Privacy Policy.

• Using the web app or Telegram Mini App requires an account: email + password, Google, Apple, TikTok, or your Telegram identity.
• To redesign a space, the photo you upload and any text you write are sent to AI model providers (through OpenRouter, kie.ai and, for HD upscale, WaveSpeed) to generate results and run safety moderation. We do not use your photos to train our own models.
• Our servers and database run in Germany (Hetzner, Nuremberg). Photos and results are stored in private Cloudflare R2 storage and are not public unless you choose to share a design on Discover.
• We do not receive money for your personal data, and we do not collect precise location, contacts, or browsing history.
• If you arrive from a TikTok or Meta ad, we share a few identifiers with that platform when you sign up or buy, to measure our ads, and the platform may use them for its own purposes (§16A). This is off unless you turn it on: ad measurement is opt-in in every region, separate from analytics. We treat this disclosure as "sharing" for cross-context behavioural advertising and, out of caution, as a "sale" of personal information under California's CCPA/CPRA. You can opt out at any time: switch off Ad measurement (or choose Reject all) in "Your privacy choices" in the footer or your account menu, or turn on Global Privacy Control.
• You can delete your account at any time. A small amount of pseudonymised data is kept afterwards to prevent abuse; §12 says exactly what.
• Web payments are handled by Dodo Payments as Merchant of Record, and Mini App payments by Telegram Stars; we never see or store your card number.

The controller of your personal data is HomeGlow (sole entrepreneur), Republic of Armenia. For any privacy question or request, write to support@homeglow.style.

a. Account data. If you sign up with email, we store your email address and an Argon2 password hash (never your plain-text password). If you sign in with Google or Apple, we store the provider's account identifier and, if the provider shares it, your email address. If you sign in with TikTok, we store your TikTok open id and, if available, your TikTok display name and profile picture. If you sign in through the Telegram Mini App, we store your Telegram user id, taken from Telegram's signed initData payload, which our server verifies before trusting it. We also store the display name and language you set.

b. Your content. Photos you upload (the "before" image), any mask or reference image you add, the designs generated from them (the "after" results), and any text prompt or refine instruction you type.

c. Discover. If you choose to share a design on Discover, the shared result, whether you also chose to include your before photo, and the reactions, saves and reports made on community designs.

d. Usage, credits and purchases. Your generation history, credit balance, the cost of the AI calls your generations used, and your subscription or pass status. For purchases: subscription and customer identifiers from Dodo Payments, or the Telegram Stars payment record.

e. Technical data. Your IP address (used for rate limiting and abuse prevention), basic device and browser information, a web push endpoint if you turn on notifications, and, when error monitoring is enabled, error diagnostics. If you arrive from a TikTok or Meta ad we also keep that ad's click id, the campaign parameters and the time of the click in your browser and, once you have an account, on your account. Your answer to the cookie banner is kept in your browser, and is also saved on your account when you sign up, when you start a web checkout, or when your browser sends a Global Privacy Control signal (§16A).

We do not collect precise location, contacts, health data, card numbers, or your general web browsing history.

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases under Article 6(1) of the GDPR (and the UK GDPR):

Where we rely on legitimate interests, you can object (see §15). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects; automated moderation only decides whether a given image or prompt can be processed.

We do not receive money for your personal data. We share it only with the recipients below, and only as needed for the purpose shown. Most of them process it on our behalf. Dodo Payments acts as an independent controller of your payment data (§13). The ad-measurement recipients, TikTok and Meta, are third parties: they act as independent controllers for their own purposes, not as our service providers or processors. They receive hashed identifiers and your ad click data to measure our ads and may also use them for their own purposes described in their privacy notices. Because of that, we treat this disclosure as "sharing" for cross-context behavioural advertising and, out of caution, as a "sale" of personal information under the CCPA/CPRA, even though no money changes hands. This happens only if you turn on ad measurement, and §16A explains how to turn it off again.

We may also disclose data where required by law, to enforce our Terms, or to protect the rights and safety of our users.

• Sharing a design on Discover is optional and only happens when you choose it and give your consent. A shared design is reviewed before it appears.
• Once published, the design is public on the web: anyone can see it without an account, it is listed in our sitemaps, submitted to search engines (including through IndexNow), and may be indexed and shown in search results. Its page includes descriptive text generated from the design's style and room type, and translations of that text into other languages.
• Including your original before photo is a separate, optional choice. If you include it, it is shown only to people signed in to HomeGlow, never to signed-out visitors or search engines.
• Your name, email and account details are not shown on the public page.
• You can withdraw your consent at any time by removing the design from Discover, or by writing to support@homeglow.style. We then take the page down. Search engines and other services may keep cached copies for a while after removal; we ask search engines to refresh the page, but we do not control their caches.

To comply with the law and our providers' policies, HomeGlow automatically moderates inputs, prompts and generated outputs, and blocks content that is sexual, violent, or that may involve minors, among other categories. Designs shared on Discover can also be reported by other users and reviewed by us. See the Terms of Service for the full acceptable-use rules.

Photos and prompts you submit are sent to the third-party AI providers listed in §5 to produce your results. Do not upload photos containing content you are not comfortable processing through third-party AI services, or that you do not have the right to use.

We do not use your photos, prompts or results to train our own AI models.

Image and text requests we send through OpenRouter are set to its "deny data collection" option, so OpenRouter routes them only to model providers that state they do not collect or train on prompts and outputs. That restriction relies on each provider's published policy as recorded by OpenRouter and covers image and text requests only. It does not cover room-reveal videos requested through OpenRouter, and it is not the same as zero retention: a provider may still keep data for a limited period (for example, up to 30 days for abuse monitoring) or for legal reasons.

kie.ai and WaveSpeed are separate from OpenRouter and handle your data under their own terms and data policies, with the retention described in §11. We do not control those policies.

Our API, database and background workers run on Hetzner servers in Nuremberg, Germany. The web app is served by Vercel and your photos and results are stored with Cloudflare R2; both are US companies with global networks. Our AI, sign-in, analytics and error-monitoring providers (§5) are mostly based in the United States.

HomeGlow is operated from the Republic of Armenia, which does not have an adequacy decision from the European Commission, and the operator may access data from there. When personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK addendum), or, for US recipients certified under it, the EU-US Data Privacy Framework. You can ask us for more information about these safeguards at support@homeglow.style.

• Account data, generated results and history: while your account is active, until you delete a design or your account.
• Original photos on the free plan: deleted automatically 90 days after upload (the generated result and history entry are kept). Originals of PRO members are kept while the account is active.
• Unclaimed try-first trial accounts: a trial that is not saved to a real account is deleted, with its photos and results, after 7 days.
• Account deletion: you can delete your account at any time from within the app. Your account record, photos, results and Discover posts are deleted immediately; if a storage purge fails in that moment, a nightly job removes the leftovers, in any case within 30 days.
• kie.ai copies: kie.ai states that it keeps the media it processes for up to 14 days and its request logs for up to 2 months, then deletes them. Those copies expire on kie.ai's schedule even after you delete your account.
• Analytics: Google Analytics 4 keeps event data for 14 months; its cookies last up to 2 years.
• Ad click id and ad choice: the click id (with the campaign parameters and the time of the click) is kept in your browser's local storage for up to 30 days after you arrive from a TikTok or Meta ad. Your cookie banner answer stays in your browser until you change it or clear your browser data. Both are also saved on your account as described in §3e and §16A (with a record that an ad event was sent), kept for as long as the account exists, and deleted when you delete it.
• Checkout IP address and browser, for ad measurement: held in a server cache (Redis) for up to 7 days after you start a web checkout, only when ad measurement applies to you (§16A), then deleted. It is not written to our database, but the cache can save its contents to its disk, so a copy may stay on that disk until it expires or is overwritten. TikTok and Meta keep the events they receive under their own retention rules.
• Payment records: kept as long as tax and accounting law requires (see below for Telegram Stars).
• Backups, server logs and provider logs: kept for a limited period before they are overwritten.

When you delete your account we keep the following, on the basis of our legitimate interests in preventing fraud and abuse and meeting our legal obligations:

• Free-allowance ledger. A keyed one-way hash (HMAC-SHA256) of each identity your account used: your canonical email address, Telegram id, Google, Apple or TikTok account id, and device id where one was used. We cannot turn the hash back into your email or id, but we can tell if the same identity signs up again, so that the one-time free allowance cannot be claimed repeatedly by deleting and re-creating an account. It contains no other data and is kept indefinitely, because it only works if it outlives the account.
• Spending records. For each generation that cost us money, the cost and the time it was made, linked to the identity hashes above (not to your name or email), so that our spending limits keep counting spend that already happened. Kept indefinitely. If you delete a single design while keeping your account, this record stays linked to your account id.
• Audit logs. Records of actions our staff take (for example a moderation decision or a refund), which may include your account id. Kept indefinitely for security and accountability.
• Telegram Stars payments. A record of each payment (amount, date, your Telegram user id and Telegram's payment identifiers), kept for accounting, refunds and legal obligations, on the basis of our legal obligations and legitimate interests. It is no longer linked to a HomeGlow account, but it still contains your Telegram user id.
• Suspended accounts. If an account was suspended for breaking our Terms, deleting it clears its personal data but keeps a minimal record (a device identifier and the suspension flag) so the suspension cannot be evaded.

You can object to this processing; see §15.

Web. Web payments are processed by Dodo Payments, which acts as the Merchant of Record. You give your payment details (card or wallet, billing country, tax information, email) directly to Dodo Payments in its secure checkout; we never receive or store your card number. Dodo Payments acts as an independent controller of that payment data under its own privacy notice, linked from its checkout and receipts. We receive only what we need to run your subscription: customer and subscription identifiers, the plan, price and currency, the billing status and the renewal date.

Telegram Mini App. PRO passes in the Mini App are paid with Telegram Stars through Telegram. We receive the pass you bought, the amount in Stars and Telegram's payment identifiers, and never any card details.

We protect data with encryption in transit, private (non-public) storage for your photos, password hashing (Argon2), server-side enforcement of entitlements, and access controls. No method of transmission or storage is 100% secure.

Depending on where you live (for example in California under the CPRA), and in any case if you are in the EEA, UK or Switzerland, you have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected (rectification);
• have your data deleted (erasure), which the in-app account deletion does directly;
• receive the data you gave us in a portable format (portability);
• object to processing based on our legitimate interests;
• ask us to restrict processing in certain cases;
• opt out of the "sale" and "sharing" of personal information (which we treat the ad-measurement disclosure described in §16A as being): switch off Ad measurement (or choose Reject all) in "Your privacy choices" in the footer or your account menu, or turn on Global Privacy Control. This is already off until you turn it on. You do not need an account to do this, and we do not treat you differently for using it;
• withdraw any consent you gave (for example for Discover, analytics or ad measurement) at any time, without affecting processing that happened before; and
• lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work, or where you think your rights were infringed.

To exercise a right, write to support@homeglow.style. We may need to confirm your identity first, and we will reply within one month.

Strictly necessary storage. The web app keeps your sign-in session (access and refresh tokens) and a few settings, such as your language and your cookie choice, in your browser's local storage, and a short-lived upload token in session storage. The Telegram Mini App keeps its session the same way, under a separate key. These are needed for the Service to work and are not used for tracking. Signing out removes the session.

Google Analytics 4. On homeglow.style we use Google Analytics 4, provided by Google, which acts as our processor, to measure which pages are visited and how the site is used. It sets the cookies _ga and _ga_* (a random identifier, kept for up to two years) and receives page-view and interaction events such as paywall views, paywall dismissals and purchases (no sign-up or sign-in events). Google Analytics 4 does not log or store IP addresses. We do not use Google advertising features, and advertising storage, ad user data and ad personalization are always denied.

We use Google Consent Mode. If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies stay off until you turn on Analytics in the cookie bar; if you do not, Google receives only cookieless pings without a persistent identifier. Elsewhere, analytics cookies are on by default. Your analytics choice is separate from your ad-measurement choice (§16A) and is stored in your browser (hg_consent_v1); you can change it at any time: Cookie settings. Deleting the _ga cookies in your browser also resets your identifier.

What this is. If you arrive at HomeGlow from a TikTok or Meta (Facebook or Instagram) ad, we keep the ad's click id (the TikTok ttclid or Meta fbclid in the link you clicked), and the campaign parameters and the time of the visit, in your browser's local storage for up to 30 days. When you then create an account or start a PRO subscription on the web, our servers send that one platform a sign-up or purchase event, so we can measure whether our ads work. An event is only sent while the click is recent: by default within 30 days of the click (a limit we can change, but never above 90 days). HomeGlow loads no TikTok or Meta pixel, script or cookie; the events are sent from our servers. Nothing is sent to a platform you did not arrive from. Only the first purchase of a subscription is reported (not renewals), and Telegram Stars and mobile app purchases are not reported.

What is sent. A one-way hash (SHA-256) of your email address (for a purchase, the email on your account or, if it has none, the one you gave at checkout); a one-way hash of your HomeGlow account id; the ad click id (for Meta, with the time it was recorded); your IP address and browser user agent; the address of the HomeGlow page without any query string; the event type and time; and, for a purchase, its value and currency. We do not send your name, photos, designs or prompts.

Where the IP address comes from. For a sign-up it is the IP address and browser of your sign-up request. A purchase is confirmed by our payment provider, which has neither, so when you start a web checkout we keep the IP address and browser of that request in a server cache (Redis) for up to 7 days, solely to attach them to the purchase event. They are not written to our database, but the cache can save its contents to its disk, so a copy may stay on that disk until it expires or is overwritten.

What stays on your account. When you create an account, the click id, the campaign parameters, the time of the click, your ad choice (with the version of the cookie text you answered and when) and a record that a sign-up or purchase event was sent for the account (which platform and which event, so the same event is never sent twice) are saved on the account and kept for as long as it exists. They are deleted when you delete your account, including the minimal record we keep for a suspended account (§12).

When it is sent. Only if you turned on Ad measurement. It is opt-in in every region, including outside the EEA, UK and Switzerland, and it is a separate choice from analytics: accepting or declining Google Analytics cookies does not turn it on or off, and nobody is opted in by default. In the cookie bar you can switch Analytics and Ad measurement independently, or choose Accept all or Reject all. If you accepted the earlier combined cookie bar, your analytics choice was kept but ad measurement stays off until you turn it on, and the bar asks you again. Nothing is sent if you have not turned it on, if you declined, or if your browser sends Global Privacy Control, which we honour as an opt-out of this sharing. We treat this disclosure as a "sale" and "sharing" of personal information under the CCPA/CPRA; you can opt out of it at any time with the choices below.

Your choice. You can change it at any time: Cookie settings (or "Your privacy choices" in the footer of our pages and in your account menu) reopens the cookie bar with its two switches, and what you chose before stays in place until you give a new answer. Switching Ad measurement off stops future events; events already sent stay with the platform, so write to support@homeglow.style if you want us to ask them to delete them. We record your latest choice on your account when you sign up and each time you start a web checkout, and a purchase is reported according to it.

Who receives it. TikTok and Meta receive this data (§5). We send it to them to measure our own advertising. They are third parties and act as independent controllers for their own purposes, not as our service providers or processors; they handle it under their own terms and privacy notices. We do not receive money for it, but because they may use it for their own purposes we treat the disclosure as a "sale" and as "sharing" (§16A below).

California (CCPA/CPRA) disclosure. In the last 12 months, and only for people who turned on Ad measurement, we sold or shared the following:

• Categories of personal information: identifiers (a hashed email address, a hashed account id, ad click ids, and your IP address and browser user agent at checkout) and commercial information (the purchase event and its value).
• Categories of third parties: advertising platforms (TikTok and Meta).
• Business purpose: measuring our own advertising.
• Consumers under 16: we do not sell or share the personal information of consumers under 16. We have no actual knowledge that we do, and HomeGlow is not directed to children (§17).
• How to opt out: use "Your privacy choices" in the footer or your account menu, switch off Ad measurement in the cookie bar, or turn on Global Privacy Control. No account is needed, and we do not treat you differently for opting out.

HomeGlow is not directed to children. You must be at least 13 years old, or the age of digital consent where you live if that is higher (up to 16 in some EU countries), to create an account or use the Service. Purchases may be made only by adults (the age of majority where you live). We do not knowingly collect personal data from children below the minimum age. If you believe a child has provided us data, contact support@homeglow.style and we will delete it.

We may update this policy; we will change the effective date above and, for material changes, provide notice in the app.

Questions or requests: support@homeglow.style · HomeGlow (sole entrepreneur), Republic of Armenia. Governed by the laws of the Republic of Armenia (see the Terms of Service), without prejudice to the data protection law that applies to you.