Privacy Policy
Last updated: June 2026
HONGKONG HDTP SOFTWARE LIMITED ("we", "our", "us") operates GlowAvatar (the "App"). This Privacy Policy explains how we collect, use, and protect your information.
1. Information We Collect
1.1 Photos You Upload
When you use the App to generate AI portraits, you upload a selfie photo. This photo is:
- Sent to our secure server for AI processing
- Forwarded to BytePlus (ByteDance Pte. Ltd., Singapore) Seedream AI service for image generation
- Automatically deleted from our servers within 24 hours of processing
- Never used for AI model training by us or by BytePlus
1.2 Device Information
We collect your device's Identifier for Vendor (IDFV) solely to manage free trial / credit usage limits. This identifier cannot be used to identify you personally, is unique to our App only, is stored in an encrypted database on our server, and is used only to prevent abuse.
1.3 Purchase Information
All purchases are processed through Apple's App Store. We do not collect or store any payment information. Apple handles all payment processing.
1.4 Information We Do NOT Collect
- We do not require account registration or login to browse styles
- We do not collect names, email addresses, or phone numbers (unless you contact us by email)
- We do not collect location data
- We do not use analytics or tracking SDKs
- We do not serve advertisements
2. How We Use Your Information
- Photo processing: To generate AI portrait images based on your selfie
- Device ID: To manage free trial / credit usage limits
- Generated images: Stored on our server for up to 30 days so you can re-download them from the History section, then permanently deleted. Images you save to your device remain there until you delete them.
3. Third-Party Services
- BytePlus Seedream AI (ByteDance Pte. Ltd., Singapore) — AI image generation. Your selfie is transmitted to BytePlus servers for processing. BytePlus Privacy Policy
- Apple StoreKit — In-app purchase processing, managed entirely by Apple. Apple Privacy Policy
We do not integrate any advertising SDKs, analytics platforms, or data brokers.
4. Data Storage and Security
- All data transmission uses HTTPS / TLS encryption
- Our servers are hosted on Alibaba Cloud (Hong Kong) with enterprise-grade security
- Device IDs are stored in an encrypted database
- Uploaded selfies are deleted from our servers within 24 hours; we operate no long-term storage of user face photos
5. Data Retention
- Uploaded selfies / face data: Deleted from our servers within 24 hours of processing
- Generated portrait images: Stored on our server for up to 30 days for re-download convenience, then permanently deleted (images saved to your device remain under your control)
- Device ID records: Retained for anti-abuse purposes; deleted upon request
6. Face Data — Specific Disclosure (Apple Guideline 5.1.1(i))
This section provides explicit disclosure regarding face data as required by Apple App Store Review Guideline 5.1.1(i). For the purposes of this section, "face data" refers to any photographic image of a user's face that the user voluntarily uploads to GlowAvatar for AI image generation.
6.1 What Face Data We Collect
The only "face data" the App receives is the standard JPEG selfie photo that the user voluntarily selects from their device. We do NOT collect, extract, or compute facial recognition data, face identity, face embeddings/descriptors/geometry, biometric templates, or face landmark/expression/emotion data. The selfie is treated solely as a generic image input for AI-based artistic transformation; we do not identify who is in the photo.
6.2 Why We Collect Face Data
We use the uploaded selfie for a single purpose: to generate an AI-stylized portrait based on that photo. There is no secondary use.
6.3 Retention — How Long Face Data Is Stored and Why
The uploaded selfie (face data) is stored only transiently and automatically deleted from our servers within 24 hours of the generation request. We retain it for this short window only to complete the AI generation request and to handle any processing retry or failure; it is not kept beyond that. We do not retain face data indefinitely. The AI-generated portrait image (an artistic output, not your original face photo) is kept on our server for up to 30 days solely so you can re-download it from History, then permanently deleted.
6.4 Third Parties With Whom Face Data Is Shared, and Why
The uploaded selfie is shared with exactly one third party: BytePlus Seedream AI (operated by ByteDance Pte. Ltd., Singapore). This is technically necessary because BytePlus is the AI engine that generates the portrait. No other third party receives face data, and we never share it for advertising.
6.5 Whether the Third Party Retains Face Data
BytePlus processes the input image transiently to fulfil the generation request and does not retain the photo after processing, nor use it to train or improve its AI models. For BytePlus's full and most up-to-date privacy practices, see: https://www.byteplus.com/en/privacy-policy
6.6 Summary
- Is face data retained on our servers? Only transiently — uploaded selfies are deleted within 24 hours.
- Why is it stored, and for how long? Kept up to 24 hours only to complete the generation request and handle retries; never indefinitely.
- Which third parties receive face data? BytePlus Seedream AI (ByteDance Pte. Ltd., Singapore) only.
- Why share it with BytePlus? BytePlus is the AI generation engine; sharing is necessary for the App's core function.
- Does BytePlus retain face data? No. It is processed transiently and not used for model training.
7. Your Rights
For EU Users (GDPR)
You have the right to access your data, request deletion, data portability, object to processing, and withdraw consent at any time. Since we store minimal data, deletion requests can be fulfilled by contacting us.
For California Users (CCPA)
You have the right to know what data we collect, request deletion, and opt out of data sales. We do not sell personal information.
For All Users
- Delete all generated images saved on your device by deleting the App
- Decline AI data processing (you will not be able to generate portraits, but can still browse styles)
- Request deletion of your device ID record and any server-stored images by contacting us
8. Children's Privacy
The App is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by updating the "Last updated" date.
10. Contact Us