This Privacy Notice for Rush Technologies LLC ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Download and use our mobile application (rush), or any other application of ours that links to this Privacy Notice
- Use Rush. Rush is a peer-to-peer (P2P) ticket exchange app that allows users to buy and sell event tickets securely. It integrates with Stripe for payment processing, ensuring sellers receive payouts only after their tickets are verified and eligible for withdrawal. Sellers list tickets, manage their sales, and track their earnings directly through the app, while buyers can browse available tickets and make secure purchases. The app enforces multiple safeguards to protect both buyers and sellers, including delayed payouts for new sellers, ticket ownership verification, and withdrawal policies. With a WalletView displaying active, expired, and pending balances, Rush creates a smooth and trustworthy marketplace for users to exchange tickets. Additionally, it incorporates Supabase for real-time updates on ticket sales and secure access to Stripe Express Dashboards for sellers within the app.
- Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.
TABLE OF CONTENTS
- SUMMARY OF KEY POINTS
- 1. WHAT INFORMATION DO WE COLLECT?
- PHOTOS AND FACE DATA (GLOW AI)
- 2. HOW DO WE PROCESS YOUR INFORMATION?
- 5. HOW DO WE KEEP YOUR INFORMATION SAFE?
- 6. DO WE COLLECT INFORMATION FROM MINORS?
- 7. WHAT ARE YOUR PRIVACY RIGHTS?
- 8. CONTROLS FOR DO-NOT-TRACK FEATURES
- 10. DO WE MAKE UPDATES TO THIS NOTICE?
- 11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
- 12. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.
- What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
- Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. Learn more about sensitive information we process.
- Do we collect any information from third parties? We do not collect any information from third parties.
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
- names
- phone numbers
- email addresses
- mailing addresses
- job titles
- usernames
- passwords
- contact preferences
- contact or authentication data
- billing addresses
Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:
- financial data
- student data
Rush is not an educational institution and is generally not subject to the Family Educational Rights and Privacy Act (“FERPA”). Any student-related data we process is limited to ticket-transaction details and is not considered an “education record” under FERPA.
Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.
Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:
- Geolocation Information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's and other features. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our application(s), we may also collect information about the phone network associated with your mobile device, your mobile device's operating system or platform, the type of mobile device you use, your mobile device's unique device ID, and information about the features of our application(s) you accessed.
- Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.
This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
PHOTOS AND FACE DATA (GLOW AI)
This section describes how face data is handled in the Glow AI application. It also appears in, and is consistent with, the dedicated Glow AI Privacy Policy further below.
What face data we collect. When you take a scan you provide a photo of your face ("face data"). A facial photograph is the only face-related data the app uses. We do not create or store a faceprint, face template, face-geometry map, or any face-recognition signature, and we do not use your photo to identify or authenticate you. We use it only to assess the appearance of your skin.
On-device face detection. Before any photo leaves your device, Glow AI uses Apple's on-device Vision framework to check photo quality — that exactly one face is present, is centered in the frame, and is in focus. This face-detection step runs entirely on your device, is used only to accept or reject the shot, and is never stored or transmitted to us or anyone else.
AI analysis by a third party (Anthropic). To generate your Skin Score, insights, and routine, your photo and the skin-profile answers you provided are sent from our server to Anthropic — the company behind the Claude AI model — which processes the image and returns the results. Anthropic is the third party that performs the analysis; we are not. We share your photo with Anthropic only for this purpose and only when you choose to scan. Under Anthropic's commercial API terms, your submission is used to generate the response and is not used to train Anthropic's models. We ask for and require your explicit in-app consent before your first scan, and you can withdraw it by ceasing to scan and deleting your account.
Storage. Photos are encrypted in transit (HTTPS/TLS) and at rest. They are stored in our cloud database (Supabase, located in the United States) under your user identifier and protected by row-level security. We do not sell your face data or share it with advertisers.
Retention. We retain your photos and the scores derived from them while your account is active so you can track progress over time, and afterward only as described in our Data Retention section. You can delete individual scans in the app at any time; deleting a scan removes it from your in-app view, and where applicable law grants you a right to erasure we will honor verified requests sent to rushtechnologiesllc@gmail.com.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
We process your personal information for a variety of reasons, including but not limited to:
- To provide and maintain our Services, including facilitating transactions, managing accounts, and verifying identities.
- To analyze usage, user behavior, and preferences in order to improve our Services and develop new features or offerings.
- To personalize your experience, including recommending content, events, or promotions tailored to your activity.
- To send administrative and promotional communications, including service updates, offers, surveys, and event recommendations.
- To enforce our terms and policies, prevent fraud, and ensure the integrity and safety of the platform.
- To conduct internal research, analytics, and business planning, including benchmarking and modeling user behavior.
- To use aggregated, anonymized, or de-identified data for product development, marketing, investment, or academic purposes.
- To comply with legal obligations and respond to lawful requests from law enforcement or regulators.
5. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
6. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect or solicit data from children under 13 (COPPA) or market to anyone under 18.We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at support@mail.getrushnow.com.
7. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.
Withdrawing your consent:
If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.
However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Opting out of marketing and promotional communications:
You can unsubscribe from our marketing and promotional communications at any time by replying "STOP" or "UNSUBSCRIBE" to the SMS messages that we send, or by contacting us using the details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with third parties.
Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:
- Log in to your account settings and update your user account.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.
8. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.
-->10. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may contact us by post at:
Rush Technologies LLC
support@mail.getrushnow.com
United States
12. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please fill out and submit a https://docs.google.com/forms/d/e/1FAIpQLSfXHdYq3T7eMdOSSKVdJ3lGQ4Kw8hK083AzFQTerhuSNRohPg/viewform?usp=sharing&ouid=106902851152792054416.
GLOW AI — PRIVACY POLICY
About this section: The Privacy Policy below applies specifically to Glow AI, a product operated by Rush Technologies LLC. Glow AI and the Rush ticketing platform are both products of the same company, and this Glow AI Privacy Policy and the Rush Privacy Notice above are meant to be read together. Where relevant, both apply to one another — using either product means both notices may govern how your information is handled — but the Glow-AI-specific provisions below describe data practices for the Glow AI application.
Last updated: June 3, 2026
This Privacy Policy describes how Rush Technologies LLC ("we", "us", "our") collects, uses, and shares information when you use the Glow AI mobile application and related services (the "Service"). It applies in addition to our Terms of Service.
1. Summary
- We collect: account info, your skin-related answers, photos you take, scan history, usage data, and subscription status.
- We use it to provide Glow AI, personalize your routine, run AI skin analysis, and improve the Service.
- We share it with the third-party providers listed below.
- You can close your account anytime via "Delete account" in Profile (this blocks future sign-in); note that we may retain previously collected data as described below and in our Terms.
- We do not sell your personal information.
- You must be at least 13. We do not knowingly collect from children under 13.
2. Information We Collect
a. Information you give us:
- Account info: email, name, date of birth (used to verify age).
- Skin profile: skin type, concerns, goals, sleep, stress, water intake, current routine — provided during onboarding and editable later.
- Photos / face data: photos of your face that you take to receive a skin score (see Section 4 for exactly how face data is used, shared, and retained).
- Referral codes: codes you enter during signup.
- Communications: messages you send to support.
b. Information collected automatically:
- Usage: which features you use, screens viewed, taps, session length, scan frequency.
- Device: device model, OS version, app version, language, time zone, and (with your permission) a non-identifying tracking identifier.
- Network: IP address (used briefly for security and routing — not stored long-term).
c. Information from third parties:
- Sign in with Apple / Google: when you sign in, we receive your email and name (with your authorization).
- Apple App Store: subscription status, renewal events, and (where you've authorized) a Sandbox test status.
3. How We Use Information
- Provide and operate the Service, including AI skin analysis
- Personalize your routine, insights, and notifications
- Track your streak and milestones
- Manage your subscription and prevent fraud
- Send transactional and (with your permission) marketing communications
- Improve the Service, including training, fine-tuning, and improving our (and our providers') artificial-intelligence and machine-learning systems
- Develop new products, features, and business lines
- Comply with law and enforce our Terms
- Any other lawful purpose related to our business, consistent with this Policy
4. Photos and Face Data
What face data we collect. When you take a scan you provide a photo of your face ("face data"). A facial photograph is the only face-related data the app uses. We do not create or store a faceprint, face template, face-geometry map, or any face-recognition signature, and we do not use your photo to identify or authenticate you. We use it only to assess the appearance of your skin.
On-device face detection. Before any photo leaves your device, Glow AI uses Apple's on-device Vision framework to check photo quality — that exactly one face is present, is centered in the frame, and is in focus. This face-detection step runs entirely on your device, is used only to accept or reject the shot, and is never stored or transmitted to us or anyone else.
AI analysis by a third party (Anthropic). To generate your Skin Score, insights, and routine, your photo and the skin-profile answers you provided are sent from our server to Anthropic — the company behind the Claude AI model — which processes the image and returns the results. Anthropic is the third party that performs the analysis; we are not. We share your photo with Anthropic only for this purpose and only when you choose to scan. Under Anthropic's commercial API terms, your submission is used to generate the response and is not used to train Anthropic's models. We ask for and require your explicit in-app consent before your first scan, and you can withdraw it by ceasing to scan and deleting your account.
Storage. Photos are encrypted in transit (HTTPS/TLS) and at rest. They are stored in our cloud database (Supabase, located in the United States) under your user identifier and protected by row-level security. We do not sell your face data or share it with advertisers.
Retention. We retain your photos and the scores derived from them while your account is active so you can track progress over time, and afterward only as described in "Data Retention" (Section 7). You can delete individual scans in the app at any time; deleting a scan removes it from your in-app view, and where applicable law grants you a right to erasure we will honor verified requests sent to rushtechnologiesllc@gmail.com.
5. Who We Share Information With
We share information with the following categories of recipients only as needed to provide the Service:
| Recipient | Purpose |
|---|---|
| Supabase (database / storage / auth) | Account storage, photo storage, signed authentication |
| Anthropic | AI analysis of your photos (via our server) |
| Apple | Sign in with Apple, subscriptions, push notifications |
| Sign in with Google (only if you choose Google) | |
| RevenueCat | Subscription management and entitlement verification |
| PostHog | Product analytics (only if enabled and you allow tracking) |
| Legal / safety | If required by law, subpoena, or to protect rights and safety |
We do not sell your personal information. We do not share information with advertisers.
6. Your Choices and Rights
- Access / Correct / Delete. You can view and edit your profile in the app, reset all data ("Reset all data" in Profile), or email rushtechnologiesllc@gmail.com.
- Notifications. You can disable push notifications in Profile → Notifications or iOS Settings.
- Tracking (iOS App Tracking Transparency). When prompted, choose "Ask App Not To Track" to prevent third-party tracking. The Service still works.
- Marketing. Unsubscribe links in marketing emails. Transactional emails (e.g. receipts) are not opt-outable while you have an account.
- Cancellation. Cancel your subscription in Settings → Apple ID → Subscriptions.
Region-specific rights
California (CCPA / CPRA). California residents have the right to know, delete, correct, opt out of "sale" or "sharing" (we do neither), and limit use of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise rights, email rushtechnologiesllc@gmail.com.
EU / UK (GDPR / UK-DPA). You have the right to access, correct, delete, restrict, object, and receive a portable copy of your data, and to lodge a complaint with your supervisory authority. The legal bases we rely on are contract (to provide the Service), legitimate interests (to operate and improve the Service), consent (for some communications and tracking), and legal obligation. To exercise rights, email rushtechnologiesllc@gmail.com.
7. Data Retention
We retain your information for as long as we deem necessary for our legitimate business purposes, including operating and improving the Service, training and improving AI systems, analytics, security, fraud prevention, and legal compliance.
Deleting your account closes it and blocks future sign-in, so the account is no longer accessible to you. To the maximum extent permitted by law, deletion does not obligate us to erase information we previously collected or derived; we may continue to retain and use such information (including photos, scan results, and derived or de-identified data) as described in this Policy and our Terms. Where applicable law grants you a right to erasure, we will honor verified requests sent to rushtechnologiesllc@gmail.com to the extent required.
8. Security
We use industry-standard technical and organizational measures to protect your information, including transport encryption (HTTPS / TLS), at-rest encryption for photos and database content, row-level access controls, and audited third-party service providers. No system is 100% secure; you use the Service at your own risk.
9. Children
The Service is not intended for children under 13. We require you to be 13 or older during signup. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe we may have, contact rushtechnologiesllc@gmail.com.
10. International Transfers
Our servers are located in the United States. By using the Service from outside the US, you consent to your information being transferred to and processed in the US, which may have different data-protection laws than your home country. Where required (e.g., from the EEA or UK), we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
11. Third-Party Links
The Service may contain links to third-party sites. We are not responsible for those sites' privacy practices.
12. Changes to This Policy
We may update this policy from time to time. If a change is material, we will notify you in-app or by email. The "Last updated" date at the top reflects the latest revision.
13. Contact
Questions or requests? Visit https://www.getrushnow.com/contact or email rushtechnologiesllc@gmail.com.
Rush Technologies LLC
Attn: Privacy
Support: https://www.getrushnow.com/contact
Email: rushtechnologiesllc@gmail.com
Note: The Privacy Policy in this section is more specifically tailored to Glow AI. However, because Glow AI and the Rush ticketing platform are operated by the same company, Rush Technologies LLC, the Rush Privacy Notice above and this Glow AI Privacy Policy technically apply to one another. By using either product you accept both, as relevant to the product you are using.