HijabHub App Privacy Policy

1. Information Processed by the App

Information stored primarily on your device

The App may store the following locally on your device:

• Editable hijab projects, layers, drawing objects, colors, materials, and project names
• Imported fabric, trim, accessory, pattern, or other design images that you choose to add to a project
• App preferences, language settings, and an optional creator name
• AI-generated images that you intentionally add to a project
• A pending AI task identifier and brief settings, linked to the signed-in account, so the App can query the same request after interruption; this recovery record does not include the original uploaded images

Local projects are not automatically uploaded to a Luveila cloud library. A design image is uploaded when you intentionally publish the current canvas to the HijabHub community.

Account and community information

If you create a HijabHub account or use the community, we process:

• Your email address, nickname, password hash and account creation time
• Hashed session tokens and single-use password-reset token records with expiration times
• Community work images, titles, descriptions, tags and comments you choose to publish
• Reports you submit and users you choose to block
• Technical information used for security, rate limiting and troubleshooting, such as request time, service status and error information

Community work, nickname, descriptions, tags and comments are visible to users who have access to the HijabHub community. New work may remain in a moderation queue until approved. Your email address, password hash, session tokens, reset tokens, reports and block list are not included in public community responses.

Information processed when you use AI features

When you request AI visualization, virtual try-on, or AI refinement, the App may send:

• Your selected design image or sketch
• Your prompt and design instructions
• Design information such as color, material, viewing angle, and selected generation settings
• For virtual try-on, the portrait you select
• Your selected photo-enhancement, facial beauty, identity-protection, and edit-region settings
• Technical request information needed to deliver and protect the service, such as request time, service status, and error information. Hosting and network providers may record connection information, including IP addresses, under their own logging settings.

Your portrait may contain facial information. We use it to provide the visual editing or virtual try-on that you request. The App does not use the portrait to identify you against a face database, authenticate your identity, or create a Luveila facial-recognition profile.

Subscription and purchase information

For subscriptions and consumable AI-credit purchases, we process an account-binding token, Apple's transaction and original-transaction identifiers, product and applicable subscription-group identifiers, verification environment, purchase and applicable expiration dates, purchased quantity, signed transaction dates, and any revocation information returned by Apple. These records and the credit ledger are linked to your HijabHub account to verify delivery, restore eligible subscription access, calculate available and reserved credits, process refunds and prevent duplicate delivery or reassignment. Apple processes payment; the App does not receive your full payment-card details.

Information you provide to support

If you contact us, we may receive your email address, message, device and app details, screenshots, and any other information you choose to provide.

2. How We Use Information

We process information to:

• Operate drawing, saving, exporting, AI visualization, and virtual try-on features
• Create and secure accounts, authenticate sign-ins and reset passwords
• Verify Apple purchases, restore eligible subscriptions and maintain account-linked access and credit balances
• Publish community content you choose to share and deliver comments
• Process reports, user blocks, account deletion and community safety actions
• Return generated or edited images to your device
• Apply only the photo and facial adjustments you select
• Protect the service against abuse, excessive automated requests, and security threats
• Diagnose failures and provide customer support
• Comply with applicable law and enforce our terms

We do not use your local design projects for advertising. The current release does not contain third-party advertising or cross-app advertising tracking.

3. When Information Leaves Your Device

Ordinary local drawing and project editing do not require uploading the full project to Luveila.

Information leaves your device when you create or use an account, buy credits or a subscription, restore a subscription, publish or interact with community content, request a password reset, use AI visualization or virtual try-on, or contact support. Purchase identifiers are sent to Luveila's backend for verification with Apple. AI requests are transmitted to Luveila’s backend and then to the provider shown in the App's data-transfer notice.

The AI provider depends on the generation mode you select:

• HD generation uses OpenRouter, which may route requests to downstream model providers. Its handling of information is described in the OpenRouter Privacy Policy. The downstream provider may vary between requests.
• For Creative generation, the App uses Volcengine Ark's Doubao-Seedream-5.0-Pro model. Processing is governed by the Ark Platform Terms and the Doubao Model Service Agreement. Under the Ark Platform Terms, Volcengine states that it will not store or use customer data to train or optimize models without separate consent. The terms also permit processing for automated compliance screening, troubleshooting that you request for a reasonable period, and investigation of data that triggers a model-anomaly alert until the alert is resolved. Detection or support may involve third parties. The applicable provider terms describe processing and any applicable retention periods; they may not specify a fixed period.

Our production backend and related data may be processed by:

• Render Privacy Policy
• Cloudflare Privacy Policy for private R2 storage of community images
• Apple Privacy Policy for App Store purchases and transaction verification

We send password-reset emails through Resend. The destination email address and reset message are sent to that service for delivery.

These providers process information under their own terms, privacy policies, security practices, and retention rules. We do not promise a fixed retention period for data processed by an AI provider. Switching the provider shown in the App requires renewed consent for future AI requests.

We may also disclose information when required by law, to protect users or our rights, or as part of a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We do not sell your portrait, design, or personal information.

4. Storage and Retention

On-device data

Local projects and settings remain on your device until you delete them, clear App data, or uninstall the App, subject to Apple device backup and restore behavior. Exported files and images remain in Photos, Files, backups, or locations you choose until you delete them there.

The original portrait selected for virtual try-on is not automatically saved inside an editable project. Generated results are stored privately on the server to support delivery and recovery. Device copies may also be stored when you deliberately save, export, share, download, or add a result to a project.

Luveila backend

Our backend processes the original uploaded images and instructions to complete the request. It does not store those original images or prompts in AI task records. It privately stores generated result images and technical task information, including the account-linked task identifier, selected provider, credit quote, status, request digest and timestamps, so the same result can be retrieved after disconnection without another generation charge. These records and results remain linked to the active account until account deletion; they do not have a scheduled automatic expiration. Task results are accessible only to the owning account. Operational and security logs follow production hosting settings and applicable legal or security needs; application logs exclude image bodies.

Account and community information is retained while the account or content remains active. Password-reset links expire after 30 minutes; short-lived password-reset rate-limit records use a one-way email hash and expire after 15 minutes. Reports may be retained while they are reviewed and as needed to document safety action. Deleting your account in the App removes the account, community posts and comments, sessions, reset tokens, subscription records, credit balance and ledger, and AI task records from the active store. Private AI results and community media are deleted; temporary storage failures are recorded for retry. Deleting the App or your HijabHub account does not cancel an Apple subscription. You must manage or cancel that subscription through your Apple Account settings. We retain only one-way Apple transaction digests, without the account identifier, to prevent a previously delivered purchase from being granted again. Hosting backups and security records may persist for a limited period where technically or legally required.

AI providers

AI providers may retain request data for periods described in their own policies or required for abuse prevention and legal compliance. Do not upload a portrait if you do not agree to this processing.

5. Your Choices and Rights

You can:

• Avoid online AI features and continue using local drawing tools
• Choose whether to upload a portrait
• Select or disable optional facial beauty adjustments
• Delete saved works in the App
• Delete your HijabHub account and associated community content in the App
• Report a community work or block another community user
• Delete exported images from Photos or Files
• Request information, correction, deletion, restriction, or a copy of personal information where applicable law provides those rights
• Withdraw consent for future processing, without affecting processing already completed lawfully

To make a privacy request, email sales@luveilahijab.com. We may need to verify enough information to locate and securely act on the request. Account-linked AI tasks and results can be located while their account records remain available.

6. Legal Bases for Processing

Where applicable, we process information:

• To provide features you request and perform our agreement with you
• With your consent, particularly when you choose to submit a portrait and selected facial edits
• For legitimate interests such as service security, fraud prevention, troubleshooting, and product reliability
• To comply with legal obligations

7. Portraits and Permission

You must only upload a portrait when:

• You are the person shown; or
• You have clear permission from the person shown to use the image for AI virtual try-on and editing

Do not upload another person’s private image without permission. Do not upload images of children unless you are their parent or legal guardian and the feature is lawful and appropriate in your location.

8. Children's Privacy

The App is not directed to children under 13, or under the higher minimum age required in their country. We do not knowingly collect personal information from a child in violation of applicable law. Contact sales@luveilahijab.com if you believe a child’s information was submitted improperly.

9. International Data Transfers

Luveila, its cloud providers, and AI providers may process information in countries different from yours. Where required, we use contractual or other lawful safeguards for international transfers. Provider locations and safeguards may vary by the service selected for a request.

10. Security

We use reasonable technical and organizational measures designed to protect information, including encrypted network transmission for the production service, access controls, request-size limits, and abuse controls. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this policy when the App, our providers, or legal requirements change. We will publish the revised policy and update the date above. If a change materially affects how portraits or personal information are used, we will provide additional notice where required.

12. Contact Us

Guangzhou Kela Clothing Design Co., Ltd.
Room 404, No. 12 Dekang Road, Tongde Street, Baiyun District, Guangzhou, Guangdong 510407
China
Privacy email: sales@luveilahijab.com
Support email: sales@luveilahijab.com

Return to App Support