gloria.
Privacy at Gloria

Privacy Policy

How Gloria handles your photos, generated images, account information and purchases on iPhone and Android.

Effective and last updated: September 26, 2026

At a glance

  • Gloria processes only the photos you choose, to create the makeup, hair, retouch and cosmetic previews you ask for.
  • Your photos and generated images are deleted from our servers automatically within 24 hours. Saved looks stay on your device.
  • No sign-up is needed. We do not ask for your name or email address.
  • The app contains no advertising, analytics or tracking SDKs. We do not sell personal information.
  • We never use facial images for identity recognition, biometric identification or medical diagnosis.

1. Scope and data controller

This Privacy Policy applies to the Gloria: Your Glow Up app (“Gloria”) for iPhone (bundle identifier co.devello.gloira) and Android (package name co.devello.gloria), and to the related backend services (together, the “Service”). Gloria is published and operated by Devello Bilişim ve Yazılım Hizmetleri Ticaret Limited Şirketi (“Devello,” “we,” “us,” or “our”), which is the data controller for personal information processed through the Service.

Gloria provides visual simulations of cosmetic appearance, makeup, hair and retouching. Results are illustrative previews and are not medical advice, diagnosis, treatment recommendations or guaranteed real-world outcomes.

2. Information we collect

CategoryExamplesWhy we need it
Account identifiersAn anonymous account identifier created on first launch and a device token stored in the iOS Keychain or Android Keystore. If you choose Sign in with Apple (iPhone only): Apple’s stable user identifier. We request no name and no email address from Apple.Keep your free Glow Up and Glow Credit balance, restore credits on a new iPhone, prevent abuse
User contentThe photo you select or capture, the treatment or look you choose, its intensity and edit instructions, and the generated imagesCheck the photo and create, fine-tune and deliver the preview you asked for
Purchase informationProduct identifier, App Store transaction ID or Google Play order ID, purchase date, test or live purchase, Glow Credit balance and credit activityVerify purchases, add credits, prevent duplicate delivery, process refunds and provide purchase support
Technical dataIP address, request time, app version and platform in server logs; generation records (selected treatment, status, timing, quality-check result and whether a credit was used), which contain no imagesOperate and secure the Service, rate-limit abuse, troubleshoot failed generations, show your credit activity
Support informationYour email address and the content of messages you send usAnswer your request

Apple and Google process your payment method and store account. We never receive or store your payment card details. The app contains no advertising, analytics, crash-reporting or tracking SDKs, and we do not use your data to track you across apps or websites.

3. Photos and facial content

Gloria works only with a photo you actively select from your photo library or capture with the camera. Camera or photo access is requested only when you choose that feature, and you can change these permissions at any time in your device settings. The built-in example photo can be used without sharing any photo of your own.

Your photo may contain facial information. We process the image pixels and visible facial regions only to check the photo (for example image quality, a single adult face), keep the person recognisable in the result, and apply the visual change you request. We do not use this content to identify who you are, authenticate you, create a biometric template, search for matching faces, infer sensitive characteristics, serve advertising or make medical decisions. We do not use your photos to train AI models.

AI processing: before your first photo is sent, the app asks for your explicit permission. With it, the photo, the selected edit instructions and the resulting image are transmitted over an encrypted connection to our backend, hosted on Google Cloud in the United States, and to Google’s paid Gemini API, which edits the image and checks its quality. For paid Gemini API services, Google states that prompts and responses are not used to improve its products; limited logging may occur for abuse prevention and legal compliance under Google’s terms. You can withdraw this permission at any time in Settings → Data preferences.

Only upload a photo of another person if they have given you permission. Do not upload photos of anyone under 18.

4. How and why we use information

  • Create the previews, comparisons and edits you request.
  • Maintain your account, free Glow Up, Glow Credit balance and credit activity.
  • Verify App Store and Google Play purchases, add the credits you bought and handle refunds.
  • Reject unsuitable, low-quality, multi-face or under-18 photos.
  • Keep the Service secure and reliable, limit abuse and fix problems.
  • Respond to support, privacy and legal requests, and comply with legal obligations.

Depending on your location and the activity, we rely on performance of the service you request, your explicit consent (for sending your photo to the AI provider), our legitimate interest in securing the Service, and compliance with legal obligations. Withdrawing consent does not affect processing that took place before you withdrew it.

5. Service providers

We share information only as needed to run the Service or comply with law:

  • Google LLC – Google Cloud / Firebase: hosts our backend, database and temporary file storage in the United States.
  • Google LLC – Gemini API: edits the photo you chose and checks the result’s quality.
  • RevenueCat, Inc.: validates App Store and Google Play purchases and tells our server what you bought. It receives your anonymous account identifier and purchase details, never your photos.
  • Apple: App Store distribution, in-app purchases and Sign in with Apple.
  • Google Play: Android distribution and in-app purchases.
  • Professional and legal recipients: advisers or authorities when reasonably necessary to comply with law, protect users or investigate abuse.

Providers may use the information only to provide their services to us and must protect it under contractual and legal obligations. We do not sell personal information or share it for advertising.

More information: Google Privacy Policy · Gemini API Terms · RevenueCat Privacy Policy · Apple Privacy Policy.

6. Retention and deletion

  • Photos and generated images on our servers: deleted automatically within 24 hours after they are uploaded or created, whether or not the generation succeeded.
  • Saved looks: stored only on your device until you delete them or the app.
  • Account, credit balance and credit activity: kept while your account exists. Purchase records are kept for as long as accounting, tax and consumer-protection law requires, even after other data is deleted.
  • Server logs: kept for up to 30 days.
  • Support emails: normally kept for up to 24 months after the request is resolved.

When you ask us to delete your account, we remove or de-identify your information unless we must keep it to comply with law, complete a transaction, resolve a dispute or protect the security of the Service.

7. Your choices and rights

  • Settings → Data preferences → Withdraw AI processing permission: stops sending photos to the AI provider and deletes the server copies of your photos.
  • Settings → Data preferences → Delete server copies now: deletes your photos and results from our servers immediately.
  • Settings → Delete all my data: deletes your saved looks on this device and your photos and results on our servers.
  • Settings → Delete account: permanently deletes your account, credit balance and Sign in with Apple link, your photos and results on our servers and your saved looks on this device, subject to the purchase records described above. Unused credits cannot be restored. You can also email contact@devello.co with the Account ID shown in Settings.

Depending on where you live, you may also have the right to access, correct, delete, restrict or object to the processing of your information, to data portability and to withdraw consent, including under Türkiye’s Personal Data Protection Law No. 6698 (KVKK) and the EU/UK GDPR. Contact us to exercise these rights; we may need to confirm that the request relates to your account, and we answer within the period required by law.

You may also complain to the data protection authority where you live. In Türkiye this is the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).

8. Security and international transfers

We use reasonable technical and organisational safeguards, including encrypted connections, restricted access to production systems, credentials kept only on the server, server-side purchase verification and automatic deletion of photos. No online system can guarantee absolute security.

Our backend runs on Google Cloud in the United States, and our providers may process information in other countries where they operate. Your photo is transferred abroad only after you give the explicit permission described in section 3. For other transfers we rely on recognised safeguards such as our providers’ data processing terms and standard contractual clauses.

9. Age requirement

Gloria is for adults aged 18 and over and is not directed to children. Photos in which the person appears to be under 18 are rejected, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact us so we can delete it.

10. Changes to this policy

We may update this policy when the Service, our providers or legal requirements change. We will publish the current version here and update the date above, and we will also notify you in the app if a change materially affects your rights or how we use your information.

11. Contact

Devello Bilişim ve Yazılım Hizmetleri Ticaret Limited Şirketi
Email: contact@devello.co

See also our Terms of Use.