Privacy Policy

1. Information We Collect

1.1 User Content

When you use Glowexa, we may collect and process the content you choose to provide, including photos, images, videos, text prompts, style selections, effect selections, generation inputs, generated outputs, and feedback messages. Uploaded media may contain faces, other biometric-like visual characteristics, background details, and other personal information visible in the content itself.

1.2 Face Data

When you use Glowexa features that transform portraits, merge images, animate photos, or apply face-based video effects, the app may process images or videos that contain facial information. We handle face data as follows:

• What we collect: Images or videos you upload or select that may contain your face or the face of other people, together with related prompts or feature selections needed to complete the requested generation task.
• How we use it: Face data is used only to provide the specific AI feature you requested, such as portrait editing, image generation, image animation, or face-based video transformation. We do not use face data for identity verification, facial recognition, profiling, or advertising.
• Disclosure and sharing: We do not sell face data and we do not share it with advertisers or data brokers. When necessary to provide the feature you requested, we may transmit face-containing media to our backend, cloud storage, and contracted AI or infrastructure processors acting on our behalf.
• Storage: Face data may be stored temporarily on your device, on our backend systems, and on infrastructure or AI processing systems engaged by us solely to deliver the requested output. We require those providers to process the data only for our service purposes and not for unrelated marketing use.
• Retention: Source uploads that may contain face data are processed temporarily and, when stored on our servers for task execution, are automatically deleted within 7 days after processing completion unless a longer period is required for security, fraud prevention, unresolved support issues, or legal compliance. Deletion requests are processed within 30 days.

Face data collection, use, disclosure, sharing, storage, and retention are described in this Section 1.2 and in Sections 3, 4, 6, and 8 of this Privacy Policy.

1.3 Account and Session Information

Glowexa may create and use anonymous or app-managed sessions so the app can function without a traditional username and password flow for every user. We may collect and store a user identifier, access tokens, refresh tokens, subscription status, credit balance, and an app-generated device identifier used for session continuity, service security, abuse prevention, and purchase restoration.

1.4 Purchase and Subscription Information

If you purchase subscriptions or credits, Apple processes the payment transaction. We do not receive your full payment card details. We may receive purchase-related information such as product identifier, plan type, transaction identifier, verification status, price and currency metadata, subscription state, and updated credit balances or entitlements.

1.5 Device, Usage, and Diagnostic Information

We may collect technical data needed to operate and improve Glowexa, including device model, operating system version, app version, bundle identifier, language, timestamps, request status, task status, performance data, and error or debugging information generated when features are used.

1.6 Photo Library Permissions and Media Saving

Glowexa requests access to your Photos library only when you choose to import media or save generated results. We access only the items you select, and we save generated images or videos to your library only when you ask us to do so. At this time, Glowexa does not request microphone, contacts, or precise location access.

1.7 Feedback and Support Information

If you use the in-app Contact Us or feedback feature, we collect the content of your message together with your user ID, complaint category, app version, and submission time so that we can review and respond to your request.

2. How We Use Information

We use the information we collect to:

• provide AI image and video creation, preview, generation, saving, and history features;
• upload source media and generate outputs you request;
• authenticate sessions and keep you signed in where applicable;
• manage subscriptions, credit balances, and purchase verification;
• display your generation history and restore previously created results;
• save results to your Photos library when you request it;
• respond to feedback, troubleshoot problems, and provide customer support;
• secure the app, prevent fraud or abuse, and maintain service integrity;
• analyze app launches, registration events, and first subscription conversions;
• comply with legal obligations and enforce our agreements.

3. Third-Party Services and AI Processing

Glowexa uses third-party service providers that process information on our behalf to run the app and deliver AI results. Depending on the feature, those providers may include:

• Backend, storage, and authentication providers, such as Supabase-hosted infrastructure, to manage sessions, uploads, generated files, task records, and account state.
• AI and inference providers engaged by our backend to perform requested image or video generation features. Depending on the feature, this may include Volcengine-based or similar hosted model infrastructure selected by us.
• Apple, to provide App Store distribution, in-app purchase processing, and purchase verification support.
• Meta/Facebook, to receive limited app events and conversion-related analytics data.

We do not sell your personal information. We do not authorize service providers to use your uploaded media, prompts, or face data for unrelated advertising purposes. We expect service providers acting on our behalf to protect the data they process using safeguards appropriate to the type of data and the service provided.

4. When We Share Information

We may disclose information in the following situations:

• to service providers and processors described in Section 3 so they can help us operate Glowexa and fulfill your generation request;
• to Apple or its systems as needed to process purchases, restore purchases, and verify entitlements;
• to Meta/Facebook for limited analytics and measurement events as described in Section 5;
• if required by law, subpoena, court order, or valid government request;
• to investigate, prevent, or address fraud, abuse, security issues, or violations of our legal rights;
• in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable confidentiality obligations;
• with your direction or consent.

We do not share or disclose face data with advertisers, data brokers, or unrelated third parties for their own independent marketing use.

5. Tracking, Analytics, and Advertising Permissions

Glowexa uses limited analytics and attribution tools, including the Meta/Facebook SDK, to measure app launch, registration, and first subscription events. We may ask for permission under Apple's AppTrackingTransparency framework. If you do not grant tracking permission, Glowexa does not enable advertiser ID collection in the Meta SDK. Even without advertiser ID collection, Glowexa may still send limited manual event data needed to measure core app events and conversions.

You can change tracking permission at any time in the iOS Settings app for Glowexa.

6. Data Retention

We retain information for different periods depending on the data type and purpose:

• Source uploads and face-containing media: Automatically deleted from our servers within 7 days after processing completion unless a longer retention period is required for security, fraud prevention, unresolved support, or legal compliance.
• Generated outputs and task history: Retained for as long as needed to provide your history, downloads, support, fraud prevention, and legitimate operational needs, or until you request deletion where applicable.
• Purchase, subscription, and accounting records: Retained as needed to verify transactions, comply with app store obligations, resolve disputes, and satisfy legal or tax requirements.
• Feedback and support messages: Retained for as long as needed to investigate, respond to, and document the issue raised.
• Local device storage and caches: Glowexa may store session data, cached thumbnails, cached videos, and similar performance data on your device until the app removes it, the operating system clears it, or you delete the app.

If you request deletion of your personal information, we will review the request and process it within 30 days, subject to legal, fraud-prevention, billing, and security exceptions.

7. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect information, including access controls, transport security, and secure local storage for certain sensitive session data where appropriate. No method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have rights to request access to, correction of, or deletion of your information. You may also:

• choose not to upload media or prompts containing information you do not want processed;
• revoke Photos access in iOS Settings if you no longer want Glowexa to read from or save to your library;
• change AppTrackingTransparency choices in iOS Settings;
• request deletion of server-side data, including uploaded source media and associated account records, by contacting us.

Some information may remain in backups, logs, security systems, or records we are required to keep by law. Media you save to your own Photos library remains under your control in the Photos app and is not deleted from your device when you delete data from our systems.

9. International Data Transfers

Glowexa and its service providers may process information on servers located outside your state, province, or country. By using Glowexa, you understand that your information may be transferred to and processed in countries where privacy laws may differ from those in your jurisdiction.

10. Children's Privacy

Glowexa is not directed to children under 13, or the minimum age required by applicable law in the user's jurisdiction. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in Glowexa, our providers, legal requirements, or our data practices. If we make material changes, we will update the "Last updated" date above and may provide additional notice where required by law.

12. Contact Us

If you have questions about this Privacy Policy or want to submit a data access or deletion request, please contact us at:

Email: usul2356@outlook.com

If you contact us, please include enough information for us to locate your records, such as the email address you used to contact support, your request details, and if available, your in-app user identifier.