This Privacy Policy explains how GlowTone (“we,” “us,” or “our”) processes information when providing screen lighting, photo and video capture, photo relighting, light effects, portrait retouching, project management, and subscriptions, and describes your choices.
Media editing and face analysis primarily take place on your device. GlowTone also uses online analytics, crash reporting, advertising attribution, subscription-status, and feedback services. Local editing therefore does not mean that the app collects or transmits no data.
Photos. Within the permissions you grant, we display photos, categories, or albums, read content you select for editing, and write captured or exported media to your system Photo Library when you choose to save it. You can limit photo access or withdraw permission in system settings.
Camera and microphone. The camera supports live previews, photos, and video recording. The microphone supports audio recording in videos. Denying a permission affects the corresponding feature and does not give us access to unrelated device content.
Local media. Captured photos, videos, and thumbnails can be stored in the app’s album. Projects can retain source images, editing settings, and presets so that you can reopen them. Media editing does not require uploading content to our servers. Feedback attachments and content you choose to share are exceptions explained below.
We do not send editing photos, videos, or recordings to Firebase, Adjust, or Meta as analytics or advertising-attribution events. GlowTone does not request Location Services permission.
Before your first entry into a photo-relighting, light-effects, or portrait-retouching flow that requires face analysis, GlowTone displays an explanation and asks for your consent. Declining prevents that analysis from proceeding. Your choice to consent is stored locally, so the explanation may not appear again on subsequent use.
Depending on the feature, processing may involve face and person locations, face bounding rectangles, landmarks and contours, head pose, skin or teeth regions, person masks, depth information, and lighting-related maps. These results locate editing regions, position lighting and shadows, and apply effects such as smoothing, brightening, and facial adjustments.
Analysis runs on your device using Apple Vision/Core ML and MediaPipe models bundled with the app. We do not upload derived face-analysis data to servers or send it to advertising, attribution, or analytics services. We do not use that data to identify or authenticate individuals, create face templates for identification, train models, or build advertising profiles.
Facial landmarks, contours, and working masks are primarily held in memory and cleared when processing tasks and the relevant editor objects are released. Certain person and lighting-analysis results are cached locally, including person masks, depth data, and normalized face bounding rectangles. Their retention is described in Section 7 and is distinct from landmarks used only in memory.
If you choose to attach a photograph containing a face to feedback, a copy of that photograph is uploaded as a feedback attachment. This does not include uploading the facial landmarks or other analysis results generated on your device. You can submit feedback without images.
Usage analytics. Firebase Analytics helps us understand page visits, button interactions, feature use, onboarding, subscription actions, outcomes, and timing. Data can include device model, operating-system version, screen dimensions, app version, and app-instance identifiers, as well as language, region, and general technical information processed by the SDK according to system conditions.
Crash reporting. Firebase Crashlytics collects crash stack traces, non-fatal errors, diagnostic logs, installation identifiers, and related device and app information to help investigate and fix problems. We do not intentionally add media content or derived face data to these reports.
Persistent app identifier. GlowTone generates a random UUID and stores it in the iOS Keychain. It is not your name or a hardware serial number, but it can associate requests and events from the same app environment and should not be considered fully anonymous. The Keychain value may survive deletion and reinstallation of the app.
Our attribution and status service at gtads.muguangapp.com receives this UUID, the app version, the Firebase app-instance identifier, and an Apple Ads attribution token when available. These support acquisition measurement and retrieval of attribution and subscription status. Online services also receive connection information such as IP addresses when handling requests. SDKs may process technical identifiers such as the identifier for vendor (IDFV), depending on their configuration and system permissions.
GlowTone uses Adjust and Meta App Events to measure promotional campaigns and app, trial, and subscription conversions.
Adjust: receives first-open and trial-start events, deduplication information, and general device and connection information. We also provide the persistent UUID through the fx_user_uid parameter.
Meta App Events: receives app-activation, completed-onboarding, initiated-checkout, trial-start, and qualifying subscription events. Fields can include product identifiers, transaction or order identifiers, amounts, and currencies.
Apple Ads attribution: when available, we send Apple’s attribution token to our service to measure acquisition sources. This token is distinct from the advertising identifier, IDFA.
When iOS requires tracking authorization, GlowTone requests your choice through AppTrackingTransparency (ATT). Adjust and Meta initialization wait until that choice is resolved. Access to IDFA is controlled by system authorization.
Declining tracking does not stop all data transmission. Firebase analytics and crash reporting, feedback, attribution or subscription-status requests, and some SDK events that do not read IDFA may still process the information described above. ATT is not a single switch for all these activities. You can manage tracking permission in iOS Settings → Privacy & Security → Tracking. Declining tracking does not prevent core capture or editing features; paid features remain subject to subscription requirements.
Apple App Store and StoreKit provide purchases, renewals, and restoration. GlowTone processes information needed to display products and verify entitlements, such as product identifiers, transaction and original-transaction identifiers, prices, currencies, trial or offer eligibility, and expiration or revocation status.
When initiating a purchase, we pass the random UUID to Apple as StoreKit’s app-account association token to associate the purchase flow with the app. This does not mean that you registered a GlowTone account. Apple handles payment; we do not receive your full payment-card details or Apple Account password.
Some subscription events are sent to analytics and attribution services as described in Sections 3 and 4. Our status endpoint receives the request information listed in Section 3 and returns relevant status information; this does not mean we process card payments ourselves. You can manage or cancel subscriptions through Apple’s subscription-management interface. Deleting GlowTone or submitting a deletion request does not automatically cancel a subscription.
When you submit feedback through Settings → Feedback, we send the feedback category, description, app version, and random UUID to our feedback service at gtads.muguangapp.com. An email address and image attachments are optional and are transmitted only if you provide them. Images are resized and compressed.
We use this information to investigate issues, provide support, and respond when you supply contact details. Please avoid including unrelated sensitive information or other people’s private information.
When you use system sharing, selected media is passed to the app or service you choose, which processes it under its own privacy policy. Content in your system Photo Library may also be synchronized or backed up according to your iCloud Photos or device-backup settings. These are not media cloud-storage services operated by GlowTone.
Face-analysis working data: remains in memory during the lifecycle of processing tasks and relevant editor objects. It is not retained as a long-term facial identity record.
Person and lighting-analysis cache: stored in the app’s cache directory. At app launch and during cache reads and writes, records older than 24 hours are checked and removed. Saving limits the cache to 20 records, removing older records first. The app cannot guarantee deletion at exactly 24 hours while it is not running; expired files are handled when cleanup next runs. iOS may remove them earlier.
In-app album and projects: captured media, thumbnails, project source images, and editing settings remain until you delete the corresponding content or delete the app. Deleting a project does not necessarily remove separate analysis-cache files immediately; those follow the cache rules above.
System Photo Library and external copies: content saved, shared, or backed up outside the app must be deleted separately at the relevant destination.
Temporary files: support capture, previews, and exports. The image-export flow removes related temporary exports older than 24 hours when cleanup next runs. Other temporary files are handled by their corresponding workflows or system cleanup.
Preferences and local records: onboarding status, face-analysis consent, editing preferences, subscription caches, and queued or deduplication records remain until updated, the relevant local data is removed, or the app is deleted.
Keychain UUID: may remain after uninstalling. Deleting the app does not guarantee removal of this identifier.
Server and third-party records: retained according to processing purposes, support-case needs, applicable legal obligations, and service retention settings. Retention decisions take account of troubleshooting, attribution analysis, entitlement handling, and necessary security or dispute records. Records should be deleted or appropriately de-identified once the relevant retention conditions end.
You can delete album content and projects in GlowTone and exported copies in Photos. “Offload App” may preserve documents and data and is different from “Delete App.” Deleting the app does not automatically delete information already sent to servers or third parties and does not cancel Apple subscriptions.
We use Apple for purchases, system permissions, and attribution; Google Firebase for analytics and crash reporting; Adjust for attribution; Meta App Events for events; and services at gtads.muguangapp.com for attribution, status, and feedback. MediaPipe is used for local model inference and does not, by running these bundled models, upload your media or face-analysis results to Google.
Apart from content you choose to share or attach to feedback, editing media and derived face data are not supplied as part of the analytics and attribution events described above. We may disclose relevant information to the extent required by applicable law or legal proceedings.
Online services may process data outside your country or region. Applicable protection requirements, processing locations, and provider roles depend on the service and contractual arrangements. Where consent or international-transfer safeguards are required by law, those requirements must be met before the relevant processing takes place.
See the privacy information from Apple, Google, Firebase, Adjust, and Meta. This policy webpage is hosted on Google Sites; Google may process browser and connection information when you visit it under its own policy.
You can manage camera, microphone, photos, and tracking permissions, decline the initial face-analysis request, omit optional feedback contact details or attachments, and delete local projects and media. The app currently has no separate switch to disable all analytics and crash reporting, and no separate setting to withdraw saved face-analysis consent. You can stop using the corresponding analysis features; deleting the app removes the consent state stored in its container.
Depending on applicable law, you may have rights to access, correct, delete, obtain a copy of, restrict or object to processing, withdraw consent, and complain to a relevant supervisory authority. Submit privacy requests through GlowTone’s Settings → Feedback, describing the request and information that helps locate records, such as the approximate date of an earlier submission. Provide usable contact details if you would like a response. Do not provide passwords or payment-card details.
We will handle requests within the scope and deadlines required by applicable law and may perform proportionate verification where necessary. Withdrawing permission or consent does not automatically delete information previously processed. Media stored only on your device generally needs to be deleted on that device.
We may update this policy and its update date when features, providers, or processing practices change. For material changes, we will provide any additional notice or obtain consent required by applicable law. Refer to the features in the version you use and the latest published policy.