Privacy Policy

What we collect

When you sign in we receive your name, email address and profile picture from Google. When you create a glow-up we store the selfie you upload and the image we generate. Payment details are handled by our payment partner; Glow Up AI never sees your card number.

How we use it

Your selfie is used only to create the image you request. We use your email to operate your account, send receipts and service notices (such as when your photo is ready or a report you filed is resolved) and answer support requests. We do not send marketing email. We do not sell personal data and do not use your photos to train models.

Storage and retention

Files are stored with our infrastructure provider in encrypted form. Uploaded selfies are deleted automatically 7 days after upload and generated images are kept for 30 days after they finish, unless you delete them or your account sooner. Order and payment records are kept as required for tax and accounting. When you delete your account we keep only a one-way hash of your email address, so the same email cannot claim the sign-up bonus twice.

Safety checks

Before a selfie is used it may be checked by an automated content-safety classifier. The check runs only to enforce our rules, and its result is not used for anything else. Public forms are protected by a bot-detection service that may process your IP address and browser signals.

Cookies and analytics

The site uses a few cookies and similar browser storage that it needs to work, such as your sign-in session and your light or dark theme preference.

We also set a first-party cookie (vt_attr, kept for 90 days) that records how you first and most recently reached us, such as a referring website or campaign link. We use it only to see which channels lead to sign-ups and purchases, and we do not share it with advertising networks. It is only set after you accept analytics cookies in the banner, and withdrawing consent deletes it.

If you open a friend’s invite link, we set a cookie (vt_ref, kept for up to 30 days and removed once you sign up) so the invite can be credited. To prevent abuse of invite rewards, we store a salted hash of your IP address with the invite, not the address itself. Neither of you can see the other’s account details.

If you accept analytics cookies in the banner, we also use Google Analytics. It sets cookies (such as _ga) and lets Google process your IP address and device information to produce usage reports for us. Google Analytics is not loaded until you accept. You can withdraw consent at any time under “Cookie settings” in the footer, which also deletes these cookies.

Shared images

If you share a glow-up, anyone with the link can see it. The share page does not show your name or email and asks search engines not to index it. To make link previews, your browser creates a preview image from the photo and we store it with the glow-up. Stopping sharing or deleting the image disables the link and deletes that preview; the link also stops working when the image expires or is removed after a report.

Service providers

We rely on a small number of processors: cloud hosting, storage and email delivery, an AI image provider that processes your selfie only for your request, a content-safety classifier, a payment provider acting as merchant of record, and the analytics services described above.

Your rights

You can download or delete your images at any time. In Settings you can export a copy of your data as JSON or delete your account. For any other privacy request, email support@glowupai.tech.