Glimora
Sign inPlay free

Privacy Policy

PRIVACY POLICY FOR GLIMORA

Effective Date: June 16, 2025

1. Introduction & Data Controller

Welcome to Glimora (the "Service"). This Service is owned and operated by Akash Bangad, a sole proprietorship registered in Sweden ("we," "us," or "our").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application (the "Site"). As the data controller, we are responsible for your personal data.

  • Legal Business Name: Akash Bangad
  • Address: Östervägen 2A, 169 52 Solna, Sweden
  • Contact Email: privacy@glimora.ai

Please read this Privacy Policy carefully. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

We collect information that you provide directly to us, information that is generated during your use of the Service, and information that we collect automatically.

  • Personal Data: When you register, you voluntarily provide your email address and a chosen username. We also store your password using industry-standard, irreversible hashing techniques.
  • User Content: We collect the content you create and provide while using the Service. This includes prompts, titles, genre selections, story choices, feedback, and ratings.
  • AI-Generated Content: We store the content generated by third-party AI services based on your inputs. This includes story text, illustrations, and audio files, which are stored in our secure cloud infrastructure and associated with your account.
  • Financial Data: All financial information for your subscription (e.g., credit card details) is processed directly by our secure payment processor, Stripe. We do not receive or store your full payment card details. We only receive transaction identifiers and subscription status information from Stripe.
  • Technical & Usage Data (Derivative Data): Our servers and integrated analytics services automatically collect information when you use the Service. This may include your IP address, browser type, operating system, and usage patterns. This helps us understand user behavior and improve the Service.
  • Cookies and Similar Technologies: We use cookies that are essential for the operation of the Service, such as keeping you logged in (session cookies). Our third-party service providers, like Google/Firebase, may also use cookies to provide their services and for analytics purposes. You can control cookie settings through your browser.

3. How We Use Your Information

We use your information for the following purposes, based on the legal ground of fulfilling our contract with you and our legitimate interest in operating and improving the Service:

  • To provide, operate, and maintain the Service.
  • To create and manage your account and authenticate your access.
  • To process your subscription payments via Stripe.
  • To generate story content by sending your inputs to our integrated AI service providers.
  • To save your stories and progress.
  • To display stories you have marked as "Public".
  • To monitor and analyze usage and trends to improve user experience.
  • To communicate with you for support and administrative purposes.
  • To enforce our Terms of Service and prevent fraud or abuse.
  • To comply with our legal obligations.

4. Data Sharing and Third-Party Services

We do not sell your personal information. We only share your data with trusted third-party service providers who perform essential functions on our behalf. Our main categories of service providers are:

  • Cloud Infrastructure & Hosting: We use Google Cloud Platform / Firebase for application hosting, database storage, file storage, user authentication, and analytics. Your personal data and all content are stored within this secure infrastructure.
  • AI Content Generation: We send your prompts and relevant context to third-party AI APIs (such as those provided by Google, OpenAI, and ElevenLabs) to generate text, images, and audio. These providers process the data according to their own privacy policies.
  • Payment Processing: We use Stripe to process all payments. We share necessary transaction data with Stripe to facilitate these payments.

We may also disclose your information if required by law or to protect the rights, property, or safety of ourselves or others. If the business is sold or transferred, your data will be transferred to the new owner to ensure continuity of service.

5. International Data Transfers

Our service providers, including Google, OpenAI, xAI and Stripe, are global companies that may process and store your data in countries outside of the European Economic Area (EEA), such as the United States. When we transfer your data outside the EEA, we ensure it is protected by relying on legal mechanisms such as the EU-U.S. Data Privacy Framework or by entering into Standard Contractual Clauses (SCCs) with our providers, which guarantee a level of data protection compliant with GDPR.

6. Data Security and Retention

We rely on the robust security measures of our infrastructure providers (like Google Cloud) to protect your data, including encryption at rest and in transit. However, no method of transmission over the Internet is 100% secure.

We will retain your data for as long as your account is active or as needed to provide the Service. If you request to delete your account, we will delete your personal information and associated data within 30 days, unless we are required by law to retain it for longer (e.g., for tax or accounting purposes).

7. Your GDPR Rights

As a user, you have rights over your personal data under the General Data Protection Regulation (GDPR). These include:

  • The Right to Access: You can request a copy of the data we hold about you.
  • The Right to Rectification: You can ask us to correct any inaccurate information.
  • The Right to Erasure (Right to be Forgotten): You can request the deletion of your account and personal data.
  • The Right to Restrict Processing: You can ask us to limit how we use your data.
  • The Right to Data Portability: You can request your data in a machine-readable format.
  • The Right to Object: You can object to us processing your data for certain purposes.

To exercise any of these rights, please contact us at privacy@glimora.ai. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

Our Service is not intended for children under the age of 18 (or a higher age threshold where applicable by local law). We do not knowingly collect data from children. If you believe a child has provided us with data in violation of this policy, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date" at the top. We encourage you to review it periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please do not hesitate to contact us:

Akash Bangad Email: privacy@glimora.ai Address: Östervägen 2A, 169 52 Solna, Sweden