Privacy Policy

Welcome to Glowya application (the "Platform"). The Platform is provided and controlled by Hangzhou Qingzhou Technology Company Limited ("we", "us", "our"). This Privacy Policy (the "Policy") sets out the basis on which any information we collect from you, or that you provide to us, will be processed by us.

Please read the following contents carefully to understand our practices regarding your information. By accessing or using the Platform, services, applications, products, and content (collectively, the "Services"), you acknowledge the practices described in the Policy.

IF YOU DO NOT AGREE WITH ANY TERM IN THIS POLICY, PLEASE DO NOT USE OUR SERVICES.

1. Information We Collect

Information about your use of the Platforms

We may collect information about your operation on the Platforms, mainly including information that you click, browse, download, share, and your search record, video editing acts, or any other information provided during your use of our Services.

Device and log information

When you use our Services, we will collect your device and log information such as unique device identifier, device model, system language, country, advertising identifier, operating system, IP address, software version number, and service log information.

Feedback information

When you contact us for feedback or customer service, we will collect the information and material that you submitted, and your contact information (such as your phone number, and email address).

User Content

We may collect the content you create, upload, generate, or access through the Services, including the photographs, images, and videos you upload, image or video templates you generate or view, and other actions you take on the Services.

IMPORTANT: We absolutely DO NOT use your personal images, videos, or generated content to train our own artificial intelligence models. Your data remains yours and is processed solely for the purpose of providing the service to you.

Payment Information

For Web subscriptions and credit purchases, the checkout identifies the seller and payment provider, including Stripe, Paddle, and Creem. Payment-card details are entered into that provider's secure checkout, not into Glowya's servers; we do not receive or store your full card number or security code. We may receive and use your account email, customer and transaction identifiers, product, amount, currency, payment and subscription status, and refund or dispute events to fulfill purchases, grant or remove benefits, provide support, and reconcile records. The provider processes the information collected in its checkout under its own privacy notice. For Paddle purchases, see Paddle's Privacy Notice. For Stripe payments, see Stripe's Privacy Policy.

2. Which permissions we might ask you to authorize

We may ask you to authorize the following permissions to provide our services:

• Camera permissions: for picture shooting
• Album: used to access photos for video editing or upload and download personal videos, photos, audios
• Receive notification messages: used to receive messages
• Gets the current network status: to alert users about network conditions
• IDFA permission: for ad tracking

3. Images and Potential Face Data

Glowya primarily processes images of products uploaded by users to generate AI-enhanced product visuals. While our service is not intended for processing personal portrait photos, we acknowledge that some uploaded images may incidentally contain human faces.

4. AI Processing and Third-Party AI Providers

Glowya is an AI creative tool. To produce the image or video you ask for, the content you provide has to be sent to AI models. This section explains exactly what is sent, who receives it, what they may do with it, and how you can have it deleted.

What we send

When you start a generation, the following is sent to our servers and then to the AI model provider that will process it: the photos you upload, the text prompt you write, and the template and generation parameters you choose (such as aspect ratio or video length). We do not send your account credentials, contact details, or payment information to AI providers.

Who receives it

Your content is processed by AI models operated by the following providers, which we access through their commercial APIs:

• Google (Gemini API)
• OpenAI
• Volcengine

These providers receive your content for the sole purpose of generating the result you requested. We do not sell your content, and we do not share it with advertisers or data brokers.

How it is used, and what is never done with it

Your content is used only to create the result you asked for and to deliver it back to you. Your uploaded images, your prompts, and your generated results are not used to train AI models — neither ours nor those of the providers listed above. We use these providers through their commercial API offerings, under terms that do not permit customer content to be used for model training.

Equivalent protection

We only engage AI providers that are bound, by contract and by their published API terms, to protect your content to a standard at least equivalent to the one described in this Policy, to process it only on our instructions, and not to use it for their own purposes.

Your consent

Before any of your content is sent for AI processing, the Glowya app shows you a dedicated explanation of what is sent and who receives it, and asks for your agreement. If you do not agree, the AI generation features are not available to you; the rest of the app remains usable. You can review this explanation at any time in the app under Settings, then About, then AI and Your Data.

Storage and deletion

Your uploaded images and your generated results are stored in association with your account, so that you can open your creations from any device where you sign in. You can delete any individual creation at any time from within the app. When you do, the image or video file is removed from our servers; we keep only a record that contains none of your content — the template used and the time of generation — for billing reconciliation and abuse prevention. Deleting your account removes your creations together with the personal information associated with that account.

5. Third-Party Services and Social Media

Our Services may interact with third-party platforms and social media services (e.g., Pinterest, Facebook).

• Content Distribution: We may use third-party APIs (such as the Pinterest API) to help manage our official social media presence and distribute creative content generated through our Platform.
• Data Usage: We do not sell personal data retrieved from third-party platforms to any third parties. Any data accessed through these integrations is used strictly to provide the requested features.
• User Control: You can manage or revoke our access to your third-party accounts through the settings of those respective platforms.

6. How We Collect Your Information

We collect information in different ways:

• We collect information directly from you when you use the customer services on the Platforms.
• We collect information from you passively using tracking tools like Google Analytics, browser cookies, and web beacons.

7. How We Use Your Personal Information

We may use the information you have provided for the following purposes:

• To improve our Services: We use your information to help us create, develop, operate, deliver, and improve our Services.
• For security purposes: We may use information for account and network security purposes.
• To send important notices: such as alerts about your account and changes to our terms, conditions, and policies.
• To meet our legal obligations: For example, we may record, audit, analyze and dispose your information according to applicable laws.

8. Use of Cookies, Local Storage, and Analytics

We use cookies, local storage, and similar technologies for essential functions such as login and security, and we use analytics and performance tools as described below and in our Cookie Policy. When you open a payment checkout, the provider may also use its own technologies for payment security, fraud prevention, and transaction processing.

Analytics and Performance Monitoring: To improve our Services and monitor app stability, we utilize analytics platforms (including Vercel Analytics for Web and Firebase for iOS). These tools may collect usage data, crash reports, and anonymous device identifiers. However, we configure these tools strictly for first-party performance monitoring and product improvement.

Advertising: We do not use payment information received from checkout providers to target advertising. Your browser or device settings may provide additional controls over analytics and similar technologies. See our Cookie Policy for more information.

9. Storage and Retention

Storage

The information that we collect from you may be transferred to, and stored at, a destination inside or outside of your country. By submitting your information, you agree to this transfer, storing or processing.

Retention

We retain personal information for as long as necessary to provide our Services or fulfill the original purpose for which such information was collected, or for other business purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements.

10. How We Share Your Information

We may share your necessary personal information to third-party service providers to help us deliver and improve Services, marketing, and other legitimate business functions. We ensure that there are adequate safeguards in place to protect your personal data.

The content you submit for AI generation is shared with the AI providers named in Section 4, on the terms described there.

We will disclose or transfer your Information if required to do so by law, or we have acquired consent from you, or in the good faith belief that any such action is necessary to comply with legal requirements, protect our rights or property, or act to protect the personal safety of our users.

11. How We Protect Your Information

We are committed to ensuring that your personal information is secure. In order to prevent unauthorized access, disclosure or other similar risks, we have put in place reasonable physical, electronic and managerial procedures to safeguard and secure the information we collect.

For example, when you send or receive data from Glowya App, we make sure they are encrypted using Secure Sockets Layer ("SSL") or other algorithms.

12. Your Rights

Your local laws may permit you to request that we:

• provide access to and/or a copy of certain information we hold about you
• prevent the processing of your information for direct marketing purposes
• update information that is out of date or incorrect
• delete certain information which we are holding about you
• restrict the way that we process and disclose certain of your information
• revoke your consent for the processing of your information

13. Children's Privacy

The Platform and Services are not directed at children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13. If you are between 13 and 17 years old, you may only use the Services with the explicit consent of a parent or guardian. If you are a parent or guardian and you believe that a minor under the age of 13 has provided us with personal information, please contact us immediately at support@glowya.ai, and we will take steps to delete such information.

14. Modification of This Policy

The effective date of this Policy is set forth at the top of this webpage. We reserve the right to amend this Policy at any time with or without notice and will place any updates on this webpage. Your continued use of Services on the Platforms will be taken as acceptance of the updated Privacy Policy.

15. How to Contact Us

If you have any question/complain/suggestion/request regarding this Policy, you may contact us directly at:

Hangzhou Qingzhou Technology Company Limited
Room 204945, Floor 20, Yandafang Wenyuan Building, No. 426 Binwen Road, Puyan Street, Binjiang District, Hangzhou, ZHEJIANG 310000, China
support@glowya.ai

16. SUPPLEMENTAL TERMS – JURISDICTION SPECIFIC

In the event of a conflict between the provisions of the Supplemental Terms that is relevant to your jurisdiction, and the rest of the Policy, the relevant jurisdiction's Supplemental Terms will supersede and control.

Addendum for EEA and Switzerland Residents

If you are using the Services in the European Economic Area ("EEA") and Switzerland, you have additional rights under local data protection laws (such as the GDPR). Our legal basis for processing your personal data includes: (1) Contractual Necessity (to provide the Services you requested); (2) Legitimate Interests (to improve our products and ensure security); and (3) Consent (where you have explicitly granted it). You have the right to access, rectify, or erase your personal data, restrict or object to processing, and the right to data portability. To exercise these rights, please contact us at support@glowya.ai. If you believe your data privacy rights have been violated, you also have the right to lodge a complaint with your local supervisory authority.

Addendum for California Residents

The terms of this Addendum apply to residents of California under the California Consumer Privacy Act ("CCPA") and other applicable laws.

17. Apple Trademark Disclosure

Apple, the Apple logo, iPhone, and iPad are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc.