Glowly Privacy Policies
- Glowly: AI Dating Photos (profile score and AI photos)
- Glowly: Film Filters & LUTs (on-device photo filters)
Glowly: AI Dating Photos: Privacy Policy
Draft. [OWNER: this policy is a draft and must be reviewed by counsel before launch. Remove this notice and every [OWNER] marker after review.]
This policy explains what information Glowly collects, how we use it, who processes it, how long we keep it, and the choices you have. Glowly is an iPhone app that scores your dating or social profile and, if you buy a photo pack, creates new photos of you from 4 selfies you take in the app.
- Profile screenshots are processed in memory to create your score and are never stored.
- Your 4 reference selfies are stored privately and deleted 7 days after your last photo pack is done.
- Generated photos are deleted from our servers after 30 days.
- We never create or store face templates, faceprints or other biometric identifiers.
- With your consent, images are processed by OpenAI (scoring and safety checks) and Cloudflare Workers AI (photo generation).
- No ads, no tracking, and we never sell or share your personal information for advertising.
- You can export your data and delete your account in the app.
1. Who we are
Glowly is operated by [OWNER: legal entity name, registered address and country] ("Glowly", "we", "us"). For any privacy question or request, email support@glow.ly. [OWNER: add an EU/UK representative or data protection officer if required for your entity and audience.]
2. Information we collect
Account and device
- Anonymous account. When you first open Glowly, the app creates a random device identifier so you can use the free score without signing up. We store it with your account. It is not your device's advertising identifier.
- Sign in with Apple. Sign in with Apple is required before you buy a photo pack. Apple gives us a unique Apple user identifier for your account. Apple may also share an email address, which can be a private relay address. We never receive your Apple ID password. [OWNER: confirm whether the API stores the email address from Apple. The current API design stores only the Apple identifier; if email is not stored, change this sentence to say we discard it.]
- Sessions. We store sign-in sessions as hashed tokens.
- Consent record. We store the version and time you agreed to AI processing.
- Onboarding answers. Which dating apps you use and your goal. [OWNER: confirm whether these answers are sent to the server or stay on the device.]
Profile screenshots (free score)
You can upload 1 to 6 screenshots of your own profile and up to 6 optional original profile photos. These images are checked for safety and read by an AI model to create your score. They are processed in memory and are never stored by Glowly. We do store the result: your score, subscores, verdict, three fixes, bio rewrites, the dating app you selected, and the bio text read from your screenshots, so you can see your score history.
The score is about your profile (photo quality, photo variety, bio and prompts). It never rates your face, body or attractiveness. Screenshots can contain other information, such as names or messages, so please crop out anything you do not want processed.
Reference selfies (photo packs)
To create a photo pack you take 4 guided selfies with the in-app camera: a front face photo, a three-quarter view, a side profile and a full-body photo. Each selfie is checked for safety and to confirm it shows exactly one adult in a real camera photo. Accepted selfies are resized and stored privately in Cloudflare R2. They are never public.
Generated photos
The photos created for you are stored privately and shown to you in the app through links that expire after one hour. Each generated photo is checked for safety before you see it. We also store which style each photo uses and its status.
Purchases
Payments are handled by Apple. We never receive your card or bank details. When you buy a pack, Apple gives us a signed transaction record that includes the transaction ID, product, purchase date and an account token that links the purchase to your Glowly account. We use it to add credits and keep a credit ledger. If Apple tells us a purchase was refunded, we remove the unused credits from that purchase.
Reports and support
If you report a photo, we store the reason and any note you add so we can review it. If you email us, we keep your message and email address to help you.
Notifications
If you allow notifications, we store your device's push token so we can tell you when your photos are ready.
Technical and usage information
Our servers and hosting providers process IP addresses, request times and basic connection details to run the service, apply rate limits and prevent abuse. [OWNER: the MVP plan lists first-party funnel events (install, score started, score shared, capture done, paywall viewed, purchase, pack delivered, HMU link tapped). If the app records these, keep this sentence:] We record basic in-app events, such as when a score is created or a pack is purchased, to understand how Glowly is used. These events are linked to your Glowly account, are used only by us, and are never used for advertising.
3. Face data and biometric identifiers
Glowly does not create, extract or store face templates, faceprints, face geometry, face embeddings or any other biometric identifier, and does not use face recognition to identify or match you. Safety checks on your selfies (for example, "exactly one adult" and "real camera photo") are made by AI models that look at each image and return a yes or no answer. The photo generation model uses your selfies as visual references to create new images; it does not produce or keep a reusable identifier of your face. Your selfies themselves are deleted on the schedule below.
[OWNER: counsel to confirm treatment of face photos under Illinois BIPA, Texas CUBI, Washington law and similar laws, and whether additional written notice, consent or a release schedule is needed.]
4. AI processing and your consent
Before any image is processed, Glowly shows a consent screen that names the providers below. If you do not agree, we do not send your images to them.
- OpenAI reads your profile screenshots to create your score, and checks screenshots, selfies and generated photos for safety (for example nudity, minors, violence or screenshots of screens). OpenAI states that data sent through its API is not used to train its models by default and may be kept for up to 30 days for abuse monitoring, subject to its policies. [OWNER: confirm OpenAI API data controls in use, e.g. zero data retention eligibility or store=false.]
- Cloudflare Workers AI creates your generated photos from your selfies and the style you pick. Cloudflare also stores selfies and generated photos for us (R2). [OWNER: confirm Cloudflare's current Workers AI data terms, including that customer inputs and outputs are not used to train models.]
We do not deliberately send your name, email address or Apple identifier to these AI providers.
5. How we use information
- To provide the score, photo packs, share cards, gallery, notifications and support.
- To check content for safety, enforce our Terms, review reports and prevent fraud and abuse.
- To verify purchases, manage credits and handle refunds.
- To keep the service secure, fix problems and understand how Glowly is used.
- To meet legal obligations.
We do not use your information for advertising. We do not track you across other companies' apps or websites, and we do not sell or share your personal information, as those terms are defined in privacy laws such as the California Consumer Privacy Act.
6. Legal bases (EEA, UK and similar laws)
Where the law requires a legal basis, we rely on: performing our contract with you (providing the app and purchases); your consent (sending your images to AI providers, and notifications), which you can withdraw at any time; our legitimate interests in keeping Glowly safe, secure and working; and compliance with legal obligations. [OWNER: counsel to confirm whether face photos are treated as special category data and whether explicit consent wording is needed.]
7. Service providers
| Provider | Purpose |
|---|---|
| OpenAI | Profile scoring; safety checks on images |
| Cloudflare | Photo generation (Workers AI), private image storage (R2), job queues, website hosting |
| Amazon Web Services | API hosting |
| MongoDB [OWNER: confirm database host, e.g. MongoDB Atlas or self-hosted on AWS] | Database for accounts, scores, packs and credits |
| Apple | Sign in with Apple, in-app purchases, push notifications |
These providers process information on our behalf under their terms. We may also disclose information if required by law, to protect people's safety or our rights, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.
Sharing you choose. When you share a score card or a photo, it goes to the app or person you pick, and their policies apply. The "Try your new photos on HMU" link opens the App Store; we do not send your photos or account details to HMU. [OWNER: if HMU is operated by the same company, say so here.]
8. International transfers
Our providers may process information in the United States and other countries that may have different data protection laws from yours. Where required, we rely on appropriate safeguards such as standard contractual clauses. [OWNER: confirm transfer mechanisms.]
9. How long we keep information
| Information | Kept for |
|---|---|
| Profile screenshots and optional original photos | Not stored. Processed in memory and discarded. |
| Reference selfies | 7 days after your last photo pack is done; 7 days after capture if never used in a pack; or immediately when you delete your account |
| Generated photos | 30 days, or sooner if you delete them or your account |
| Score results and history | Until you delete your account [OWNER: confirm] |
| Account, consent record, push token, reports | Until you delete your account |
| Purchase and credit records | Deleted with your account, except where we must keep limited records for tax, accounting, fraud prevention or legal reasons [OWNER: confirm period] |
| Server logs | [OWNER: confirm log retention, e.g. 30 days] |
Deleted data may remain in encrypted backups for a limited time before it is overwritten. [OWNER: confirm backup retention.] Copies of photos you saved to your device or shared remain where you put them.
10. Your choices and rights
- Export. In Glowly, open Settings and tap Export data to get a copy of your account, scores, packs and photo IDs.
- Delete. In Glowly, open Settings and tap Delete account. This deletes your account, scores, packs, selfies and photos. See Delete your account.
- Delete single photos. You can delete any generated photo in your gallery.
- Withdraw consent. You can stop using the AI features at any time. To withdraw consent and remove your data, delete your account or email us. [OWNER: confirm whether the app offers a separate in-app consent withdrawal.]
- Notifications. Turn them off in iOS Settings.
Depending on where you live, you may have the right to access, correct, delete, or port your information, to object to or restrict certain processing, and to withdraw consent. California and other US state residents may have the right to know, delete and correct personal information and not to be discriminated against for using these rights. We do not sell or share personal information and do not use sensitive personal information to infer characteristics about you. To make a request, email support@glow.ly. We may need to verify your request, and we will respond within the time the law requires [OWNER: e.g. 30 days / 45 days]. You can also complain to your local data protection authority.
11. Security
We use encryption in transit, private storage with no public links to selfies, short-lived signed links for photos, hashed session tokens and access controls. No system is perfectly secure, so please keep your device protected.
12. Adults only
Glowly is only for people 18 and older. We do not knowingly collect information from anyone under 18. Selfies that do not clearly show an adult are rejected. If you believe someone under 18 is using Glowly, email support@glow.ly and we will delete the account.
13. Changes
We will update this policy when our practices change and change the date at the top. If changes are significant, we will tell you in the app before they apply.
14. Contact
[OWNER: legal entity name and postal address]
Email: support@glow.ly
Glowly: Film Filters & LUTs: Privacy Policy
Your photos are not our product.
Glowly is designed as a local-first photo editor. We do not need an account or a copy of your photo to help you edit it.
This Privacy Policy explains how Glowly handles information when you use the mobile app, visit glow.ly, or contact support.
Questions? Email support@glow.ly
01 Photos and edits
Photos you select are processed on your device. Glowly does not upload source photos or edited photos to our servers. The app requests access only to the photo you choose and requests permission to add a new image when you save.
Your original image remains unchanged. An edited result is saved as a new item only when you ask Glowly to save or share it.
02 Information stored on your device
Glowly may store preferences such as favorite filters, recent filters, export choices, and purchased-pack entitlements on your device or through the platform store. This information supports app features and is not used to build an advertising profile.
03 Accounts, advertising, and analytics
Glowly does not currently require an account and does not include third-party advertising or analytics SDKs. If that changes, this policy and the relevant app-store privacy disclosures will be updated before the change is released.
04 Purchases
If paid filter packs are offered, purchases will be processed by Apple or Google. Glowly may receive transaction and entitlement information needed to unlock or restore a purchase, but we do not receive your full payment-card details.
05 Support messages
If you contact support, we receive the information you choose to send, such as your email address, device details, screenshots, and message. Do not attach a personal photo unless you want us to receive it. We use support information only to respond, diagnose issues, and improve Glowly.
06 Website and hosting
Our hosting and network providers may process basic request data such as IP address, browser type, requested page, and security events to deliver and protect this website. We do not use this website data for cross-site advertising.
07 Retention, children, and changes
Support records are retained only as long as reasonably needed to resolve requests, maintain security, and meet legal obligations. Glowly is not directed to children under 13.
We may update this policy as Glowly changes. The effective date at the top will identify the current version.
08 Contact
For privacy questions or requests, contact support@glow.ly.