# GlowReelAI Google Play Data Safety Record

Last reviewed: 2026-09-14

This record is the source checklist for the Google Play Console Data safety form. It is based on the current Android and Flutter implementation. Reconfirm it before each release if the app, API, SDKs, or service providers change.

## Data collected

| Google Play category | Data item | Required to use app | Purpose | Retained or processed off device |
| --- | --- | --- | --- | --- |
| Personal info | Email address | Optional. Only when a user chooses email login. | Account management and app functionality. | Yes, sent to the login service; cached locally after login. |
| Personal info | Password | Optional. Only when a user chooses email login. | Authentication and app functionality. | Sent to the login service when submitted. Do not retain it in app storage. |
| Photos and videos | User-selected photos | Optional. Only for photo-to-video creation. | App functionality. | Yes, uploaded to the generation service after the user starts a generation. |
| Other user-generated content | Prompts, selected settings, content-report details | Prompt/settings required for the selected creation request; reports optional. | App functionality, safety, and support. | Yes, sent to the API with the requested generation or report. |
| Photos and videos / Other user-generated content | Generated images and videos; generation history | Created by use of the app. | App functionality and account history. | Yes, returned and retrievable through cloud generation history. |
| Device or other IDs | App-generated device ID, anonymous ID, account ID | Required for guest account operation. | App functionality, account management, security, and fraud prevention. | Yes, used with the API; cached locally. |
| App activity | Reward-claim and credit-balance records | Created by use of the app. | App functionality and account management. | Yes, retrieved from and updated through the API. |
| Diagnostics | IP address and standard server connection logs | Required for any network request. | Security, fraud prevention, and troubleshooting. | Yes, received by service infrastructure. |

## Data not collected by the current app

- Android Advertising ID or other advertising identifiers
- Third-party advertising or marketing SDK data
- Precise location
- Contacts, calendar, SMS, call logs, or microphone recordings
- Payment-card, health, or fitness data

## Console answers to verify

- The app collects data: **Yes**.
- The app shares data with third parties for their independent purposes: **No**, based on the current app implementation. Hosting, upload, and API infrastructure process data only to provide GlowReelAI.
- Data is encrypted in transit: **Yes** for the configured GlowReelAI HTTPS API and upload flow. Confirm any future upload endpoint also uses HTTPS before submission.
- Users can request deletion: **Yes**. Public URL: `https://glowreelai.com/delete-account.html`.

Do not mark a category as not collected if a future SDK, API endpoint, analytics tool, advertising service, login method, payment provider, or moderation vendor receives it.