Last updated: 31 August 2026
The short version: GalaRay works without an account, and your photos stay on your device by default. A few features send data off it only when you choose to use them: the AI Content Studio (business details, and for photo-based captions a downscaled copy of the photos, with GPS stripped), AI Branded Wallpaper (your business name, category and brand colours), Cloud Backup (an optional paid feature that copies your projects and photos to your private storage so you can restore them on another device), a Live Showcase Link (which publishes one project's photos on a public web page at a link you choose to send), and redeeming a code. Connecting a Google Business Profile is optional and only reads your review link. Separately, and on by default, GalaRay sends usage analytics and crash reports so we can see which features earn their place and fix what breaks — never your photos, never for advertising. You can switch usage analytics off any time in Settings → Share usage data. Details below.
Your photos & projects
Every photo you add, project you save, brand kit, preset, and setting is stored on your device, and the device stays the original — the app keeps working fully offline. Nothing is shared unless you choose to, using your device’s share sheet. Photos leave your device only if you switch on Cloud Backup, or use the photo-based captions in the AI Content Studio. Both are described below.
Accounts (optional)
You can use GalaRay without an account, and most people never need one. If you choose to create one — to back up your work or use it on a second device — we store your email address, a display name, and (if you sign in with Apple or Google) whatever basic profile detail they return. Sign-in is handled by Supabase, our authentication and database provider. We never see or store your password: with Apple or Google you authenticate on their screen, and with email your password is stored only as a secured hash by Supabase. You can sign out at any time in Settings → Account, and delete your account and everything stored for it with the Delete account button at the bottom of Settings.
Cloud Backup (optional, paid)
Cloud Backup is off unless you turn it on, and is part of a paid plan. When enabled, your projects, the before/after photos in them, and your brand kit are copied to private storage on Cloudflare R2, with the records describing them held in a Supabase database. Everything is stored in a private area tied to your account: files are never publicly listable or browsable, and access is granted per file for a few minutes at a time. Database access is protected by row-level security, so one account cannot read another’s data. Your device keeps its own copy either way — backup is a duplicate, never a substitute. Nothing is uploaded until you tap Upload to Cloud, and nothing is downloaded until you tap Download from Cloud. A save copies your projects including the finished before/after image, so another device shows the same edited picture after a download. Deleted work is kept for 30 days so you can recover it, and is never downloaded back onto a device while it is deleted. Your settings travel with your account too, including whether you have turned usage analytics off. Everything to do with it lives in one place — Settings → Cloud Save, which is also where you turn it off. Deleting your account, from the bottom of Settings, removes everything we’ve stored.
Live Showcase Links (optional)
A Live Showcase Link publishes one of your projects as a public web page on galaray.app, so you can send a customer a link instead of a pile of photos. It happens only when you tap the button on that project. Nothing is published in the background, and no project becomes public until you choose it.
What goes on the page: the before/after photos in that project, the project name, and the brand details you chose to put there — your logo, your business name, your review link, your website and your social links. Each of those appears only if you filled it in, under Brand Kit → Live Showcase Settings, and each brand kit keeps its own set. The finished before & after images are uploaded to your private cloud storage to be served from there, and they count toward your Cloud Save storage until the link is turned off.
Anyone with the link can open the page. There is no password and no sign-in. The address ends in a random 10-character id, so the page is not listed anywhere, and it is served with instructions telling search engines not to index it — but unlisted is not secret. If your customer forwards the link, whoever receives it can view the page.
How long a link lasts depends on your plan. On Free, your one link works for 30 days, then the page goes dark on its own; rebuilding it resets the 30 days and keeps the same address. On Pro (up to 15 at a time) and Business Pro (unlimited), links are permanent — they stay live until you turn them off, and deleting your account takes them all down. You can turn a link off at any time from the same sheet, or delete links from the Live Showcase Links list in My GalaRay, and deleting the project turns its link off immediately.
Visitors are not tracked. A published page loads nothing from anywhere else — no fonts, no CDNs, no analytics, no trackers — so nothing about the person viewing it is recorded or sent to us or to anyone else. We cannot tell you who opened your link, because we don't know.
The photos are of your customer's property, so ask them first. Publishing a Live Showcase Link is your decision, and it is on you to have your customer's agreement before you put photos of their home or business on a page anyone with the link can open. If you are not sure they'd be happy with it, don't publish it.
Camera, photo & motion access
Camera access is used for the Ghost Camera and for taking photos inside the app. Photo-library access is used only for the photos you pick. Motion & orientation access is used only by Ghost Camera, to sense when you’re holding the phone steady. Camera frames are analysed on your device and are never transmitted.
AI Bulk Import, Ghost Camera & location data
AI pair-matching, auto-align, and Ghost Camera’s alignment all run on your device — no cloud AI is involved in any of them. If your photos contain EXIF details (time, GPS location, or the direction the camera was facing), those are read locally to match before/after pairs, sort your work, and help Ghost Camera line up. Location: with the guided Ghost Camera turned on, GalaRay also records where a photo was taken — coordinates, altitude and compass heading — while the camera is open, so it can walk you back to the exact spot for the after. That is stored on your device alongside the photo. Spatial tracking, if you leave it on, additionally uses the camera to work out how the phone moves through the room while the guided camera is open, and how high it is above the floor — that height is stored with the photo so a later after can be shot from the same level. No map of your surroundings is saved and no camera frames are kept. All of this data never leaves your device: it is not uploaded, not included in Cloud Backup, and not shared with anyone.
AI Content Studio
This runs in the cloud, and only while you are using it. To write captions and generate poster artwork, GalaRay sends your business name, business category, phone number (if you’ve entered one), brand colour, and any style request you type to our service, which passes them to OpenAI to produce the words and artwork. If you use the photo-based caption option, a downscaled copy of the before/after photos you’re working on is also sent so the AI can describe the actual work shown — any GPS or location data is stripped before sending, and your full-resolution originals never leave your device. Poster artwork is assembled on your device by placing your own photo onto the returned design. We don’t store any of this, and if you’d rather send nothing at all, simply don’t use the AI Content Studio.
AI Branded Wallpaper
When you generate a backdrop for My GalaRay, your business name, business category, brand colour and the style you picked go to our service and on to OpenAI to produce the artwork. No photos are sent for wallpapers, and your logo is placed onto the result on your own device.
Connecting a Google Business Profile (optional)
GalaRay can connect to your Google Business Profile so it can read your review link and fill it in for you. The connection is entirely optional and only happens if you tap Connect yourself — nothing is linked in the background.
We never see your password. You sign in on Google’s own consent screen. What comes back to us is an access credential (a token), which we store on our server — never in the app on your phone — held against a random device identifier, not your name.
Reading your review link is all the connection does today. GalaRay does not post anything, read your direct messages, browse your feed, or download follower lists. You can disconnect any time from Settings, or from Google’s own apps-and-permissions page; disconnecting deletes the stored token.
You can also connect Instagram, Facebook, YouTube and TikTok so GalaRay can publish for you. Each one is optional and connected only if you tap Connect. We ask for the narrowest access that works: permission to publish, and to read the statistics for your own posts. Pinterest and LinkedIn are not supported. Access tokens are stored on our server, never in the app, against a random device identifier — and disconnecting deletes them.
Scheduled posts
When you schedule a post, the plan and the video or image itself are sent to our server so it can publish at the chosen time with your phone closed. We keep the media only for as long as the queue needs it, hand it to the network at the moment of posting, and delete a cancelled item. Your caption, the chosen times and which account it goes to are stored with it. Nothing is scheduled unless you tap Schedule, and you can remove anything that has not gone out yet.
Google Business Profile uploads
If you turn auto-upload on, every image you save in My GalaRay is sent to our server and published to the business location you chose — automatically, without asking again each time. Turning the switch off stops it immediately. GalaRay writes a short description for each photo; if you leave the keywords box empty an AI service (OpenAI) suggests the keywords from your business type and town, which you typed into your Brand Kit. We do not attach GPS coordinates to your photos — Google associates a photo with the business location you picked, and your device's location never leaves the app.
Post statistics
Posts Created counts the posts you’ve made in GalaRay, from data already on your phone. Views, engagement and follower counts are requested from the networks you have connected, for your own account and your own posts only — aggregate totals, never information about individual people. We do not collect anything about who views or interacts with your posts, and we do not build profiles of anyone. Nothing on that panel is estimated: if a network has not given us a figure, we say so instead of showing a number.
Rating & feedback
GalaRay occasionally asks how it is working out for you — after your first saved before & after, after your first published Live Showcase page, and near the end of a free trial. Answering is optional, and each of those three moments asks at most once. If you give a rating we store the star rating, any comment you type, which of the three moments prompted it, your plan tier, your platform and app version, and a random device identifier. We do not attach your name, email, photos or project content, and the comment is only what you choose to type.
A comment goes only to us and is never published anywhere. Ratings of four or five stars are additionally offered Apple's or Google's own review sheet, which is shown by the operating system — if you write a review there it is public on the store listing, and it is handled entirely by Apple or Google under their own privacy policies. We cannot see what you write in that sheet, and we never see it. Declining the prompt, or closing it, sends us nothing at all.
Payments
Subscriptions and one-time purchases are handled by the app store you bought them from — the Apple App Store on iPhone and iPad, or Google Play on Android. We never receive or store your payment details: no card number, no billing address, nothing. The store tells the app only whether a purchase is active. Each processes billing under its own privacy policy.
Third parties & tracking
The app contains no advertising trackers, and we never sell your data. To improve GalaRay we collect usage analytics — which screens and features get used, and when — via PostHog, and crash & error reports via Firebase Crashlytics (Google). Neither ever receives your photos, and neither is used for advertising. While you're signed in, usage events are linked to your account; when you're not, they're linked to a random device identifier. You can turn usage analytics off at any time in Settings → Share usage data, and nothing further is sent from that moment. Crash reports are separate and stay on, because they're how we find and fix the bugs that could cost you your work — they contain a stack trace, your device model and OS version, and no photos or project content. The other third parties involved are: OpenAI, used only to generate AI Content Studio captions and artwork, and AI Branded Wallpapers, from the business details (and, for photo-based captions, the downscaled photos) described above; Supabase, which provides sign-in and the database behind optional accounts, Cloud Backup and code redemption; Cloudflare, which stores backed-up files and runs the service that talks to OpenAI; and Google, only if you choose to connect a Business Profile so GalaRay can read your review link. Each is used solely to deliver the feature it belongs to, and only when you use that feature.
Children
GalaRay is intended for business use and is not directed to children under 13.
Deleting your data
You can do it yourself, in the app, without asking us. Sign in, open Settings, scroll to the very bottom and tap Delete account. That removes your account and everything stored for it on our servers: the projects and before/after photos in Cloud Backup, your Saved Shots, your brand kit and logo, and the settings that travelled with them.
What it does not touch is the copy on your own phone. Your projects and photos live on the device first — backup is a duplicate, never a substitute — so deleting the account leaves them exactly where they are. Delete individual projects and photos inside GalaRay, or remove everything at once by deleting the app.
If you never made an account, there is nothing for us to delete. Without an account nothing you make is on our servers at all, so uninstalling the app removes every trace of it.
Deleted projects are recoverable for 30 days, then gone. When you delete a project that was backed up, we mark it as deleted rather than destroying it immediately, so a mistake is fixable — it appears under Recently Deleted in the restore flow with the days remaining, and a restore never brings it back on its own. After 30 days the marker and the files behind it are purged for good.
Prefer to ask us? Email support@galaray.app from the address on the account and we'll delete it for you. You don't have to give a reason, and we won't ask for one.
Changes & contact
We may update this policy as the app evolves. Continued use means you accept the current version. Questions, or want your account and backed-up data deleted? Contact us at support@galaray.app and we’ll remove it.