Privacy Policy
This Privacy Policy explains how information is handled when you use Glowmoji: AI Character Maker (the "App") or visit glowmoji.co.
Information we process
Anonymous account and app data
When you first use the App, Glowmoji creates a random user ID and session credential. We use them to authenticate the App, keep your cloud Library separate from other users, apply generation limits, restore access, and connect subscription status to the correct anonymous profile. The App also sends its version and an App Store-signed app transaction when creating or upgrading the profile. We verify the signature and app identity, then immediately transform the Apple Account-specific app transaction identifier into a one-way keyed digest. We do not store the signed transaction or its raw identifier.
Prompts, styles, and generated content
When you create an emoji, we process the text prompt and style you choose, an expanded prompt created for generation, moderation and quality-control results, and the generated emoji files. This information is sent to our servers and AI service providers to create and return the result, keep the service safe, and maintain your private cloud Library.
Glowmoji v1 does not upload photos or reference images and does not request access to your camera or photo library for reading. Images you choose to save to Photos remain under your control on your device and in any device backup or cloud-photo service you use.
Subscriptions and purchases
Payments are processed by Apple. Apple and our subscription-management provider, Adapty, may provide us with an anonymous customer or receipt identifier, product and subscription status, transaction dates, storefront country or region, and refund information. We do not receive your full payment-card details or Apple Account password.
Notifications
If you allow notifications, we process an Apple Push Notification service device token linked to your anonymous Glowmoji profile so we can tell you when an emoji is ready. A successful completion notification may include the generated emoji through a short-lived private image link, but it does not include your prompt. You can turn notifications off in iOS Settings.
Support and reports
If you choose to contact support or report content, your mail app opens a message that you review before sending. We receive your email address and anything you include, which may include the App version, iOS version, device model, a report reason, screenshots, or other details. Do not include confidential or sensitive information unless it is necessary for us to resolve the issue.
Service and website request data
Cloudflare hosts our API, storage, and website and may process ordinary network and request information such as IP address, browser or user-agent information, requested path, request time, response status, and security events. We use this information for delivery, reliability, rate limiting, abuse prevention, and troubleshooting. The website itself does not set advertising cookies or run product analytics.
Glowmoji does not send product-interaction analytics. Firebase Crashlytics automatically processes crash reports, stack traces, relevant application state, app and operating-system versions, basic device diagnostics, and Firebase/Crashlytics installation and session identifiers. Glowmoji's custom diagnostic payload is limited to a privacy-safe error type and stack trace. Glowmoji does not attach its anonymous account ID, prompts, generated images, image URLs, custom text, or other user content to crash reports. Adapty still processes technical and purchase information needed to present paywalls and manage subscriptions.
How we use information
We use information to:
- create, moderate, deliver, save, and export the emojis you request;
- operate anonymous profiles, cloud Libraries, generation allowances, and notifications;
- provide subscription access and purchase restoration;
- detect unsafe, fraudulent, abusive, or unlawful activity;
- secure, maintain, and troubleshoot the App and website;
- respond to support, privacy, and legal requests; and
- comply with applicable law and enforce our Terms of Use.
AI and service providers
We use the following providers to operate Glowmoji:
- OpenAI for prompt expansion, safety moderation, and primary AI image generation;
- Replicate as an outage fallback for AI image generation and background removal;
- Cloudflare for API hosting, database and object storage, content delivery, security, and website hosting;
- Adapty for paywalls, subscription status, and purchase management;
- Google Firebase for privacy-safe crash diagnostics;
- Apple for App Store payments, purchase restoration, and push notifications.
These providers process information under their own privacy terms and our service arrangements. We require service providers to protect personal information consistently with this policy and applicable law and to use it only to provide services to us. OpenAI states that API inputs and outputs are not used to train its models by default; its standard abuse-monitoring logs may be retained for up to 30 days. A fallback provider is used only when the primary generation provider is unavailable.
Sharing and disclosure
We share information with the providers listed above only as needed to operate the App. We may also disclose information when required by law, to protect users or the service, to investigate abuse, or as part of a merger, financing, acquisition, or sale of assets. We do not sell or rent personal information and do not share it for cross-app behavioral advertising.
When you export a sticker to iMessage, WhatsApp, Telegram, Instagram, Photos, or another destination, that service processes the content under its own terms and privacy policy. Glowmoji cannot control what happens after you choose to copy, save, or hand off content.
Retention
- Your cloud Library, its prompts, generated emojis, and related metadata are kept until you use Delete my data.
- Additional raw generation files are automatically removed after up to 30 days.
- Private generation provenance, including prompt, moderation, provider, and quality-control facts, may be kept for up to 90 days for safety, abuse prevention, and complaint handling. If you use Delete my data, these records are deleted as part of that request.
- Cloudflare Worker logs are kept for up to 7 days.
- Firebase Crashlytics crash reports are retained for up to 90 days under the configured Firebase retention policy.
- Push tokens are kept until they are revoked, replaced, or your Glowmoji data is deleted.
- A one-way, Apple Account-derived quota marker and aggregate free-generation counts are kept after Delete my data for as long as Glowmoji offers the lifetime free allowance. This limited anti-abuse record ensures that deletion, reinstallation, or use on another device does not issue the same Apple Account another three free generations. It contains no prompt, generated content, raw Apple transaction identifier, or signed transaction.
- Purchase, support, legal, and provider records are kept only as long as reasonably needed for the relevant purpose or as required by law and the provider's retention rules.
Deleting your data
In the App, open Settings → Delete my data. After confirmation, Glowmoji deletes your anonymous profile, cloud Library, generated emoji files, prompts and expanded prompts, moderation and quality-control provenance, generation metrics and profile-level quota history, push tokens, and Glowmoji's subscription-profile link. The App also clears its local Library data, downloaded media, temporary exports, iMessage sticker data, preferences, and local Glowmoji credential. If an emoji is still being generated, wait for it to finish and try again.
The one-way quota marker and aggregate count described under Retention are not deleted and your remaining free-generation allowance does not reset. Other private safety and abuse-prevention records are deleted as part of the request. Service providers may retain limited information under their own legal and security obligations. Deleting Glowmoji data does not cancel an App Store subscription. Manage or cancel billing in Apple Account subscription settings. Images already saved to Photos or sent to another app must be deleted from those destinations separately.
You may also contact support@glowmoji.co about access, correction, deletion, or another privacy request.
Permissions and your choices
- Notifications: requested only after you choose to be notified when a generation finishes.
- Photos add-only access: requested only when you choose Save to Photos.
- Clipboard: written only after you choose Copy or an export action; Glowmoji does not read clipboard contents.
- Messaging apps: opened only after you choose an export destination.
- Glowmoji v1 does not request camera, photo-library read, contacts, microphone, location, or advertising-tracking permission.
Legal bases and privacy rights
Where applicable, we process information to perform our contract with you by providing the App, based on our legitimate interests in securing and improving the service and preventing abuse, with your consent for optional device permissions, and to comply with legal obligations.
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. You may also have the right to withdraw consent or complain to your local data-protection authority. Contact us to exercise a right; we may need information sufficient to verify and locate the relevant anonymous profile or support request.
International transfers
Our providers may process information in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers. Privacy protections may differ between jurisdictions.
Security
We use reasonable technical and organizational safeguards designed to protect information, including authenticated access and private storage for user-created content. No storage or transmission method is completely secure, so we cannot guarantee absolute security.
Children's privacy
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A higher minimum age may apply in your country. If you believe a child has provided personal information, contact us and we will take appropriate steps.
Changes to this policy
We may update this Privacy Policy as the App, our providers, or legal requirements change. We will post the updated version here and revise the effective date.
Contact us
For privacy questions or requests, contact support@glowmoji.co.