Privacy Policy

Last updated: 31 August 2026

The short version: GalaRay works without an account, and by default everything stays on your device. A few things can send data off it, and all of them are your choice: the AI Content Studio (business details, and for photo-based captions a downscaled copy of the photos, with GPS stripped), AI Branded Wallpaper (your business name, category and brand colours), Cloud Backup (an optional paid feature that copies your projects and photos to your private storage so you can restore them on another device), Live Showcase Links (publishing one project as a public web page that anyone with the link can open), and redeeming a code. Connecting a Google Business Profile is optional and only reads your review link. Separately, and on by default, GalaRay sends usage analytics and crash reports so we can see which features earn their place and fix what breaks — never your photos, never for advertising. You can switch usage analytics off any time in Settings → Share usage data. Details below.

Your photos & projects

Every photo you add, project you save, brand kit, preset, and setting is stored on your device, and the device stays the original — the app keeps working fully offline. Nothing is shared unless you choose to, using your device's share sheet. Photos leave your device only if you switch on Cloud Backup, or use the photo-based captions in the AI Content Studio. Both are described below.

Accounts (optional)

You can use GalaRay without an account, and most people never need one. If you choose to create one — to back up your work or use it on a second device — we store your email address, a display name, and (if you sign in with Apple or Google) whatever basic profile detail they return. Sign-in is handled by Supabase, our authentication and database provider. We never see or store your password: with Apple or Google you authenticate on their screen, and with email your password is stored only as a secured hash by Supabase. You can sign out at any time in Settings → Account, and delete your account and everything stored for it with the Delete account button at the bottom of Settings — see Deleting your data below.

Cloud Backup (optional, paid)

Cloud Backup is off unless you turn it on, and is part of a paid plan. When enabled, your projects, the before/after photos in them, and your brand kit are copied to private storage on Cloudflare R2, with the records describing them held in a Supabase database. Everything is stored in a private area tied to your account: files are never publicly listable or browsable, and access is granted per file for a few minutes at a time. Database access is protected by row-level security, so one account cannot read another's data. Your device keeps its own copy either way — backup is a duplicate, never a substitute. Backup works in BOTH directions, and both are deliberate taps: nothing is uploaded until you tap Upload to Cloud, and nothing is downloaded until you tap Download from Cloud. A save copies your projects including the finished before/after image, so another device shows the same edited picture after a download. Deleted work is kept for 30 days so you can recover it, and is never downloaded back onto a device while it is deleted. Your settings and preferences — including whether you have turned usage analytics off — travel with your account, so a choice made on one device is the choice on the next one rather than reverting to the default. Everything to do with backup lives in one place — Settings → Cloud Save, which is also where you turn it off — and you can delete what is stored with Delete account (at the bottom of Settings) — see Deleting your data below.

Live Showcase Links (optional)

A Live Showcase Link publishes one of your projects as a public web page on galaray.app, so you can send a customer a link instead of a pile of photos. It happens only when you tap the button on that project. Nothing is published in the background, and no project becomes public until you choose it.

What goes on the page: the before/after photos in that project, the project name, and the brand details you chose to put there — your logo, your business name, your review link, your website and your social links. Each of those appears only if you filled it in, under Brand Kit → Live Showcase Settings, and each brand kit keeps its own set. The finished before & after images are uploaded to your private cloud storage to be served from there, and they count toward your Cloud Save storage until the link is turned off.

Anyone with the link can open the page. There is no password and no sign-in. The address ends in a random 10-character id, so the page is not listed anywhere, and it is served with instructions telling search engines not to index it — but unlisted is not secret. If your customer forwards the link, whoever receives it can view the page.

How long a link lasts depends on your plan. On Free, your one link works for 30 days, then the page goes dark on its own; rebuilding it resets the 30 days and keeps the same address. On Pro (up to 15 at a time) and Business Pro (unlimited), links are permanent — they stay live until you turn them off, and deleting your account takes them all down. You can turn a link off at any time from the same sheet, or delete links from the Live Showcase Links list in My GalaRay, and deleting the project turns its link off immediately.

Visitors are not tracked. A published page loads nothing from anywhere else — no fonts, no CDNs, no analytics, no trackers — so nothing about the person viewing it is recorded or sent to us or to anyone else. We cannot tell you who opened your link, because we don't know.

The photos are of your customer's property, so ask them first. Publishing a Live Showcase Link is your decision, and it is on you to have your customer's agreement before you put photos of their home or business on a page anyone with the link can open. If you are not sure they'd be happy with it, don't publish it.

Camera, photo & motion access

Camera access is used for the Ghost Camera and for taking photos inside the app. Photo-library access is used only for the photos you pick. Motion & orientation access is used only by Ghost Camera, to sense when you're holding the phone steady. Camera frames are analysed on your device and are never transmitted.

AI Bulk Import, Ghost Camera & location data

AI pair-matching, auto-align, and Ghost Camera's alignment all run on your device — no cloud AI is involved in any of them. If your photos contain EXIF details (time, GPS location, or the direction the camera was facing), those are read locally to match before/after pairs, sort your work, and help Ghost Camera line up. Location: with the guided Ghost Camera turned on, GalaRay also records where a photo was taken — coordinates, altitude and compass heading — while the camera is open, so it can walk you back to the exact spot for the after. That is stored on your device alongside the photo. Spatial tracking, if you leave it on, additionally uses the camera to work out how the phone moves through the room while the guided camera is open, and how high it is above the floor — that height is stored with the photo so a later after can be shot from the same level. No map of your surroundings is saved and no camera frames are kept. All of this data never leaves your device: it is not uploaded, not included in Cloud Backup, and not shared with anyone.

AI Content Studio

This runs in the cloud, and only while you are using it. To write captions and generate poster artwork, GalaRay sends your business name, business category, phone number (if you've entered one), brand colour, and any style request you type to our service, which passes them to OpenAI to produce the words and artwork. If you use the photo-based caption option, a downscaled copy of the before/after photos you're working on is also sent so the AI can describe the actual work shown — any GPS or location data is stripped before sending, and your full-resolution originals never leave your device. Poster artwork is assembled on your device by placing your own photo onto the returned design. We don't store any of this, and if you'd rather send nothing at all, simply don't use the AI Content Studio.

AI Branded Wallpaper

When you generate a backdrop for My GalaRay, your business name, business category, brand colour and the style you picked go to our service and on to OpenAI to produce the artwork. No photos are sent for wallpapers, and your logo is placed onto the result on your own device.

Connecting a Google Business Profile (optional)

GalaRay can connect to your Google Business Profile so it can read your review link and fill it in for you. The connection is entirely optional and only happens if you tap Connect yourself — nothing is linked in the background, and you can use the rest of the app forever without connecting anything.

We never see your password. You sign in on Google’s own consent screen. What comes back to us is an access credential (a token), which we store on our server — never in the app on your phone — held against a random device identifier, not against your name.

Reading your review link is all the connection does today. GalaRay does not post anything, read your direct messages, browse your feed, or download follower lists. You can disconnect at any time — from Settings inside GalaRay, or from Google’s own “apps and permissions” page — which deletes the stored token.

Publishing from GalaRay to Instagram, Facebook, TikTok, YouTube, Pinterest or LinkedIn is not built yet. The buttons in Studio only remember which platforms you picked, and that choice stays on your device.

Scheduled posts

Scheduled posts stay on your phone. When you line one up in Studio, the date, time, platforms and caption are saved in the app’s own storage on that device — nothing is sent to us, and no media is stored anywhere. Automatic publishing isn’t live yet, so a scheduled item is a reminder to yourself, not something we send.

Post statistics

The Performance panel in Studio counts the posts you’ve made in GalaRay, using data already on your phone. We don’t request any figures from any social platform, we collect nothing about the people who view or interact with your posts, and we don’t build profiles of anyone.

Rating & feedback

GalaRay occasionally asks how it is working out for you — after your first saved before & after, after your first published Live Showcase page, and near the end of a free trial. Answering is optional, and each of those three moments asks at most once. If you give a rating we store the star rating, any comment you type, which of the three moments prompted it, your plan tier, your platform and app version, and a random device identifier. We do not attach your name, email, photos or project content, and the comment is only what you choose to type.

A comment goes only to us and is never published anywhere. Ratings of four or five stars are additionally offered Apple's or Google's own review sheet, which is shown by the operating system — if you write a review there it is public on the store listing, and it is handled entirely by Apple or Google under their own privacy policies. We cannot see what you write in that sheet, and we never see it. Declining the prompt, or closing it, sends us nothing at all.

Payments

Subscriptions and one-time purchases are handled by the app store you bought them from — the Apple App Store on iPhone and iPad, or Google Play on Android. We never receive or store your payment details: no card number, no billing address, nothing. The store tells the app only whether a purchase is active. Each processes billing under its own privacy policy — Apple’s or Google’s.

Third parties & tracking

The app contains no advertising trackers, and we never sell your data. To improve GalaRay we collect usage analytics — which screens and features get used, and when — via PostHog, and crash & error reports via Firebase Crashlytics (Google). Neither ever receives your photos, and neither is used for advertising. While you're signed in, usage events are linked to your account; when you're not, they're linked to a random device identifier. You can turn usage analytics off at any time in Settings → Share usage data, and nothing further is sent from that moment. Crash reports are separate and stay on, because they are how we find and fix the bugs that could cost you your work — they contain a stack trace, your device model and OS version, and no photos or project content. The other third parties involved are: OpenAI, used only to generate AI Content Studio captions and artwork from the business details (and, for photo-based captions, the downscaled photos) described above; Supabase, which provides sign-in and the database behind optional accounts and Cloud Backup; Cloudflare, which stores backed-up files, serves any Live Showcase page you publish, hosts the temporary media link used when publishing, and runs the service that talks to OpenAI; Apple and Google, if you choose to sign in with them, or if you accept their review sheet after rating the app; and the social platforms you personally choose to connect — Google Business Profile, Instagram and Facebook (Meta), TikTok, YouTube, Pinterest and LinkedIn — which receive only the post you asked GalaRay to publish. A social account you connect is associated with your GalaRay account rather than the single handset you connected it on, so signing in on another device shows it as already connected and can post from it — disconnecting is in Studio and removes it everywhere. Each is used solely to deliver the feature it belongs to, and only when you use that feature.

Children

GalaRay is intended for business use and is not directed to children under 13.

Deleting your data

You can do it yourself, in the app, without asking us. Open Settings, scroll to the bottom and tap Delete account. That removes your account and everything stored for it on our servers: the projects and before/after photos in Cloud Backup, your Saved Shots, your brand kit and logo, and the settings that travelled with them.

What it does not touch is the copy on your own phone. Your projects and photos live on the device first — backup is a duplicate, never a substitute — so deleting the account leaves them exactly where they are. Delete individual projects and photos inside GalaRay, or remove everything at once by deleting the app.

If you never made an account, there is nothing for us to delete. Without an account nothing you make is on our servers at all, so uninstalling the app removes every trace of it.

Deleted projects are recoverable for 30 days, then gone. When you delete a project that was backed up, we mark it as deleted rather than destroying it immediately, so a mistake is fixable — it appears under Recently Deleted in the restore flow with the days remaining, and a restore never brings it back on its own. After 30 days the marker and the files behind it are purged for good.

Prefer to ask us? Email support@galaray.app from the address on the account and we'll delete it for you. You don't have to give a reason, and we won't ask for one.

Changes & contact

We may update this policy as the app evolves. Continued use means you accept the current version. Questions, or anything you'd like explained? Contact us at support@galaray.app. To delete your data, see Deleting your data above — you can do it yourself in Settings, or ask us and we'll do it.