect data that is actually necessary for the operation of the app.
- Transparency: You can view at any time what data we have stored about you.
- Control: You can edit, export, or completely delete your data at any time.
- Security: All data is transmitted encrypted and stored on servers within the EU.
- No Selling: We do not sell your data to third parties.
3. Minimum Age
Use of Let's Glow currently requires a minimum age of 18 years. We do not knowingly collect data from individuals under 18. If we become aware that an underage person has created an account outside the youngster pilot programme, we will promptly delete it.
Youngster pilot programme exception: Within the supervised youngster pilot programme (Terms, Section 2a), we process data of minors from the age of 13 only with the express, documented consent of the legal guardian (Art. 8 GDPR) and limited to what is necessary for the pilot. The data collected and the guardian's rights (including access, withdrawal, deletion) are governed by the document "Consent to the Youngster Pilot Programme".
The minimum age of 18 is a voluntary safeguard during the platform's launch phase. We intend to lower the minimum age once our safety mechanisms and moderation systems are sufficiently mature.
4. What Data We Collect
4.1 Account Data (upon registration)
- Email address
- Display name
- Username (@handle) — a freely chosen, public, unique username (in addition to the display name) by which others can find you via search, provided you enable discoverability (see § 4.2a). A newly chosen username is automatically checked for prohibited content before it is released (see § 6.3).
- Phone number (when signing in via phone)
- Avatar (selectable from predefined avatars, no personal photo)
- Authentication method (Google Sign-In, Apple Sign-In, or phone number)
- Firebase Auth UID (unique user identifier)
- Date of birth (optional; if you provide it, it serves to plausibility-check the age you declared — see § 3 Minimum Age and TOS § 2). The date of birth is not publicly displayed.
4.2 Profile Data (within the app)
Game profile and character:
- Character selection and character values
- Selected avatar and avatar customization (position, scale, rotation)
- Selected background
- Interests, interest categories, sub-interests
- Strengths (VIA character strengths), Self-Determination Theory types (SDT)
- Profile title and short description (free text)
- Position on the game map (avatar position, current world, time of last move)
Game progress:
- Level, XP (experience points), Karma, Streak
- Streak values: current streak, best streak, weekly streak, Spark streak (months as a Spark)
- Streak protection shields
- Stars (in-game currency; see TOS § 9.4) and energy points
- Daily activity counters (e.g. created challenges, content rated by you, "thinking of you" messages sent) and timestamps of the last respective action
- Lists of completed and voted challenges (stored as the reference number of each challenge, not as text)
Account status and roles (internal management):
- Onboarding status, account creation status
- Whether you have already changed your character selection once
- Tutorial status (seen yes/no, version seen)
- Banned status with reason, timestamp, and expiration date (in case of policy violations)
- The role of your account — for almost everyone this is an ordinary user account; there are also accounts for our team, for providers of offers, and for support
Inventory and collection:
- Inventory items
- Unlocked avatars, backgrounds, worlds
- Unlocked reactions (stickers/reactions)
- Discovered items, newly acquired items, sort order
Advertising and paid extensions:
- Advertising activation status (internal status marker, see § 6.6)
- Extended Mode status: activation, activation timestamp, expiration date, auto-renewal, source (e.g. Stars use or advertising)
- Spark status (see § 4.10) — subscription activation, platform, chosen display (Glow/Badge)
Settings and preferences:
- Language, Dark Mode
- Audio settings, text scaling, haptics settings
- Display configuration (e.g. inventory options)
- Notification preferences (which push notifications you wish to receive) and the choice you made at registration as to whether we may keep you updated by email
- Visibility settings (see § 4.2a)
4.2a Visibility and Profile Settings
Let's Glow gives you granular control over who can see your profile and interact with you. The following settings are stored in your user profile and can be changed at any time in the app settings:
Community Visibility: Defines the group of people for whom your profile appears in friend suggestions, the community page and other discovery surfaces. Selectable: Friends Only / Friends of Friends / Entire Community. You can switch to a more restrictive setting at any time; loosening the visibility (e.g. from "Friends" to "Everyone") is, for protective reasons, possible only once per 24 hours.
Panic Mode: For moments when you feel uncomfortable, you can remove yourself from all suggestions, search results and community lists with a single click. The mode works both ways: while you are invisible, you are not shown any suggestions either. Existing friendships remain untouched. When activating, we offer to create a support ticket so our team can check in with you to make sure everything is okay (checkbox enabled by default, can be unchecked).
It stays on until you end it yourself — it does not switch off on its own. You can end it at any time, with no waiting period. Only switching it on is limited to once every 24 hours, so that the protection is not undermined by rapid toggling.
Activity Time Display: Your exact activity time ("Online", "Active X minutes ago") is only shown to your friends. Unknown users see only a rough indication ("Active this week", "Active this month").
Block Lists: See § 4.4 and § 9.2.
These settings implement Privacy by Design and by Default (GDPR Art. 25). The optional support ticket creation triggered by Panic Mode is described in § 4.7 (Support Data).
4.3 User-Generated Content
- Posts (text, images) — displayed in the community feed
- Challenge photos (taken with your device camera or selected from your photo library – your camera is used exclusively for creating challenge posts). We will inform you in the app about this purpose before the first camera access. When uploading, challenge photos are compressed and re-encoded. This process automatically removes photo metadata (EXIF data such as camera model, capture date, or GPS coordinates).
- Team images (avatar/banner for teams, optional). When uploading, team images are compressed and re-encoded like challenge photos — photo metadata (EXIF data such as camera model, capture date, or GPS coordinates) is automatically removed in the process.
- Bug-report screenshots — when triggering the auto-bug-report from the error screen of the app, a screenshot of the app view is created and transmitted to our support team with your consent (stored in a private area of our storage that belongs to your account only). You can cancel the bug report at any time.
- Challenges (created and completed)
- Comments
- Direct messages between users (in-app chat)
- Team memberships
- Glow Picks (your recommendations: title, a short rationale, one external link (URL), category, and your chosen visibility). Links you post are automatically checked for malware/phishing before publication (see § 6.12).
4.4 Social Interaction Data
- Blocked users (block lists)
- Reports about other users or content
- Ban status and ban history (in case of policy violations)
- Invitation data: When you invite other people (e.g., to a challenge or as a friend), we store the invitation type, your user ID and – as the sender – your email address, as well as technical metadata. Invitations expire automatically after their validity period.
4.5 Usage Data (automatically collected)
- App usage statistics (Firebase Analytics): page views, interactions, feature usage
- Crash and error reports (Firebase Crashlytics): device information, operating system, app version, stack traces
- Performance data (Firebase Performance Monitoring): loading times, network latency
4.6 Technical Data
- Device type, operating system, app version
- IP address (temporary, for authentication and security)
- Timestamps of actions
- Device ID and device name (SHA-256 hash, for device verification and security, valid for 30 days)
4.7 Support and Optional Diagnostic Data (App Logs)
When submitting support requests, the following data is processed: ticket content (your problem description, contact details), bug reports and feedback messages.
Optional with bug report: A screenshot is only created if you explicitly tap "report error" on an error message, and is then transmitted with your consent. You can cancel the bug report at any time.
When you activate Panic Mode (see § 4.2a): with your consent, a support ticket is automatically created so our team can check in with you. The ticket content in this case includes the activation timestamp and a reference to the trigger (Panic Mode); no personal data about the reason is collected. You can opt out of this when activating Panic Mode.
When creating a support ticket, you may optionally also send anonymized diagnostic data (app logs). Before upload, we automatically redact such data (e.g. names, email addresses, IP addresses, and phone numbers are removed). Data is only transmitted if you expressly consent in the app (toggle). Storage: Firebase Cloud Storage, EU only. Retention: 90 days, after which log files are automatically deleted (see section 7.2). Support tickets are retained until resolution + 1 year (documentation obligation).
4.8 Data We Do NOT Collect
- No fitness or health data
- No precise GPS coordinates in your profile — when you use the GPS button on the Glow Map, your position is used once to resolve your city and discarded immediately. We only store your city name and the publicly known city center (details in § 4.11).
- No contact lists or phone books
- No biometric data
- No credit card or banking details (payments are processed via Apple App Store or Google Play Store; Stripe was fully deactivated as an in-app payment method in May 2026, only legacy data of older Stripe transactions is retained for record-keeping purposes — see §6.9). Subscription metadata such as transaction IDs, purchase status, and subscription tier are stored for managing your Spark status.
4.9 Data from Third-Party Sign-In (GDPR Art. 14)
When you sign in via Apple Sign-In or Google Sign-In, we receive certain data directly from Apple Inc. or Google LLC:
- Apple Sign-In: Apple ID, email (potentially as anonymized relay email), name (if shared)
- Google Sign-In: Google account ID, email, name, profile picture URL (if provided)
This is based on your consent with Apple/Google pursuant to Art. 14 GDPR. The privacy policies of Apple and Google apply additionally.
4.10 Spark Subscription Metadata (when Spark support is active)
If you choose Spark as voluntary support (see TOS § 9.6), we store the following subscription metadata in your profile to manage your Spark status:
- Activation status (active / inactive / grace period)
- Platform (Apple In-App Purchase / Google Play Billing; Stripe only for legacy transaction records, deactivated since May 2026)
- Activation timestamp and expiration date
- Purchase reference numbers from the app stores — Apple and Google assign a reference number for each purchase so we can match your contribution. It does not contain your name. The same applies to older payments made via Stripe.
- RevenueCat App User ID (= your Firebase Auth UID, see § 6.10)
- Selected contribution amount (so we can display it and analyse how contributions are distributed overall)
- Spark streak (consecutive months as a Spark, only for the subscription variant)
- Spark display settings (glow intensity, badge display — configurable by you)
What we do NOT store: Credit card numbers, IBAN, cardholder name, billing address — this data is processed exclusively by the respective payment provider (Apple / Google / Stripe) and we do not receive it.
Retention: Spark metadata is retained until account deletion. When you delete your account, your pseudonyms at RevenueCat are also deleted (see § 8.1).
4.11 Location Data from the Glow Map (optional)
When you use the "Detect my location" button in the Glow Map or search for your city manually, we store the following city-level data in your user profile to display you on the map and to compute city-level aggregations (e.g. number of active glowers per city):
- City name and country (e.g. "Berlin, Germany")
- Place ID (Google Place identifier of your city)
- City center coordinates — the publicly known geo-coordinates of the city itself, not your location within the city
- Source (entered via the GPS button or via manual search) and timestamp
What we do NOT store: Your own GPS coordinates. When you use the GPS button, your coordinates are transmitted once to our Cloud Function, sent to the Google Geocoding API (see § 6.7) to obtain the city name and city center, and discarded immediately afterwards. They are neither stored in your profile nor recorded in our logs.
Change history: We maintain a private audit-trail list of your city changes containing the same city-level data plus a timestamp. This history is visible only to you (right of access pursuant to GDPR Art. 15) and is fully deleted with your account.
Frequency limit: You may change your stored city at most once per 24 hours. This protects against abuse and requires no additional data collection.
Legal basis: Art. 6(1)(a) GDPR (consent). You may reset your location data at any time via the Glow Map or remove it completely via account deletion.
4.12 Anonymous Challenge Preview and Progress Transfer (Invitation Links)
When someone invites you via an invitation link (e.g. "I Challenge You"), you can try a challenge on our landing page before creating an account. To do so, we create – with your consent – a temporary, anonymous account that stores only your challenge progress. In this process we do not collect an email address, a name, or any contact details.
If you later create a regular account, you can transfer this progress into your account via a single-use, randomly generated transfer code. The code contains no personal data. Transferred data is then subject to regular account deletion (§ 8). An anonymous account contains no contact details; you can discard non-transferred progress at any time by simply not transferring it.
Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (pre-contractual measures). For additional information on anonymous events on the landing page, see our Cookie Policy (§ 5).
4.13 Glow Petition / Glow Drop (on our website, without an account)
On our website (lets-glow.de) you can optionally take part in a Glow Petition („Glow Drop") — without an account and without signing in. In doing so, we process only the place you freely choose or tap on the map (place name, country, approximate map coordinates of the place) and a counter („marks").
We collect no name, no email address, and no account data — participation is anonymous. Your IP address is processed only temporarily for spam/bot protection (Cloudflare Turnstile, see § 6.8) and abuse limiting, and is not stored permanently. The aggregated places are shown publicly on a map.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an anonymous, abuse-protected participation action). Since no personal identifiers are collected, later individual attribution or deletion is technically impossible; freely entered place names should therefore contain no personal information.
5. Purpose and Legal Basis of Processing
5.1 Performance of Contract (Art. 6(1)(b) GDPR)
| Purpose |
Data |
| Provision and operation of the app |
Account data, profile data |
| Challenge system (creation, completion, tracking) |
Challenges, scores, XP, streaks |
| Team features |
Team memberships |
| User profiles and community |
Posts, comments, display name, avatar |
| Account management (modification, export, deletion) |
All account-related data |
| Email communication (verification, critical actions) |
Email address |
5.2 Consent (Art. 6(1)(a) GDPR)
| Purpose |
Data |
| Firebase Analytics (app usage statistics) |
Usage data, device information |
| Firebase Performance Monitoring |
Performance metrics |
| Firebase Crashlytics (crash reports) |
Crash data, device information |
| Optional diagnostic data (app logs) when contacting support |
Anonymized app logs (PII removed before upload) |
You may withdraw your consent at any time by adjusting the corresponding settings in the app or by contacting us. A withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
5.3 Legitimate Interest (Art. 6(1)(f) GDPR)
| Purpose |
Data |
Interest |
| Security and abuse prevention |
Login data, IP address, audit logs |
Protection of platform and users |
| Content moderation (reports, blocking, banning) |
Reports, block lists, ban data |
Safe community, DSA compliance |
| Audit logging (admin and system actions) |
Admin audit logs, system audit logs |
Accountability, compliance |
| Bug fixes and app improvement |
Technical data, anonymized usage data |
Quality assurance |
Note on Firebase Crashlytics: Crashlytics is disabled by default and is only activated after your express consent in the opt-in screen. This is in accordance with § 25 TTDSG (consent before device access). You can withdraw your consent at any time in the app settings.
5.4 Legal Obligation (Art. 6(1)(c) GDPR)
| Purpose |
Data |
| Retention of audit logs (documentation obligation) |
Admin audit logs, system audit logs |
| Compliance with regulatory requests |
Data required by the specific request |
6. Processors and Third-Party Services
We use the following service providers who process personal data on our behalf:
6.1 Google / Firebase (Google Ireland Ltd.)
| Service |
Purpose |
Data |
| Firebase Authentication |
User login (Google/Apple Sign-In) |
Email, name, Auth UID |
| Cloud Firestore |
Database (user profiles, challenges, posts, etc.) |
All app data |
| Cloud Storage for Firebase |
Media storage (post images, challenge images) |
Image files |
| Firebase Analytics |
App usage statistics |
Anonymized usage data |
| Firebase Crashlytics |
Crash reports |
Crash data, device information |
| Firebase Performance Monitoring |
Loading time and performance analysis |
Performance metrics |
| Firebase Remote Config |
Feature flags and configuration |
Device ID (anonymized) |
| Firebase Cloud Functions (Gen2) |
Server-side logic |
Processing data |
| Firebase Hosting |
Serving web applications |
Access data |
| Firebase Cloud Messaging (FCM) |
Push notifications |
Device push token, notification payload |
| Firebase App Check |
Device verification and abuse prevention |
Device ID (IDFV/DeviceCheck on iOS, Play Integrity on Android) |
Storage Location: Region europe-west3 (Frankfurt, Germany) and europe-west1 (Belgium) – both EU
Legal Basis for Third-Country Transfer: EU-US Data Privacy Framework (DPF); Standard Contractual Clauses (SCC)
DPA: Google Cloud Data Processing Amendment
6.2 Email and SMS
| Service |
Purpose |
Data |
| Firebase Extension "Trigger Email from Firestore" (via ALL-INKL SMTP, German host) |
Transactional emails (verification, PIN codes, notifications) |
Email address, email content |
| Twilio Verify (Twilio Inc., via Firebase Phone Auth) |
SMS verification for phone sign-in |
Phone number, SMS verification code |
Note: Emails are sent via a German host (ALL-INKL). SMS verification runs via Twilio servers in the EU (Ireland).
Legal Basis for Third-Country Transfer (Twilio): EU-US Data Privacy Framework (DPF); Standard Contractual Clauses (SCC)
DPA: ALL-INKL.COM – Neue Medien Münnich (Data Processing Agreement for email delivery); Twilio Data Protection Addendum (for SMS service)
6.3 AI Service Providers (OpenAI, Anthropic, Google)
We use AI services from OpenAI (OpenAI, L.L.C.), Anthropic (Anthropic PBC), and Google (Google Ireland Ltd. / Google LLC) for content review/moderation, categorization, text generation, and image generation. We transmit no identification data to these services (no account name, no email address, no user ID). What is transmitted are the contents to be reviewed, classified or generated — today these include challenge texts, freely chosen usernames and display names, and submitted village ideas. Identification data such as an email address or a real name is not transmitted. Such content may contain personal data if you include it yourself; therefore, do not put sensitive data into freely chosen texts.
| Provider |
Purpose |
Data |
| OpenAI |
Content review/moderation (challenge texts, usernames), categorization, text generation |
Only contents to be reviewed/generated — no identification data (UID/email/name) |
| Anthropic (Claude) |
Content review, categorization |
Only contents to be reviewed/generated — no identification data |
| Google (Gemini, Imagen) |
Content review, image generation |
Only contents to be reviewed/generated — no identification data |
Note: We transmit no identification data (UID, email, account name) to these services; only contents to be reviewed/generated are sent.
Legal Basis for Third-Country Transfer: EU-US Data Privacy Framework (DPF); Standard Contractual Clauses (SCC)
DPA: Respective Data Processing Addendums of each provider
Contractual safeguards against training on user data:
- OpenAI: For generative calls (e.g. text generation) we use
store: false — the data is not used for training and is deleted after processing. For content moderation (checking challenge texts and usernames via OpenAI's moderation endpoint), the content is likewise not used for training the models; OpenAI's standard retention applies here (up to 30 days, exclusively for safety/abuse purposes).
- Anthropic: Default retention 30 days (Anthropic Enterprise Agreement) — exclusively for safety and abuse-prevention purposes.
- Google (Gemini, Imagen): API calls are not used for model training (Google Cloud Vertex AI Terms).
6.4 Apple (Apple Inc.)
| Service |
Purpose |
Data |
| Sign in with Apple |
Authentication |
Apple ID, email (optional relay), name |
| Apple In-App Purchase |
Payment processing for subscriptions and in-app purchases via the App Store |
Transaction ID, purchase receipt. Payment data (credit card etc.) is processed exclusively by Apple — we do not receive any payment data. |
Note: Apple may provide an anonymized relay email address. We only receive the data released by the user. For App Store purchases, we only receive a purchase confirmation — no credit card or banking details.
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Legal basis for third-country transfer: Apple Inc. (USA) is certified under the EU-US Data Privacy Framework (DPF).
6.5 Google (Google Ireland Ltd.)
| Service |
Purpose |
Data |
| Google Sign-In |
Authentication |
Google account, email, name |
| Google Play Billing |
Payment processing for subscriptions and in-app purchases via the Google Play Store |
Transaction ID, purchase confirmation (Purchase Token). Payment data is processed exclusively by Google — we do not receive any payment data. |
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Legal basis for third-country transfer: Google LLC (USA) is certified under the EU-US Data Privacy Framework (DPF).
6.6 Advertising
We may use advertising features, such as free use with advertising or offers from local partners. Whether advertising is delivered, and in what form, is controlled by us through server-side switches; we keep the status in force stated per version in our App Store and Google Play disclosures. Where advertising-related processing requires your consent under applicable law (e.g. use of an advertising identifier, personalized advertising), we obtain it separately in advance — on iOS via App Tracking Transparency, plus via our advertising provider's consent banner. Without that consent, no such processing takes place.
6.7 Google Maps Platform (Google Ireland Ltd.)
| Service |
Purpose |
Data |
| Google Maps SDK |
Map display in the community feature ("Glow Map") |
Map tiles, IP address (processed by Google) |
| Geocoding API (server-side) |
Converting coordinates to city names |
Coordinates (only when actively using the GPS button) |
Note: Google Maps is used exclusively for the optional community map feature. GPS coordinates are only collected when you actively use the location button. Google processes your IP address when loading map tiles. When the Geocoding API is used, our Cloud Function transmits your GPS coordinates once to Google, receives the city name and city center back, and discards your original coordinates afterwards in our backend — they are neither stored in your profile nor logged (see § 4.11).
Legal basis: Art. 6(1)(a) GDPR (consent) for the GPS collection; Art. 6(1)(b) GDPR (performance of contract) for the map display
Legal basis for third-country transfer: EU-US Data Privacy Framework (DPF)
6.8 Cloudflare (Cloudflare Inc.)
| Service |
Purpose |
Data |
| Cloudflare Turnstile |
Bot protection for web forms (e.g. support request, account deletion on lets-glow.de) |
Processing for verification only (no advertising cookies, minimal data); e.g. IP, device signals for risk assessment |
Note: Turnstile is used solely for abuse prevention. No personal data is used for advertising purposes.
Storage / Legal basis: Cloudflare (US/EU); EU-US Data Privacy Framework (DPF); purpose: legitimate interest (fraud/spam protection, Art. 6(1)(f) GDPR).
6.9 Stripe (Stripe, Inc.) — Transition Phase
| Service |
Purpose |
Data |
| Stripe Payments |
Payment processing during the transition phase before the Open Beta release. Being replaced by Apple In-App Purchase (iOS) and Google Play Billing (Android). |
Email address, payment information (credit card/SEPA — processed by Stripe, not stored by us), transaction data, IP address |
Note: In-app payments are processed via Apple In-App Purchase (iOS) and Google Play Billing (Android). We will only use other payment channels after informing you about them. Legacy records of older Stripe payments are retained for tax reasons (§ 147 AO — 10-year invoice retention obligation); this is why Stripe is still listed in this Privacy Policy.
Note: We do not store any credit card or bank details. Stripe processes this data as an independent payment service provider. We only receive confirmation of payment status and a customer ID.
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Legal basis for third-country transfer: EU-US Data Privacy Framework (DPF); Standard Contractual Clauses (SCC)
6.10 RevenueCat (RevenueCat, Inc.)
| Service |
Purpose |
Data |
| RevenueCat |
Management and validation of in-app purchases (Apple In-App Purchase, Google Play Billing) and subscription status |
Pseudonymous user ID (Firebase Auth UID), the purchase reference numbers from Apple and Google, purchase status (active/expired), app version, device platform (iOS/Android) |
Note: We use RevenueCat exclusively for managing in-app purchases via Apple App Store and Google Play Store. Purchases via our website (Stripe) are NOT transmitted to RevenueCat. RevenueCat does not receive any plain names, email addresses, credit card or bank details — only pseudonymous identifiers and transaction metadata.
Legal basis: Art. 6(1)(b) GDPR (contract performance)
Legal basis for third-country transfer: RevenueCat, Inc. (USA) — secured by Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR; if certified under the EU-US Data Privacy Framework (DPF), Art. 45 GDPR additionally applies.
DPA: RevenueCat Data Processing Addendum (DPA)
6.11 Tally (Tally BV) — Surveys
| Service |
Purpose |
Data |
| Tally |
Creation, distribution, and evaluation of voluntary surveys (e.g. tester feedback). The survey form is displayed via an embedded Tally widget or a Tally page. |
Your voluntary survey responses; technically via Tally: IP address, device/browser information to deliver the form |
Note: We use Tally exclusively for voluntary surveys. Participation is voluntary; if you enter nothing, no response data is transmitted. We do not transmit any plain names or account data from your profile to Tally; your responses are not linked to your account (responses are evaluated anonymously).
Provider: Tally BV, August Van Lokerenstraat 71, 9050 Ghent, Belgium (EU)
Legal basis: Art. 6(1)(a) GDPR (consent — through voluntary participation in the survey)
Legal basis for third-country transfer: Tally processes within the EU (Belgium). For any sub-processors located outside the EEA, Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR apply.
DPA: Tally Data Processing Agreement (DPA)
6.12 Google Safe Browsing (Google Ireland Ltd. / Google LLC)
| Service |
Purpose |
Data |
| Google Safe Browsing API (v4) |
Automated security check of links that users post in Glow Picks for malware and phishing |
The URL to be checked (no user identifiers) |
Note: Only the URL to be checked is transmitted — no user ID, email address, or other identification data. The check is „fail-closed": if the service is unavailable, the link is not released.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and protection against harmful links)
Legal Basis for Third-Country Transfer: EU-US Data Privacy Framework (DPF)
7. Data Storage and Retention Periods
7.1 Storage Location
All data is stored in the EU:
- Cloud Firestore: europe-west3 (Frankfurt, Germany)
- Cloud Storage: europe-west3 (Frankfurt, Germany)
- Cloud Functions: europe-west1 (Belgium, EU)
7.2 Retention Periods
| Data Category |
Retention Period |
| Account data |
Until account deletion |
| Profile data and user-generated content |
Until account deletion |
| Firebase Analytics |
14 months (Google default) |
| Firebase Crashlytics |
90 days (Google default) |
| Admin audit logs |
3 years (evidence for regulatory requests pursuant to § 24 BDSG), then anonymization by hash replacement of user IDs |
| System audit logs (consent records) |
Duration of membership + 3 years (evidence for Art. 7 GDPR) |
| Content reports |
Until reviewed + 1 year (verification obligation) |
| Ban history for a temporary ban |
Duration of the ban + 1 year (verification obligation), then complete deletion |
| Exclusion record for a permanent ban |
Retained indefinitely, but only in minimised form: a hashed identifier for recognition, the category of the reason, and the date. Necessary to enforce the re-registration ban under our Terms of Service § 14.5 (Art. 6(1)(f) GDPR). The associated content and history data are deleted after ban + 1 year, as with temporary bans. |
| Account deletion queue |
30 days grace period (standard) or immediate deletion (Immediate Mode with MFA confirmation) |
| Account deletion MFA PIN hash (SHA-256) |
max. 15 minutes (token TTL); automatic invalidation thereafter |
| Email delivery logs |
90 days |
| Uploaded diagnostic logs (support) |
90 days, then automatic deletion (GDPR Art. 5(1)(e)) |
| Device verification data (Device Trust) |
30 days after last verification |
| AI usage logs (model, tokens, cost; user ID pseudonymized) |
365 days (cost/abuse analysis), then automatic deletion |
8. Account Deletion and Data Export
8.1 Account Deletion (GDPR Art. 17)
You can delete your account at any time directly within the app or via our website at https://lets-glow.de/account-loeschen. This way, you always have the option to fully delete your account, even without the app.
Two deletion modes to choose from:
- Grace Mode (default, recommended): After your deletion request, you have 30 days to reverse the deletion. During this period your account is deactivated but recoverable.
- Immediate Mode (instant deletion): At your explicit request we waive the grace period and delete immediately. This option requires two additional security steps (see "MFA confirmation" below) and is not reversible.
MFA confirmation (email PIN, both modes): Before we initiate the deletion process, we send a one-time 6-digit security code to your registered email address. You enter this PIN in the app to confirm that the deletion request actually originates from you. Security parameters: token TTL 15 minutes, max. 5 entry attempts per token, rate limit of 3 PIN requests per 10 minutes. The PIN is stored exclusively as a SHA-256 hash (no plaintext) and automatically removed after confirmation or expiry. Legal basis: Art. 32 GDPR (security of processing) + Art. 6(1)(b) GDPR (contract performance as part of account lifecycle management).
The deletion process works as follows:
- Grace Period (default mode): After your deletion request, you have 30 days to reverse the deletion.
- Complete Deletion: After the grace period (or immediately in Immediate Mode), all your data will be irreversibly deleted:
Account data (Firebase Auth)
Profile data (Firestore)
Posts, comments, challenges
Uploaded media (Storage)
Team memberships and references
Support ticket messages and bug reports
Invitations you have sent (see § 4.4)
The technical completion of full deletion may take up to 90 days after the grace period (e.g., for removal from backups and cache systems). During this time, your data is no longer accessible.
3. Automated Cleanup: A scheduled cleanup process (scheduledPrivacyCleanup) ensures that expired deletion requests are fully executed.
Exceptions to Deletion:
- Audit logs are not deleted but anonymised — admin audit logs after 3 years, system audit logs after the end of your membership + 3 years (the periods are listed in § 7.2). Once anonymised, the entries no longer relate to you.
- Payment-related records (e.g. transaction data for Spark) are retained for 10 years, as required by German tax law (§ 147 AO); see § 6.9.
- Your display name remains permanently blocked after deletion so that nobody can take it over and impersonate you. The link to your account is removed in the process: only the character string itself remains, with no reference to you as a person.
- Exclusion record for a permanent ban — see § 7.2.
- Aggregated, anonymized statistics are retained.
8.2 Data Export (GDPR Art. 15 / Art. 20)
You can request an export of your stored data at any time within the app. The export includes:
- Account and profile data
- Posts and comments
- Challenges and scores
- Location history (city-level data) and block list
- Team memberships
The export is provided as a JSON file and is available for download for 7 days.
9. Content Moderation and Community Safety
9.1 Reporting
Users can report other users, posts, or challenges. The following data is processed:
- Reason for the report and details
- Type of reported content (user, post, challenge)
- Timestamp of the report
- Anonymized reporter ID (for internal tracking only)
9.2 Blocking
You can block other users. Block lists are stored in your user profile and are visible only to you.
9.3 Banning
If you violate the community guidelines, your account may be suspended by an administrator. The following information is stored:
- Reason and date of the ban
- Duration of the ban (temporary or permanent)
- Reviewing administrator (anonymized)
- Ban history
9.4 Complaint and Appeal Mechanism (DSA Art. 20)
If your account is suspended or your content is moderated, you have the right to appeal. Contact us at support@lets-glow.de.
10. Email Communication
We use emails for the following purposes:
- Transactional Emails: Account verification, PIN codes for critical actions, security notifications, confirmation emails for tester applications, account deletion confirmations
- System Notifications: Information about account changes, processing status of tester applications
- Internal Processing: When you submit a tester application, our team mailbox (
support@lets-glow.de) automatically receives a notification with the application data and your email address as Reply-To, so we can contact you directly. This internal email stays within the team and is not forwarded.
Emails are sent via a German host (ALL-INKL SMTP). We do not send marketing emails without your explicit consent.
11. AI Features (Artificial Intelligence)
11.1 Use of AI
Challenges on Let's Glow are created by the community or set up as personal/team challenges – not by AI. We use AI-powered features in a supporting role:
- Content Review: All challenges – whether community, personal, or team challenges – are automatically reviewed for community guideline compliance (first check before human review)
- Categorization: Automatic classification and tagging of challenges
- Text Generation: AI-assisted creation of descriptive texts and summaries
AI services from OpenAI, Anthropic, and Google are used for this purpose (see §6.3). In doing so we transmit no identification data (UID, email, account name) — only contents to be reviewed, classified or generated (today these include challenge texts, freely chosen usernames and display names, and submitted village ideas); scope and safeguards see § 6.3.
AI character Jojo: Within the app you will encounter the AI character Jojo. When you interact with Jojo, you are interacting with an automated system, not a real person (labelled pursuant to Art. 50 of the EU AI Act; see TOS § 8.3). Jojo's replies may be predefined (script-based) or AI-generated. Where contents are transmitted to external AI services in this context, § 6.3 applies.
11.2 Automated Decision-Making (Art. 22 GDPR)
The AI-assisted content review at Let's Glow is structured as follows:
- Temporary holds are not decisions: When our AI holds back content for human review, this does not constitute a decision within the meaning of Art. 22 GDPR, as no legal effect or comparable significant impact arises.
- Permanent measures only after human review: Content removals, account suspensions, and bans are issued exclusively after human review by our moderation team.
- Legal bases for AI processing:
- Art. 6(1)(f) GDPR (legitimate interest): Safe community, protection from illegal content, fraud prevention
- Art. 6(1)(b) GDPR (contract performance): Enforcement of Community Guidelines (part of the usage agreement)
- Your rights: You may at any time request human review, express your point of view, and appeal any moderation decision (see Community Guidelines Section 6).
12. Cookies and Tracking
12.1 Flutter App (iOS / Android)
The mobile app uses no cookies and performs no ad tracking (no linking of your data with third-party data for advertising, no sharing with data brokers, no advertising identifier). Optional reach/usage analytics is performed exclusively via Firebase Analytics as a first-party service and only with your consent (opt-in, disabled by default; see § 5.2). Google Tag Manager is not used in the mobile app.
12.2 Public Web Apps (lets-glow.de Landing + Marketing)
The public websites at lets-glow.de use Google Tag Manager (container ID GTM-W4ZKWGNJ, provider Google Ireland Ltd., see §6.1) to manage optional analytics and tag tools (e.g. Google Analytics 4, conversion tags). GTM and the tools loaded through it are activated exclusively after your explicit consent (Consent Mode v2). Without consent, analytics_storage, ad_storage, ad_user_data, and ad_personalization are disabled by default. You can withdraw your consent at any time via the cookie settings on the website. Details in our Cookie Policy.
Without consent – visits via our printed QR codes: Our flyers and stickers carry QR codes with short addresses (e.g. lets-glow.de/smile). When you open such an address, our server redirects you and only counts how often the address was opened on that day. Nothing is stored on or read from your device for this – no cookie, no script, no identifier. Whether a request comes from a browser or from an automated program (bot) is determined from technical information that your browser sends with every page request anyway; none of it is stored. Only counts are stored per address and day – how many requests came from browsers and how many from detected bots. As with every page request, access data (including your IP address and information about your browser and operating system) is recorded in the logs of our hosting provider (Google Cloud, see § 6.1); these logs are deleted automatically after 30 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring the reach of our printed materials).
13. Security Measures
We protect your data through technical and organizational measures (TOMs):
- Encryption: TLS 1.2+ for all connections, AES-256 for data at rest (Firebase standard)
- Access control: Role-based access management (Firebase Security Rules v5.0), two-factor authentication for admin access
- Abuse protection: Firebase App Check (DeviceCheck/Play Integrity), Cloudflare Turnstile on web forms
- Code security: CI/CD security gates, dependency audits before each deployment, regular penetration reviews
- Audit trails: All admin and system actions are logged in
systemAuditLogs
- Incident response: Documented plan for data breaches pursuant to Art. 33 GDPR (72-hour deadline)
14. Your Rights (Art. 15–21 GDPR)
You have the following rights regarding your personal data:
| Right |
Description |
Implementation |
| Access (Art. 15) |
You can find out at any time what data we store about you. |
Data export in the app or via email request |
| Rectification (Art. 16) |
You can have incorrect data corrected. |
Profile editing in the app or via email |
| Erasure (Art. 17) |
You can request the deletion of your data. |
Account deletion in the app (see Section 8.1) |
| Restriction (Art. 18) |
You can request the restriction of processing. |
Via email request |
| Data Portability (Art. 20) |
You can receive your data in a common format. |
Data export in the app (JSON) |
| Objection (Art. 21) |
You can object to processing based on legitimate interest. |
Via email to support@lets-glow.de |
For all requests, contact: support@lets-glow.de
We will process your request within 30 days (pursuant to GDPR Art. 12(3)).
15. Third-Country Transfers
Your data is predominantly processed and stored in the EU:
Processing in the EU:
- Google / Firebase: Firestore, Storage, Cloud Functions — region europe-west3 (Frankfurt) and europe-west1 (Belgium)
- Twilio: SMS verification via Twilio servers in the EU (Ireland) — only the phone number and a verification code are transmitted
- ALL-INKL: Email delivery via German host
Services based in the USA (safeguarded by DPF and/or SCC):
- AI services (OpenAI, Anthropic, Google): API calls for content review/moderation and generation — no identification data is transmitted, only contents to be reviewed/generated (see §6.3)
- Apple (Sign in with Apple, Apple In-App Purchase): Processing of authentication and purchase data in the USA — Apple is DPF-certified
- Google (Sign-In, Play Billing, Maps Platform): Processing partly in the USA — Google is DPF-certified
- Stripe: Payment processing — we do not store any credit card or banking details
- Cloudflare: Bot protection (Turnstile) for web forms
- Google / Firebase (partial): For certain platform services (e.g. push notifications, authentication), processing in the USA may occur
All named US providers are certified under the EU-US Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR are in place.
16. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy in the event of legal or technical changes. For material changes (e.g. new data categories, new processors, modified retention periods), we will notify you at least 30 days before they take effect via an in-app notification or via our consent system, which requests your express agreement. This gives you sufficient time to review the changes.
For minor editorial corrections or clarifications that do not materially affect your rights and obligations, we may adjust the Privacy Policy without separate notification — an update to the version identifier in the app suffices.
The current version is available at any time in the app under Settings > Privacy and on our website at https://lets-glow.de/datenschutz.
17. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR.
Competent supervisory authority:
Berlin Commissioner for Data Protection and Freedom of Information
(Berliner Beauftragte für Datenschutz und Informationsfreiheit)
Friedrichstraße 219, 10969 Berlin, Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de
18. Contact
If you have questions about this Privacy Policy or the processing of your data, please contact:
Johannes Reusch
Heinrich-Heine-Platz 9A
10179 Berlin, Germany
Email: support@lets-glow.de
Phone: +49 30 54858929
Website: www.lets-glow.de
Last updated: September 25, 2026 (Version 2.32)
Terms of Service for Let's Glow
Version 2.26 – Effective: September 25, 2026
Welcome to Let's Glow! These Terms of Service govern the use of our app and establish a fair framework for our community. Please read them carefully – we've made them as clear and accessible as possible. If you have any questions, you can reach us at any time.
At a Glance – What You Should Know
- Let's Glow is a community app for creative challenges and personal growth.
- You must be at least 18 years old to use the app.
- Your content belongs to you – you only grant us the rights we need to operate the app.
- We take moderation seriously: hate speech, violence, and illegal content are not tolerated. You have the right to appeal every decision.
- Paid features are optional – core functionality is free.
- You can delete your account at any time – even without the app, via our website.
- We'll notify you at least 30 days before any changes to these terms.
- Questions? support@lets-glow.de – we're here for you.
Our Mission
Small actions. Big impact.
Let's Glow is a space for small steps with big impact — a place where people meet each other first as humans and the good we can do for one another becomes visible. Challenges from the community and from friends motivate you to step outside your comfort zone — or to strengthen it. With small tasks for growth, togetherness, and sustainability, your everyday life becomes a game: playful, motivating, and without comparison.
Sustainability should feel good — without sacrifice, without perfection. Every step counts.
No pressure, no obligations. You always decide for yourself whether and how you participate.
Let's Glow together.
Fini & Jo
1. Scope and Contract Formation
1.1 What Is Let's Glow?
Let's Glow is a mobile app that inspires you to improve your well-being, try new things, and connect with like-minded people – through creative challenges, shared experiences, and a supportive community.
1.2 Provider
The provider responsible under § 5 DDG (German Digital Services Act) is:
Johannes Reusch
Heinrich-Heine-Platz 9A
10179 Berlin, Germany
Phone: +49 30 54858929
Email: support@lets-glow.de
Josefine Patzelt is an equal co-founder of Let's Glow but bears no independent legal responsibility or liability.
1.3 Contract Formation
By registering for or using the app, you agree to these Terms of Service. The contract comes into effect when you create your account. If you do not agree to these terms, please do not use the app.
1.4 Territory
The app is initially distributed in the Federal Republic of Germany (and, where applicable, other European Union member states). We do not apply unjustified geoblocking (Regulation (EU) 2018/302); users in the EU are not discriminated against on the basis of nationality, place of residence, or place of establishment.
1.5 Supplementary Documents
In addition to these Terms of Service, the following documents apply:
- Privacy Policy – How we handle your data
- Community Guidelines – Rules for respectful interaction
- Legal Notice (Impressum) – Mandatory information under § 5 DDG
These documents are accessible at all times within the app and on our website.
2. Minimum Age
You must currently be at least 18 years old to use Let's Glow. The only exception to this is supervised participation in the youngster pilot programme pursuant to Section 2a.
By registering, you confirm that you are at least 18 years old. If we discover that a minor has created an account, we will immediately suspend it and delete all associated data.
Note on Age Requirement: The minimum age of 18 is a voluntary safeguard we have established during the platform's launch phase. The content of Let's Glow is fundamentally suitable for younger audiences. We intend to lower the minimum age once our moderation systems, safety mechanisms, and community structures are sufficiently tested and mature to provide a safe environment for younger users as well.
Technical measures pursuant to § 24a JuSchG (German Youth Protection Act): Our measures to enforce the minimum age include: (1) Self-declaration of the minimum age upon registration (confirmation of being at least 18 years old; providing a date of birth is optional), (2) a server-side check of this self-declaration via the Guardian Check before app access, and (3) manual account suspension where there is reasonable suspicion of a user being underage. No further technical age verification (such as ID verification) currently takes place.
2a. Youngster Pilot Programme (supervised exception from age 13)
As a first step of the reduction announced above, we are carefully opening Let's Glow to younger people — initially in a closely supervised pilot programme. Participation by minors from the age of 13 is possible only if all of the following conditions are met:
- Personal invitation: Participation is only by express personal invitation within the Youngster Mode pilot programme. There is no open access for minors.
- Consent of the legal guardian (Art. 8 GDPR): Before use, the legal guardian (usually a parent) gives express, documented consent. Without this consent, participation is not possible.
- Revocable at any time: Consent can be withdrawn informally at any time; upon withdrawal, the minor's account is paused.
Special protection settings apply to participating minors (including no open discoverability, no disclosure of the precise location, no payment functions).
Technical enforcement: By way of derogation from the self-declaration under Section 2, access in the pilot programme is granted exclusively server-side, after the legal guardian has given documented consent — a mere self-declaration is not sufficient here.
The data collected, what the minor can and cannot do, and the guardian's rights are governed by the separate document "Consent to the Youngster Pilot Programme" (in plain language).
3. Registration and Account
3.1 Sign-Up
To use Let's Glow, you need to create an account. Registration is available through:
- Apple Sign-In,
- Google Sign-In, or
- Phone sign-in (SMS verification)
We exclusively use OAuth-based or phone-based authentication – you do not create a separate password with us.
3.2 Your Responsibilities
- Keep your account information current and truthful.
- Do not share your account with others.
- Report any suspicious activity on your account immediately to support@lets-glow.de.
3.3 One Account per Person
Registration is permitted only to natural persons. Only individual persons are admitted as users — no groups, families, partner-shared accounts, or shared accounts. Each person may only have one account. Creating multiple accounts may result in the suspension of all affected accounts. An account is non-transferable, non-sellable, and may not be lent to third parties — see § 5.2 (real-money trading prohibition) and § 14.5 (re-registration prohibition after suspension).
3.4 Display Name
Upon registration, you choose a display name visible within the community. The following rules apply:
- The display name must not contain an email or internet address.
- It must not infringe third-party rights (trademark, name, personality rights).
- It must not violate public morals (no insults, discrimination, sexual content).
- It must not give the impression that you are another person, authority, or institution (no impersonation).
- In case of violations, we reserve the right to change the display name or suspend the account.
4. Service Description
4.1 Free Features
Let's Glow offers free core features, including:
- Creating and completing challenges
- Participating in the community (posts, comments)
- Personal progress tracking (level, XP, karma, streak)
- Team features
4.2 Paid Features (Optional)
Let's Glow optionally offers paid enhancements. These may include:
- Subscriptions (weekly or monthly)
- In-app currency ("Stars") for additional features
- Ad-free usage — where advertising-funded usage is offered (see § 9.7)
The exact features, prices, and terms will be clearly displayed before each purchase. Details on subscriptions and in-app purchases can be found in Section 9.
4.3 Availability
We do our best to keep the app available around the clock but cannot guarantee uninterrupted availability. In particular, temporary limitations may occur due to:
- Scheduled maintenance (we will inform you in advance where possible)
- Technical disruptions or force majeure
- Updates and further development of the app
There is no right to continuous availability. We reserve the right to modify, add, or discontinue individual features, provided the core functionality of the app is maintained.
4.4 Hardware, Software, and Internet Connection
For proper use of the app, you are responsible for: compatible mobile device (current iOS/Android version), stable internet connection, sufficient device performance and storage. We do not assume liability for issues caused by outdated, unsuitable, or modified hardware/software, a rooted/jailbroken device, or unstable network connection.
4.5 Maintenance Windows
Maintenance work (server updates, security patches, database migrations) is necessary to preserve performance, security, and integrity. We announce scheduled maintenance windows — where possible — in advance in the app and/or on lets-glow.de. During maintenance, individual or all features may be temporarily unavailable. Challenges/game rounds that extend into a maintenance window are not automatically extended.
4.6 Data Corrections, Rollbacks, and Stats Resets
We reserve the right to reset, correct, or compensate individual user values (e.g., XP, Stars, streak, Spark tier, inventory items, challenge progress) or the entire game state in the following cases:
- Development and Pilot Phases: As long as Let's Glow or individual features are in active development, testing, or pilot phases — the respective phase is communicated in the app and/or on lets-glow.de —, full or partial rollbacks or content resets may occur for affected features.
- Technical Emergencies: In case of critical bugs, faulty server calculations, data inconsistencies, migration errors, or security incidents, we may correct affected user values to restore the integrity of the platform and ensure fair conditions for all.
- Manipulation Suspicion: Where there is reasonable suspicion of cheating, multi-accounting, or other violations under § 5.2, individual benefits earned (e.g., Karma, Stars, unlocked items) may be reset until the suspicion is cleared.
In case of stats resets for reasons attributable to us (e.g., a technical bug), we endeavor to provide reasonable compensation (e.g., credit for lost playtime, restoration of lost items from backup, pro-rata refund for paid features where applicable). However, there is no obligation to provide 1:1 restoration.
In case of resets due to user fault (violation of § 5.2), no claim to compensation exists.
5. Usage Rights and Obligations
5.1 Your Right to Use
Upon registration, you receive a personal, non-exclusive, worldwide, non-transferable, and revocable right to use the app in accordance with these Terms of Service.
5.2 Prohibited Activities (Misuse Prohibition)
The following activities are prohibited in particular:
- Reverse Engineering: Copying, modifying, decompiling, disassembling, or reverse-engineering the app or parts thereof (subject to mandatory statutory exceptions and open-source licenses of individual components).
- Illegal Use: Using the app for illegal purposes, to harm others, or to commit offenses.
- Manipulation and Cheating: Use of bots, scripts, cheat tools, mod software, or other mechanisms that interfere with the platform's operation or manipulate game results, streaks, Stars, or ratings.
- Unfair Play: Collusion with other users to manipulate results, leaderboards, ratings, or Stars distribution (e.g., coordinated up/down votes, coordinated reports, multi-account boosting).
- Security Bypass: Circumventing or manipulating security and verification mechanisms (Age-Gate, Device Check, Rate Limiting, App Check).
- DoS / Overload: Automated access (bots, scrapers, crawlers) or attempts to overload the service through excessive requests.
- False Information: Intentionally incorrect, misleading, inaccurate, or incomplete information during registration, profile, challenges, or Spark subscription.
- Multi-Accounting: Creating multiple accounts, using third-party accounts, transferring/selling your own account.
- Spam and Advertising: Sending unsolicited messages, advertising without express permission, chain messages; misuse of the Challenge-Idea function or direct messages for spam. This does not apply to content created as part of a partner challenge that we provide and that is labelled as advertising.
- Illegal Content and Behavior: Uploading or distributing illegal, insulting, violence-glorifying, discriminatory, youngster-endangering, or pornographic content; harassing, threatening, discriminating against other users; infringing third-party rights (copyright, personality, trademark).
- Impersonation: Pretending to be another person, brand, authority, or institution.
- Data Collection: Collecting, storing, or using personal data of other users without their express consent (particularly for commercial purposes).
- Real-Money Trading of Virtual Goods (RMT): Sale, purchase, or exchange of Stars, Spark benefits, inventory items, unlocked avatars/backgrounds, streak shields, or other virtual goods for real money or monetary-value services outside the channels provided by Let's Glow (purchase via the App Store or Google Play). Stars and other virtual goods have no monetary equivalent and may only be used within Let's Glow (see § 9.4).
- Account Trading: Sale, purchase, exchange, or "rental" of a user account. Accounts are non-transferable (see § 3.3).
Violations may result in temporary or permanent restriction of your account, reset of individual values (see § 4.6), plus legal action (see Section 7).
6. User-Generated Content
6.1 Your Content Belongs to You
You retain copyright and all rights to the content you create within the app (posts, challenges, images, texts). Your creative contributions remain your intellectual property.
Photos that you take with your camera or select from your photo library are compressed and stored on our servers. You are responsible for ensuring that you have the rights to uploaded photos and do not infringe the rights of third parties — in particular the right to one's own image. This means: Do not publish photos of other people without their consent.
6.2 License to Let's Glow
By publishing content in the app, you grant us a non-exclusive, worldwide, royalty-free, sublicensable, and transferable license to use, reproduce, distribute, publicly display, and modify your content for the purpose of operating the app. Specifically:
- Display and Distribution: Your content is displayed to other users in the app (including the right of making available to the public (§ 19a German Copyright Act)) and may be shown as previews in push notifications. This also includes adaptations during technical processing (§ 23 UrhG).
- Technical Processing: We store, compress, format, convert (e.g. to other image formats), and optimize your content for different devices. This includes the creation of preview images (thumbnails) and blurred versions.
- Sublicensing to Technical Service Providers: We may share your content with our data processors (e.g. cloud hosting, content delivery networks, AI-based content moderation) to the extent necessary for operating the app. A list of our service providers can be found in our Privacy Policy (Section 6).
- Development: We may use your content in aggregated or anonymized form for the ongoing development of the app.
No Marketing Without Consent: We do not use your content for advertising, press materials, or social media marketing without your express, separate consent. This does not affect the display of your content within the app, even where it was created as part of a partner challenge labelled as advertising.
Transferability: The license is transferable so that we can seamlessly continue operating the app in the event of a corporate restructuring or transfer. Your rights as the creator remain unaffected.
License Termination: This license ends when you delete your content or your account. Technical copies (e.g. in backup systems or caches) will be removed within 90 days of deletion. If other users have shared your content via the app's share feature to third-party apps (e.g. WhatsApp, Instagram) before deletion, we cannot ensure removal there — those copies are subject to the terms of the respective platform.
6.3 Your Responsibility
You are solely responsible for your content. Please ensure that:
- Your content does not infringe third-party rights (copyright, personal rights, trademark rights)
- Your content does not contain illegal, violence-glorifying, pornographic, or discriminatory elements
- You only share content that you are authorized to publish
We reserve the right to remove content that violates these conditions or our Community Guidelines.
External links (e.g. in Glow Picks): If you share external links (URLs) — for example in Glow Picks — you are responsible for ensuring that the linked content is lawful and violates neither third-party rights nor applicable law. We automatically check shared links for malware and phishing (see Privacy Policy § 6.12), but we do not adopt the linked third-party content as our own and assume no warranty for external sites. Linking to unlawful, youngster-endangering, or harmful content is prohibited and may lead to removal of the contribution and to measures under Section 7.
6.4 Public Highlights (Featured Posts, Spark Streak Milestones, Community Posts)
Certain game mechanics may cause your display name and/or contribution to become publicly visible within the app — e.g., featured posts, Spark streak milestones, top community contributions, weekly/monthly highlights, Glow Map city aggregations. Within the app community, this visibility is part of the contractual use; you can restrict it at any time via your visibility settings (see Privacy Policy § 4.2a — Community Visibility / Panic Mode).
Use of your display name, contribution, or screenshots outside the app (website, social media, press material, newsletter, App Store screenshots) only occurs with your express, separate consent. This consent is voluntary and revocable at any time for the future. For testers, the separate Tester Consent Form applies additionally (§ 3 — "Only with Separate, Explicit Permission").
6.5 Themed and Awareness-Day Challenges (Event Challenges)
From time to time, Let's Glow provides curated themed or awareness-day challenges (e.g. for awareness days such as Earth Day or comparable occasions). These "event challenges" invite you to create your own contribution.
- Same rights situation as for free contributions: Content you create as part of an event challenge is user-generated content within the meaning of this Section 6. The same rules, warranties, and license terms apply as for all other contributions (in particular § 6.1–§ 6.3 and the Community Guidelines). The thematic prompt by Let's Glow does not change the fact that you are responsible for your contribution and must hold the necessary rights.
- Your own content instead of third-party media: An event challenge is always to be understood as you contributing your own content (your own photos, your own text, your own thoughts). Even if a theme refers to a real person, a work, or an event, it is not to be understood as a request to upload third-party photos, copyrighted works, or images of third parties without the necessary rights (see § 6.3 and Community Guidelines § 3.2 "Authenticity").
- Platform role unchanged: Even for curated event challenges, Let's Glow remains a service provider (host provider) within the meaning of §§ 7 et seq. DDG and does not adopt user-generated event contributions as its own. The reporting and moderation rules (§ 7) apply unchanged.
6.6 Indemnification Against Third-Party Claims
If, through content you submit, you culpably infringe the rights of third parties (e.g. copyright, personality, trademark, or data protection rights) or other statutory provisions, you shall indemnify Let's Glow, to the extent permitted by law, against the legitimate third-party claims arising therefrom. This includes the reasonable costs of a necessary legal defense. This is conditional upon the claim being based on culpable conduct attributable to you; any contributory fault of Let's Glow (§ 254 BGB) will be taken into account. We will inform you of any claim without undue delay and — to the extent legally possible — give you the opportunity to comment. This indemnification does not affect your statutory consumer rights.
7. Content Moderation, Blocking, and Banning
7.1 Our Responsibility as a Platform
Under the Digital Services Act (DSA) and German law, we are required to remove illegal content and provide a safe platform. We take this responsibility seriously – for you and our entire community.
7.2 Reporting Content and Users
You can report content or users that violate our rules directly within the app. Every report is reviewed. Details on the reporting process can be found in our Community Guidelines.
7.2a DSA Art. 16 Notice-and-Action for Illegal Content
If you consider content to be illegal (not merely against our rules), you can submit a specific notice pursuant to DSA Art. 16. Please use our web form at https://lets-glow.de/report-illegal-content or send an email to safety@lets-glow.de with the following required information:
- URL / identification of the content in question (screenshot + user ID or post ID)
- Legal basis: Which law is being violated? (e.g. § 130 German Criminal Code (incitement of hatred), § 184b German Criminal Code (child sexual abuse material), German Copyright Act)
- Explanation of the facts
- Contact details (name + email for follow-up; for copyright infringement additionally proof of ownership)
- Good faith: Confirmation that your information is correct to the best of your knowledge
We will process notices without undue delay and inform you of the outcome pursuant to DSA Art. 16(5).
7.3 Blocking
You can block other users. Blocked users can no longer see your profile or content and cannot contact you. Blocking can be reversed at any time.
7.4 Banning (Account Suspension)
In case of violations of these Terms of Service or the Community Guidelines, we may restrict your account:
- Warning: For minor or first-time violations
- Temporary suspension (7, 30, or 90 days): For repeated or serious violations
- Permanent suspension: For particularly severe violations (e.g., hate speech, abuse imagery, threats of violence)
Before any suspension, we will inform you of the reason and duration.
7.5 Automated Content Review
We employ technical measures (content filtering) to identify potentially rule-violating content early. Flagged content is reviewed by our team before any action is taken.
7.6 Right of Appeal (DSA Art. 20)
You have the right to appeal any moderation decision:
- Deadline: Within 6 months of the decision
- Contact: Send your appeal to support@lets-glow.de, including your username and a statement of reasons
- Processing: We will review your appeal within 14 business days and inform you of the outcome
In case of disagreement, you may refer the matter to a DSA-certified out-of-court dispute resolution body.
7.7 Appeal Regarding Community Decisions (Stars, Rule Violations)
If Stars or other benefits are reduced or forfeited as a result of a community decision (e.g. reports of rule violations in challenges), you have the right to appeal. Details of the process (deadline, contact, procedure) are set out in the app and in the Community Guidelines. We will review your appeal and inform you of the outcome.
7.8 Communication Principles (Direct Messages, Comments, Forum)
Within the app, various communication functions are available (direct messages, comments on posts, Spark forum, "Think-of-You" actions). When using these functions, you agree to exchange only content that:
- Is free of obvious or disguised advertising (no commercial promotion of third parties without our permission). This does not apply to content created as part of a partner challenge that we provide and that is labelled as advertising.
- Is not factually incorrect, intentionally untrue, defamatory, degrading, slanderous, morally offensive, or pornographic and does not constitute a criminal offense
- Does not infringe third-party rights (copyright, personal rights, trademark)
- Contains no viruses, malware, or third-party executable code
- Is not a survey or chain message intended for mass distribution
- Is not solely for political, ideological, or religious advertising
- Does not serve to collect, store, or use personal data of other users without their express consent (particularly for commercial purposes)
- Does not falsely create the impression of being officially provided, supported, or endorsed by Let's Glow (no impersonation of Let's Glow, Jojo, Lumi, or official system messages/accounts)
For communication with or about minors, the strict Community Guidelines rules on child and youth protection additionally apply (grooming prohibition, CSAM zero-tolerance, escalation to BKA/NCMEC).
8. AI Features (Artificial Intelligence)
8.1 Use of AI
Challenges on Let's Glow are created by the community and completed by other users – you can also create personal challenges for yourself or your team. We use artificial intelligence in a supporting role in the following areas:
- Content Review: All challenges – whether community, personal, or team challenges – are automatically reviewed by AI for compliance with our rules. For potentially problematic content, an additional human review follows.
- Categorization: Automatic classification and tagging of challenges and content
- Text Generation: AI-assisted creation of descriptive texts and summaries
8.2 Third-Party Provider
For AI features, we use service providers such as OpenAI, Anthropic (Claude), and Google (Gemini, Imagen) as data processors. We transmit no identification data to them (no account name, no email address, no user ID); what is transmitted are the contents to be reviewed, classified or generated — today these include challenge texts, freely chosen usernames and display names, and submitted village ideas. Such content may contain personal data if you include it yourself. Details on the data processed and the safeguards in place can be found in our Privacy Policy (Sections 6.3 and 11).
8.3 AI Characters in the App (EU AI Act Art. 50)
Jojo is the mascot and friendly voice of the LetsGlow team. What Jojo says and posts comes primarily from the people behind LetsGlow — sometimes with the help of AI tools (e.g. to draft or phrase texts more clearly). Jojo is therefore not a standalone AI system you chat with, but a character shaped by the team.
Where content is actually created or linguistically adjusted with the help of AI — such as individual posts by Jojo in the community feed or the rewording of submitted challenges (for clearer, more inclusive and gender-fair wording) — we label it accordingly.
Should we offer a feature in the future where you write directly with an AI, we will clearly inform you before use that you are interacting with an automated system (Article 50 of the EU AI Act, Regulation (EU) 2024/1689).
8.4 Ongoing Development
We are continuously working on additional AI features to provide you with a better experience. New AI features will be transparently explained to you before use.
9. Paid Services and Subscriptions
9.1 Payment Processing (IAP and Stripe)
Purchases of digital content within the app (Spark subscriptions and Spark one-time purchases; in the future also Stars purchases) are processed on iOS via Apple In-App Purchase and on Android via Google Play Billing. The terms of the respective store apply.
In-app payments are processed via Apple In-App Purchase (iOS) and Google Play Billing (Android). We will only use other payment channels after informing you about them. Legacy records of older Stripe payments are retained for tax reasons (§ 147 AO — German Fiscal Code).
You can restore previous purchases at any time on another device (Restore Purchase), as long as you are signed in with the same store account (for IAP purchases).
9.2 Prices and Transparency
All prices are displayed as total prices before purchase. Pursuant to § 19 UStG (German Small Business Regulation), no VAT is charged. There are no hidden costs.
Order process (§ 312j BGB / German button solution): For paid purchases on our website (lets-glow.de), you will be shown an order summary with all relevant information before the contract is concluded. The purchase button is labelled "Jetzt kostenpflichtig kaufen" (order with an obligation to pay) or an equivalent unambiguous wording. For in-app purchases via Apple App Store or Google Play, the order processes of the respective platform apply.
9.3 Subscriptions
- Subscriptions automatically renew for the selected period unless you cancel before the end of the current term.
- Cancellation is done through your app store settings:
- Apple: Settings → [Your Name] → Subscriptions → Let's Glow → Cancel Subscription
- Google Play: Manage Subscriptions → Let's Glow → Cancel
- Other payment channels: We will only use other payment channels after informing you about them (see § 9.1); we will then state the corresponding cancellation path here and in the app. Questions regarding older Stripe payments: support@lets-glow.de.
- Pursuant to § 312k BGB (German Civil Code), you can easily cancel your subscription at any time in the app (two-click cancellation).
- Already paid periods will not be refunded on a pro-rata basis.
9.4 In-Game Currency ("Stars")
Stars are a purely in-game currency for Let's Glow internal features. Note: The Stars system is currently under development. Purchase and usage functions are being rolled out gradually; current version and availability are shown in the app settings.
- Usage area: Stars are primarily used in the optional "Extended Mode" — a game mechanic for extending weekly play rounds. Additional usage areas may be added in future versions.
- Acquisition: Stars can be purchased via Apple In-App Purchase (iOS) or Google Play Billing (Android) (see § 9.1). Which purchase and spending functions are enabled is shown in the app.
- Stars have no monetary equivalent and cannot be cashed out, transferred, sold to third parties, exchanged, or redeemed at third parties. Real-money trading in Stars or other virtual goods is prohibited pursuant to § 5.2.
- Ownership: All rights to Stars and other virtual goods (items, unlocked avatars/backgrounds/worlds, streak shields, Spark benefits, glow effects) belong exclusively to Let's Glow. You receive only a non-exclusive, time-limited usage right for the duration of your usage contract — no ownership. Upon account deletion, platform discontinuation, or rollbacks/stats resets pursuant to § 4.6, the usage right expires.
- Stars are not electronic money within the meaning of applicable law and do not fall under the MiCA Regulation (Regulation (EU) 2023/1114), as they can only be used within a closed network (Let's Glow).
- Unused Stars expire upon account deletion.
9.5 Provider Offers
Let's Glow may display offers from partner companies (Provider Goodies, local challenges) in the app. This is a purely marketing/advertising platform function:
- Partner offers are presented to users at no charge by Let's Glow.
- Stars are not required for provider offers, unless stated otherwise for the respective offer — offers are freely accessible to all visible users.
- Redemption (e.g. a cinema visit or restaurant discount) occurs directly with the partner under their terms and prices; Let's Glow is not a party to that redemption.
- The respective partner is solely responsible for the validity, quality, and availability of their offer.
- Let's Glow acts exclusively as an intermediary or advertising platform — no own service offering, no payment processing, no MiCA/e-money-relevant service.
9.6 Spark – Voluntary Support
Let's Glow is a passion project. With "Spark", you can voluntarily support us – not a mandatory subscription, but a contribution to the ongoing development of the app. Spark is the only paid offering currently available in Let's Glow.
Two Spark Variants to Choose From
- Spark Subscription (monthly): Recurring, auto-renews until canceled. Five contribution tiers: EUR 1.99, 2.99, 4.99, 9.99, or 14.99 per month.
- Spark One-Time (28 Days / approx. 4 Weeks): Single purchase, automatically ends after at least 28 days without renewal. Same five tiers as the subscription: EUR 1.99, 2.99, 4.99, 9.99, or 14.99 one-time for 28 days.
Benefits
All Sparks receive the same benefits regardless of contribution amount and regardless of variant (subscription or one-time purchase):
- Visual recognition: Spark glow on your avatar and/or Spark badge. You can configure visibility, intensity, and display style yourself in the app settings — including "do not display publicly".
- Exclusive cosmetic items: Avatar frames, backgrounds, and visual elements available only to Sparks.
- Spark Area access: A protected in-app area for active Sparks only.
- Spark Forum: Access to a dedicated forum for exchange, discussion, and feedback among Sparks and with the Let's Glow team.
- Voice in development: Sparks may submit suggestions and ideas for app and feature development, participate in surveys, and are informed early about upcoming features. The final decision on concept, roadmap, content, and features always rests exclusively with Let's Glow (provider, see § 1.2). Spark grants no co-decision or veto rights.
- Spark Streak and Milestones (subscription variant only): Consecutive months as a subscription Spark are counted. At certain milestones (e.g. 3, 6, 12, 24 months), you receive purely cosmetic rewards (e.g. exclusive avatar frames, backgrounds). These rewards have no monetary value.
No gameplay advantages: Spark grants no gameplay advantages over free users — no extra XP, Stars, premium challenges, special drops, priority support, or accelerated game mechanics.
Payment Processing
Spark is processed depending on the platform:
- On iOS via Apple In-App Purchase
- On Android via Google Play Billing
The terms of the respective store apply (Apple, Google; see § 9.1). Pursuant to § 19 UStG (German Small Business Regulation), no VAT is charged.
Cancellation of Spark Subscription
- Possible at any time at the end of the current billing period
- Via the respective store settings (Apple App Store / Google Play, see § 9.3)
- After cancellation, your Spark benefits remain active until the end of the paid period
Spark One-Time (28 Days / approx. 4 Weeks)
This variant is structured as a digital consumable:
- Access begins upon purchase confirmation
- Ends automatically after at least 28 days without further action on your part. Termination occurs on the day following expiry at 03:00 CET/CEST (Berlin time) via a daily cleanup process. Effective duration is therefore between 28 and 29 days, depending on the time of day of your purchase — you will never receive less than 28 days.
- No cancellation is required; no automatic renewal
- You can purchase another one-time Spark or subscribe at any time
Right of Withdrawal
The statutory 14-day right of withdrawal applies (§ 312 BGB, see § 10), unless you expressly request immediate execution and thereby lose your right of withdrawal pursuant to § 356 (5) BGB. For the Spark One-Time (4 Weeks) variant, the right of withdrawal applies analogously for digital content.
Not Electronic Money
Spark is a service subscription (monthly) or a one-time digital content (4 weeks); no credit balance is created and there is no entitlement to a payout. Spark does not fall under ZAG/MiCA regulation.
Right to Modify
We reserve the right to adjust the available contribution tiers, benefits, milestones, and variants. Material changes will be communicated in accordance with Section 15 of these Terms of Service.
9.6a Chargeback and Reversal Fees
Should chargeback or reversal fees arise due to your fault during a payment (for example an unjustified chargeback or a payment recall without a valid right of withdrawal), we pass on the resulting costs to you. For processing payment reversals, we charge the actual return-direct-debit fees of the respective bank / payment service provider. For in-app purchases via Apple App Store or Google Play, the refund rules of the respective store additionally apply; Apple and Google may sanction abusive refund requests on their part.
In case of justified withdrawal or statutory refund claims (e.g., service not provided, defect liability), no chargeback fees are incurred by you.
9.7 Advertising-Funded Usage
Let's Glow may offer free usage with advertising as an alternative to paid usage. Whether advertising is delivered, and in what form, is controlled by us through server-side switches; the status in force at any given time is stated in our App Store and Google Play disclosures. Before advertising goes live, we will inform you and — where legally required — obtain your consent separately. Further information on data processing in connection with advertising can be found in our Privacy Policy (§ 6.6).
10. Right of Withdrawal
10.1 Statutory Right of Withdrawal
As a consumer, you have the right to withdraw from any contract for paid services within 14 days without giving any reason. The withdrawal period begins on the day the contract is concluded.
10.2 Exercising Withdrawal
Send a clear declaration to:
Johannes Reusch
Heinrich-Heine-Platz 9A
10179 Berlin, Germany
Email: support@lets-glow.de
10.3 Early Expiration
The right of withdrawal expires prematurely if we have begun performance of the contract after you:
- Expressly agreed that we may begin performance before the expiration of the withdrawal period, and
- Confirmed that you thereby lose your right of withdrawal.
When purchasing through an app store, the withdrawal rules of the respective store additionally apply.
10.4 Detailed Withdrawal Instructions
The complete withdrawal instructions, including a model withdrawal form, can be found in our separate "Withdrawal Policy" document.
11. Account Deletion
11.1 Your Right to Deletion
You can delete your account at any time and without giving any reason – directly in the app under Settings or via our website at https://lets-glow.de/account-loeschen. This way, you always have the option to fully delete your account, even without the app. Your right to deletion under GDPR Art. 17 remains unaffected.
Two deletion modes to choose from:
- Grace Mode (default): 30-day grace period during which deletion remains reversible (see § 11.2).
- Immediate Mode (instant deletion): At your explicit request you waive the grace period. This option is not reversible and requires an additional confirmation via email PIN (security MFA).
Email PIN MFA confirmation: Before the deletion process, we send a 6-digit security code to your registered email address, which you enter in the app. Details on data processing (15 min retention as SHA-256 hash, rate limit) see Privacy Policy § 7.2 + § 8.1.
11.2 What Happens Upon Deletion?
- 30-Day Grace Period: After your deletion request, you have 30 days to reverse the deletion. During this time, your account is deactivated but not deleted.
- After 30 Days: All your personal data will be irrevocably deleted, including profile data, posts, challenges, team memberships, and uploaded media (photos) in cloud storage. Technical copies in backup systems and caches will be removed within 90 days.
- Exceptions: Statutory retention obligations (e.g. payment and invoice records for 10 years (§ 147 German Fiscal Code)) remain unaffected. If other users have shared your content via the share feature to third-party apps before deletion, we cannot ensure removal there (see Section 6.2).
11.3 Data Export
Before deletion, you have the option to export your data via the app (GDPR Art. 15 and Art. 20). The export includes all personal data we have stored about you.
12. Intellectual Property
12.1 Rights of Let's Glow
The app, including its design, code, the "Let's Glow" brand, graphics, texts, and all other content (insofar as not user-generated), is protected by copyright and owned by us. Any unauthorized use is prohibited.
12.2 Your Rights
Your user-generated content belongs to you (see Section 6). Use of the app does not grant you ownership of any part of the app software or the Let's Glow brand.
13. Liability
13.1 Liability of Let's Glow
We are liable without limitation for damages we have caused intentionally or through gross negligence. For injury to life, body, or health, we are also liable in cases of ordinary negligence — provided the breach of duty is attributable to us. In cases of slightly negligent breach of material contractual obligations (cardinal obligations), our liability is limited to foreseeable, contract-typical damages. Otherwise, liability is excluded to the extent permitted by law. Liability under product liability law and for fraudulently concealed defects remains unaffected. Any contributory negligence on the part of the user (§ 254 BGB) shall be taken into account — in particular if the user disregards safety guidelines or undertakes obviously unsuitable actions.
13.2 User-Generated Content
We assume no liability for content created or shared by users. Responsibility lies with the respective creators.
13.3 Third-Party Services
Let's Glow uses third-party services (e.g., Firebase, OpenAI, Anthropic, Google, Apple, RevenueCat, Stripe, Cloudflare, ALL-INKL, Twilio). For disruptions, outages, or data loss caused exclusively by these third parties, we are only liable within the limits set out in § 13.1. For the content of externally linked sites, the respective providers are solely responsible.
13.3a Input, Transmission, and Evaluation Errors
For errors caused by input, transmission, or evaluation disruptions outside our sphere of influence (e.g., internet outages, browser bugs, third-party failures, app-store receipt delays, OS notification drops), we assume no liability. We expressly reserve the right to retrospectively correct obvious display errors (e.g., incorrect leaderboard entries, duplicate reward credits, incorrect streak displays).
13.3b Account Misuse / Compromise
We are not liable for damages caused by misuse of your account by you or third parties — particularly in case of violation of the duty of care to keep access credentials confidential (see § 3.2) or transfer of the account to third parties (see § 3.3).
13.4 Nature of the Service
Let's Glow is a platform for short, everyday impulses and suggestions — such as "Buy someone flowers", "Write a letter to an old friend", or "Try a new recipe." Let's Glow does not provide personal advice, coaching, therapy, medical recommendations, or AI-driven life counseling. There is no ongoing advisory or supervisory relationship between Let's Glow and its users.
13.5 Challenges, Impulses and Personal Responsibility
Challenges are predominantly created by users and the community. We review content through automated and manual moderation for obvious violations, but cannot guarantee that every piece of content is safe in every individual context.
Your own judgment is the decisive safety mechanism. You alone decide whether and how you take on a challenge. This decision lies exclusively with you. In particular:
- Challenges are suggestions — not instructions, not directives, not orders. There is no obligation whatsoever to carry out a challenge.
- If you consider a challenge to be dangerous, a health concern, illegal, or unsuitable for you, do not carry it out.
- You bear full responsibility for whether you follow a suggestion and how you carry it out — regardless of whether the content was created by Let's Glow, the community, or an AI.
- Please review the Safety Checklist and the Personal Responsibility Notice.
There is no advisory or supervisory relationship between a short everyday impulse and the manner in which a user carries it out. Liability of Let's Glow is excluded for damages arising from a user following content that they should have recognized as obviously dangerous, illegal, or harmful to health by exercising ordinary care, to the extent that no fault on our part is involved. Our statutory liability under § 13.1 remains unaffected.
14. Termination
14.1 Termination by You
You may terminate the usage contract at any time and without giving any reason by deleting your account (see Section 11).
14.2 Termination by Us
We may terminate the usage contract ordinarily with a notice period of two weeks to the end of the month.
We may terminate the usage contract extraordinarily for good cause without observing a notice period, particularly in the following cases:
a) Impairment of Gaming Experience: Behavior that significantly impairs the gaming experience of other users (harassment, discrimination, trolling)
b) Cheats / Manipulation: Use of cheats, mods, hacks, bots, scripts, or other software that manipulates game flow, Stars, streaks, or rewards
c) Account Sharing: Third parties play on your account or you play on someone else's account
d) Multi-Accounting: You use multiple accounts on the platform (violation of § 3.3)
e) Real-Money Trading of Virtual Goods: Sale, purchase, or exchange of Stars, Spark benefits, items, or other virtual goods for real money outside the channels provided (violation of § 5.2)
f) Account Trading: Sale, purchase, or unauthorized exchange of an account (violation of § 3.3)
g) Statutory Violation: Culpable violation of legal regulations protecting others, minors, or Let's Glow
h) Intentional ToS Violation: Intentional or grossly negligent violation of these Terms of Service, the Community Guidelines, or supplementary terms
i) False Registration Information: Knowingly false information (e.g., age, identity, country of residence)
j) Platform License Loss: Loss of our operating rights (e.g., regulatory order, license revocation by Apple/Google) — in this case, all user accounts are affected
Before ordinary or extraordinary termination, we will inform you of the reason. You have the right to appeal (see Section 7.6). The right to immediate account suspension without warning for Zero-Tolerance violations (CSAM, threats of violence, terrorism — see Community Guidelines § 3.1) remains unaffected; for these cases, the duty of prior reprimand does not apply.
14.3 Defect-Reporting Period (Notice of Defects / Complaint)
For issues related to use of the app (e.g., incorrect reward, unscored challenge, unconfirmed in-app purchase, Spark billing question, Stars discrepancy), please report them within 90 days of the respective event to support@lets-glow.de. For data protection reasons, we delete diagnostic logs and usage data within 90 days at the latest (see Privacy Policy § 7.2), so later complaints can only be partially traced. Statutory warranty and limitation periods — particularly the two-year limitation period under § 438 BGB for purchased digital content and your rights under § 327 ff. BGB — remain unaffected.
14.4 Inactivity Termination
We reserve the right to terminate and delete accounts after prolonged inactivity (typically 24 months since last login) by ordinary termination. Before deletion, we will inform you in due time by email at the registered address (where current and deliverable). In case of account deletion, the rules of § 11 (Account Deletion) and Privacy Policy § 8.1 apply.
14.5 Consequences of Suspension — Re-Registration Prohibition
If your account has been permanently suspended or terminated due to a violation of these Terms of Service, the Community Guidelines, or applicable law, re-registration with Let's Glow without our prior express consent is prohibited. This applies regardless of whether you attempt to register with a different email address, phone number, different Apple/Google account, or under a different display name. Violations of the re-registration prohibition result in immediate renewed suspension and, where applicable, claims for damages due to repeated breach of contract.
In case of temporary suspension (7 / 30 / 90 days per § 7.4), the suspension ends automatically after expiry of the respective period; re-registration is then possible without separate consent.
In case of doubt — e.g., if you consider a suspension unjustified — contact us at safety@lets-glow.de with your appeal (see § 7.6).
15. Changes to the Terms of Service
15.1 Right to Amend
We reserve the right to amend, supplement, or modify these Terms of Service at any time – in particular where required or appropriate due to changes in law, new or modified features (e.g. introduction or modification of subscription models such as Spark, payment methods, benefits, or pricing tiers), technical developments, changed business processes, or to improve the user experience.
15.2 Notification
We will inform you of material changes at least 30 days before they take effect – via in-app notification or through our consent system, which requests your explicit agreement. This gives you plenty of time to review the changes. Minor editorial corrections or clarifications that do not materially affect your rights and obligations may be made without separate notification.
15.3 Entry into Force of Amendments
For material changes that substantially alter your rights or obligations (e.g. new data processing, new payment obligations, changes to license rights), we will obtain your express consent via our consent system. Without such consent, the relevant amended provisions do not apply to you.
For minor clarifications or editorial adjustments (e.g. correction of typos, updating legal references) that do not change your rights and obligations, continued use after a 30-day notice period constitutes acceptance.
You may object to the continued application of amended terms — in that case, your account will remain subject to the previous terms or you may delete your account.
16. Governing Law and Jurisdiction
16.1 Governing Law
German law applies, excluding the UN Convention on Contracts for the International Sale of Goods (CISG).
16.2 Jurisdiction
The place of jurisdiction is Berlin, to the extent permitted by law.
16.3 Online Dispute Resolution
The European Commission provides an online dispute resolution (ODR) platform: https://ec.europa.eu/consumers/odr. Our email address: support@lets-glow.de. We are neither obligated nor willing to participate in dispute resolution proceedings before a consumer arbitration board.
17. Severability Clause
Should any provision of these Terms of Service be or become invalid, the validity of the remaining provisions shall not be affected. The invalid provision shall be replaced by a valid provision that most closely reflects the economic purpose of the invalid provision.
18. Special Provisions for App Store Distribution (Apple End-User License Agreement / Custom EULA)
If you downloaded Let's Glow from the Apple App Store or Google Play Store, the following additional provisions apply. In case of conflict with other sections, these provisions shall prevail. This section also serves as our Custom End-User License Agreement (EULA) under the Apple Developer Program License Agreement, Schedule 1, Exhibit B, and is registered with Apple as our Custom EULA. It satisfies the minimum EULA requirements set out by Apple.
18.1 Contractual Partner and Acknowledgement
Your license agreement regarding Let's Glow (hereinafter the "Licensed Application") is concluded exclusively between you and Johannes Reusch (Provider, see § 1.2 of these Terms), not with Apple Inc. We are solely responsible for the Licensed Application, its content, maintenance, support, and all claims arising from its use.
These Terms of Service may not provide for usage rules for the Licensed Application that conflict with the Apple Media Services Terms and Conditions. You acknowledge that you have had the opportunity to review those Apple terms.
18.2 Scope of License
We grant you a non-transferable license to use the Licensed Application on any Apple-branded products that you own or control, as permitted by the Usage Rules of the Apple Media Services Terms and Conditions. The Licensed Application may also be accessed, acquired and used by other accounts associated with the purchaser via Family Sharing, volume purchasing or Legacy Contacts.
You may not distribute or make the Licensed Application available over a network where it could be used by multiple devices simultaneously (except as permitted by the Apple Usage Rules). You may not transfer, redistribute, or sublicense the Licensed Application; if you sell your Apple device to a third party, you must remove the Licensed Application from the device beforehand.
You may not — except to the extent permitted by mandatory law and open-source licenses applicable to specific components — copy, decompile, disassemble, reverse-engineer, attempt to derive the source code of, modify, or create derivative works of the Licensed Application.
18.3 Maintenance and Support
We are solely responsible for providing all maintenance and support services in respect of the Licensed Application, as specified in these Terms or as required under applicable law. You acknowledge that Apple has no obligation whatsoever to furnish any maintenance and support services with respect to the Licensed Application.
18.4 Warranty
We are solely responsible for any product warranties, whether express or implied by law, to the extent not effectively disclaimed. In the event of any failure of the Licensed Application to conform to any applicable warranty, you may notify Apple, and Apple will refund the purchase price for the Licensed Application to you. To the maximum extent permitted by applicable law, Apple will have no other warranty obligation whatsoever with respect to the Licensed Application, and any other claims, losses, liabilities, damages, costs, or expenses attributable to any failure to conform to any warranty will be our sole responsibility.
18.5 Product Claims
You acknowledge that we, not Apple, are responsible for addressing any claims by you or any third party relating to the Licensed Application or your possession and/or use of that Licensed Application, including, but not limited to:
- product liability claims;
- any claim that the Licensed Application fails to conform to any applicable legal or regulatory requirement;
- claims arising under consumer protection, privacy, or similar legislation, including those in connection with use of the HealthKit and HomeKit frameworks (where applicable — Let's Glow currently does not use HealthKit or HomeKit).
These Terms do not limit our liability to you beyond what is permitted by applicable law (see in particular § 13).
18.6 Intellectual Property Rights
You acknowledge that, in the event of any third-party claim that the Licensed Application or your possession and use of that Licensed Application infringes that third party's intellectual property rights, we — not Apple — will be solely responsible for the investigation, defense, settlement, and discharge of any such intellectual property infringement claim.
18.7 Legal Compliance
You represent and warrant that:
- you are not located in a country that is subject to a U.S. Government embargo, or that has been designated by the U.S. Government as a "terrorist supporting" country; and
- you are not listed on any U.S. Government list of prohibited or restricted parties (in particular the Specially Designated Nationals List, Denied Persons List, Entity List).
You agree to comply with all applicable export-control laws and sanctions regulations — of the United States, the European Union, and the Federal Republic of Germany — when using the Licensed Application. In particular, the Licensed Application may not be used for the development, design, manufacture, or production of nuclear, missile, chemical, or biological weapons.
18.8 Developer Name and Address
The Provider and contractual partner for any questions, complaints, or claims with respect to the Licensed Application is:
Johannes Reusch
Heinrich-Heine-Platz 9A
10179 Berlin, Germany
Phone: +49 30 54858929
Email: support@lets-glow.de
Website: www.lets-glow.de
For safety concerns and DSA Art. 11 / Art. 12 inquiries: safety@lets-glow.de (see Imprint at lets-glow.de/impressum).
18.9 Third-Party Terms of Agreement
You must comply with applicable third-party terms of agreement when using the Licensed Application — in particular the terms of your wireless data service agreement. Any breach of such third-party terms (e.g. roaming/tethering restrictions, mobile data limits) is your sole responsibility.
18.10 Apple as Third-Party Beneficiary
You acknowledge and agree that Apple Inc. and Apple's subsidiaries are third-party beneficiaries of these Terms of Service. Upon your acceptance of these Terms, Apple will have the right (and will be deemed to have accepted the right) to enforce these Terms against you as a third-party beneficiary thereof.
18.11 External Services
The Licensed Application may enable access to our and/or third-party services and websites (collectively, "External Services") — for example, cloud backend services, authentication, advertising, maps. You agree to use External Services at your sole risk.
Data displayed by any Licensed Application or External Service — including financial, health-related, or location information — is for general informational purposes only and is not guaranteed by us or our agents. You will not use External Services in any manner inconsistent with these Terms or that infringes the intellectual property rights of any third party; in particular, you will not use External Services to harass, abuse, stalk, threaten, or defame any person or entity.
External Services may not be available in all languages or in your home country and may not be appropriate for every use case. To the extent you choose to use External Services, you are solely responsible for compliance with applicable laws. We reserve the right to change, suspend, remove, disable, or impose access restrictions on External Services at any time without notice.
18.12 Application to Google Play Store
The provisions in § 18.1 through § 18.11 apply by analogy to distribution via the Google Play Store, with Google LLC stepping in for Apple Inc. as third-party beneficiary to the extent Google imposes corresponding requirements on an end-user license agreement. Neither Apple Inc. nor Google LLC are obligated to provide maintenance or support services for Let's Glow.
19. Contact
Have questions about these Terms of Service? We're here for you:
Johannes Reusch
Heinrich-Heine-Platz 9A
10179 Berlin, Germany
Phone: +49 30 54858929
Email: support@lets-glow.de
Website: www.lets-glow.de
For safety concerns or urgent reports: safety@lets-glow.de
Last updated: September 25, 2026 (Version 2.26)
