Privacy Policy

1. Introduction

Glow is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy applies to all users of our Service, including visitors, registered users, and subscribers.

We understand that when you use our photo editing and management services, you trust us with your personal images and information. We take this responsibility seriously and are committed to being transparent about our data practices.

This Privacy Policy is incorporated into and subject to our Terms of Use. By using the Service, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when using our Service:

• Account Information: Name, email address, phone number, password, and profile picture when you create an account
• User Content: Photos, images, and other content you upload, edit, or create using our Service
• Payment Information: Billing address, payment card details (processed securely by our payment providers), and transaction history
• Communications: Messages, feedback, support requests, and other communications you send to us
• Survey Responses: Information you provide in surveys, questionnaires, or promotional activities

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Device Information: Device type, operating system, unique device identifiers, browser type, and mobile network information
• Usage Data: Features used, actions taken, time spent on pages, click patterns, and interaction with content
• Log Data: IP address, access times, pages viewed, referring URL, and system activity
• Location Data: General location derived from IP address; precise location only with your explicit consent
• Photo Metadata: EXIF data embedded in photos you upload, including camera settings, date/time, and location (if enabled on your device)

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Social Login Providers: If you sign in using Google, Apple, or other social accounts, we receive your basic profile information
• Photo Storage Integrations: When you connect Apple Photos, Google Photos, Snapchat, or other services, we access photos you authorize
• Analytics Providers: Aggregated usage and demographic data from analytics services
• Marketing Partners: Information about your interactions with our advertisements on third-party platforms

3. How We Collect Information

3.1 Direct Collection

We collect information directly from you when you create an account, upload content, make purchases, contact support, or otherwise interact with our Service.

3.2 Automated Collection

We use cookies, pixels, SDKs, and similar technologies to automatically collect information about your device and usage patterns. See Section 13 for more details about our use of cookies and tracking technologies.

3.3 Third-Party Collection

When you connect third-party services (such as photo storage providers), those services share information with us according to their privacy policies and the permissions you grant. We encourage you to review the privacy policies of any third-party services you connect.

4. How We Use Your Information

4.1 Providing and Improving the Service

• Create and manage your account
• Process and deliver photo editing features and tools
• Store, sync, and manage your photos across devices
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve features and user experience
• Develop new products, services, and features

4.2 Personalization

• Customize your experience based on your preferences and usage
• Recommend features, filters, and editing tools you may like
• Remember your settings and preferences across sessions

4.3 Communications

• Send transactional emails (account confirmations, password resets, receipts)
• Notify you about changes to our Service, Terms, or Privacy Policy
• Send marketing communications (with your consent where required)
• Respond to your comments, questions, and support requests

4.4 Safety and Security

• Detect, prevent, and address fraud, abuse, and security issues
• Verify accounts and authenticate users
• Enforce our Terms of Use and other policies
• Protect the rights, property, and safety of our users and the public

4.5 Machine Learning and AI

We may use your content to train and improve our machine learning models and AI-powered features (such as automatic enhancements, filters, and editing suggestions). This processing is done in accordance with applicable laws and your privacy settings. You can opt out of having your content used for model training in your account settings.

4.6 Legal Compliance

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from public authorities
• Establish, exercise, or defend legal claims

5. Legal Bases for Processing

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions that require a legal basis for processing personal data, we rely on the following bases:

• Contract Performance: Processing necessary to provide the Service you requested and fulfill our contractual obligations to you.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Service, preventing fraud, and marketing (where your interests and rights do not override these interests).
• Consent: Where you have given explicit consent to specific processing activities, such as receiving marketing communications or allowing location access.
• Legal Obligation: Processing necessary to comply with our legal obligations under applicable laws.

6. Information Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

6.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including cloud hosting, payment processing, email delivery, analytics, customer support, and marketing. These providers are contractually obligated to protect your information and may only use it for the purposes we specify.

6.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

6.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

6.4 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

6.5 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, and other purposes.

7. Third-Party Services & Integrations

7.1 Photo Storage Integrations

Our Service integrates with third-party photo storage providers, including:

• Apple Photos: Access photos from your iCloud Photo Library
• Google Photos: Access photos from your Google account
• Snapchat: Access Memories and saved content

When you connect these services, we only access the photos and data you explicitly authorize. We do not store your login credentials for these services. You can disconnect integrations at any time through your account settings.

7.2 Payment Processors

We use third-party payment processors to handle payments securely. Your payment card information is collected and processed directly by these providers and is not stored on our servers. Our payment processors comply with PCI-DSS standards.

7.3 Analytics Providers

We use analytics services to understand how users interact with our Service. These services may collect information about your use of our Service and other websites and apps.

8. Data Retention

8.1 Retention Periods

We retain your personal information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal obligations (such as tax and accounting requirements)
• Resolve disputes and enforce our agreements
• Support business operations and improve our Service

8.2 Account Deletion

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal, regulatory, or legitimate business purposes. Some information may persist in backups for up to 90 days before being fully removed.

8.3 Content Retention

Photos and content you delete from our Service are removed from our active systems within 30 days. However, copies may remain in our backup systems for up to 90 days. Content that has been shared with others or used in collaborative features may persist in those contexts even after you delete it from your account.

9. Data Security

9.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure, access-controlled data centers
• Regular security assessments and penetration testing
• Employee training on data protection and security
• Access controls and authentication requirements
• Monitoring and logging of system access

9.2 Your Responsibilities

You are responsible for maintaining the security of your account credentials. We recommend using a strong, unique password and enabling two-factor authentication when available. Please notify us immediately if you suspect unauthorized access to your account.

9.3 Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. We will provide information about the breach and steps you can take to protect yourself.

10. International Data Transfers

Glow is based in the United States. If you access our Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

These countries may have data protection laws that are different from the laws of your country. When we transfer personal data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with our service providers
• Compliance with applicable data transfer frameworks

By using the Service, you consent to the transfer of your information to the United States and other countries as described in this Privacy Policy.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

11.1 Access & Portability

You have the right to request a copy of the personal information we hold about you and to receive it in a structured, commonly used, machine-readable format.

11.2 Correction

You have the right to request correction of inaccurate or incomplete personal information. You can update most account information directly in your account settings.

11.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions (such as legal retention requirements). You can delete your account through your account settings or by contacting us.

11.4 Restriction & Objection

You may have the right to request restriction of processing or object to certain processing activities, including processing based on legitimate interests or for direct marketing purposes.

11.5 Withdraw Consent

Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing prior to withdrawal.

11.6 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@www.yourglowapp.com. We will respond to your request within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before processing your request.

12. Children's Privacy

Our Service is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under this age.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at privacy@www.yourglowapp.com. We will take steps to delete such information from our systems.

Users between 13 and 18 years of age (or the age of majority in their jurisdiction) may use the Service only with the involvement and consent of a parent or legal guardian.

13. Cookies & Tracking Technologies

13.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings to enhance your experience.
• Analytics Cookies: Help us understand how users interact with our Service to improve it.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

13.2 Other Tracking Technologies

In addition to cookies, we may use pixels, web beacons, local storage, and similar technologies to collect information about your interactions with our Service and emails.

13.3 Managing Cookies

You can manage your cookie preferences through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect the functionality of our Service. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

14. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. There is currently no universally accepted standard for how to respond to DNT signals.

At this time, our Service does not respond to DNT signals. However, you can manage tracking through our cookie consent tool and your browser settings as described in Section 13.

15. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.

15.1 Your California Rights

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of your personal information (note: we do not sell personal information)
• Right to Limit: Limit the use of sensitive personal information
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights

15.2 Categories of Information

In the past 12 months, we have collected the following categories of personal information: identifiers, commercial information, internet activity, geolocation data, audio/visual information, and inferences drawn from the above.

15.3 Exercising Your Rights

To exercise your California privacy rights, contact us at privacy@www.yourglowapp.com or use the privacy controls in your account settings. You may also designate an authorized agent to make a request on your behalf.

16. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and similar laws.

16.1 Your GDPR Rights

In addition to the rights described in Section 11, you have the right to:

• Lodge a complaint with your local data protection authority
• Object to automated decision-making and profiling
• Request information about international data transfers and safeguards

16.2 Data Protection Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority. A list of EEA data protection authorities is available at edpb.europa.eu.

16.3 Data Controller

For the purposes of GDPR, Glow is the data controller responsible for your personal information. Our contact details are provided in Section 18.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this page
• For material changes, we will provide notice through the Service, by email, or other appropriate means
• We will obtain your consent where required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within thirty (30) days.