Privacy Policy

Who we are

100xglow (100xGLOW, at 100xglow.app) is an AI photo service operated from India. For privacy law purposes we are the data controller for the personal data described in this policy. Contact us anytime at support@100xglow.app.

What we collect

• Account data: your email address and name, provided through Clerk, our authentication provider.
• Source photos: the one to three selfies you upload as references.
• Inspiration photos: optional images used to guide selected photographic details. Kept until you delete them or your account, with one live inspiration per account.
• Photo feedback: if you choose to submit it, we store whether a result looks like you, follows your request, and is useful to you, plus an optional reason. We also record the first download-link click per output when feedback measurement is enabled; a click does not confirm a completed download. Feedback is kept until you delete your account and is excluded from ordinary reporting when you delete its photo.
• Generated images: the photos we create for you.
• Prompts and choices: the scenes, vibes, and free-text instructions you pick for a generation or review.
• Usage counters: your plan and the number of photo outputs and reviews used in the current period.
• Billing identifiers: your Whop membership ID, or legacy Polar subscription ID if you are still on a Polar plan. Whop and Polar process payment details; we do not see or store your card number.
• Support messages: anything you send us when you ask for help.

Why we process it

• To provide the service: generating, storing, and serving your photos. Legal basis: performance of our contract with you.
• To process your face photos: generating images of you requires processing your likeness. Legal basis: your explicit consent, given when you upload photos and start a generation. You can withdraw it at any time by deleting your photos or your account.
• To keep the service secure: preventing fraud and abuse, enforcing the acceptable use rules, debugging. Legal basis: our legitimate interests.
• To keep payment records: Whop, Polar for legacy subscriptions, and their payment partners retain transaction records under their own terms. Legal basis: legal obligation under tax and accounting law.

Face photos and biometric information

Your selfies contain your face, which some laws treat as biometric information. We process your photos to reproduce your likeness in generated images, at your direction. We do not use face photos to identify you or anyone else, we do not run facial recognition, and we do not sell biometric data. We keep face photos only for the retention period described below, and we delete them on request. Deleting a photo or your account destroys the underlying files.

We do not train on your photos

We do not use your uploads or the photos we generate for you to train or fine-tune any model, ours or anyone else's. OpenAI does not use API inputs to train its models under its API terms, and Google processes review requests under its Cloud terms.

Automated processing

Gemini on Google Cloud Vertex AI scores and reviews photos automatically, and OpenAI generates images automatically. We make no solely automated decisions that produce legal or similarly significant effects on you. Review scores are informational feedback, nothing more.

Who processes your data

We use the following subprocessors. Each processes data under its own data processing agreement.

How long we keep it

• Source photos: kept until you delete them or delete your account. We store at most three live source photos per account; remove an existing source photo before adding a different one.
• Inspiration photos: optional images used to guide selected photographic details. Kept until you delete them or your account, with one live inspiration per account.
• Photo feedback: if you choose to submit it, we store whether a result looks like you, follows your request, and is useful to you, plus an optional reason. We also record the first download-link click per output when feedback measurement is enabled; a click does not confirm a completed download. Feedback is kept until you delete your account and is excluded from ordinary reporting when you delete its photo.
• Generated images: kept until you delete them or delete your account.
• Deleting a photo: marks it deleted in our database, then permanently destroys the asset on Cloudinary and invalidates its CDN cache.
• Deleting your account: removes your profile row, cancels your current Whop membership or revokes remaining Polar subscriptions, and purges your Cloudinary assets.
• Payment records: Whop and its payment partners, or Polar for legacy subscriptions, retain transaction records as required by applicable tax and accounting laws.

Your rights

Depending on where you live, you have some or all of the following rights.

• GDPR (EEA and UK): access, rectification, erasure, restriction of processing, data portability, objection to processing, and the right to withdraw consent at any time (without affecting prior processing). You can also complain to your local supervisory authority.
• India (DPDP Act): access, correction, erasure, grievance redressal, and the right to nominate someone to exercise your rights on your behalf. You can complain to the Data Protection Board of India.
• US state laws: we do not sell your personal information or share it for cross-context behavioral advertising. Depending on your state you may also have access, correction, deletion, and portability rights.

To exercise any of these rights, email support@100xglow.app. Many of them are self-serve: you can delete individual photos from your library, and delete your whole account under Profile → Delete account.

International transfers

We operate from India and our subprocessors process data in the United States, so using 100xglow means your data crosses borders. Those transfers are covered by each provider's data processing agreement, Standard Contractual Clauses, or Data Privacy Framework certification, as applicable.

Minors

100xglow is for adults only. You must be at least 18 to use it. We do not knowingly collect data from minors, and if we discover a minor's account we delete it and its data. If you believe a minor is using 100xglow, contact support@100xglow.app.

AI-generated content

Every image 100xglow produces is AI-generated and is labeled as such in your library. Details are in the AI-generated content notice.

Cookies

100xglow sets only the strictly necessary authentication cookies from Clerk that keep you signed in. There are no analytics, advertising, or tracking cookies. The full list is in our cookie policy.

Changes to this policy

We may update this policy from time to time. The "Last updated" date above always reflects the current version, and continued use of 100xglow after a change means the updated policy applies.

Contact

Privacy questions or requests: email support@100xglow.app or reach us through the support page.