AI Light Snap ID Photo Privacy Policy
Updated: June 3, 2026
Effective: June 3, 2026
AI Light Snap ID Photo (hereinafter referred to as the "App") places great importance on the protection of user privacy and personal information. This Privacy Policy is intended to explain to you how we collect, use, store, share, and protect your personal information. Please read this Privacy Policy carefully before using the App.
If you do not agree with any part of this Privacy Policy, please stop using the App. By using the App, you indicate your agreement to this Privacy Policy.
I. Personal Information We Collect
1.1 Information You Actively Provide
(1) Registration and login information: mobile phone number, email address, login password (stored in encrypted form);
(2) Profile information: nickname, profile picture;
(3) Shipping address information: recipient name, contact phone number, province/city/district, detailed address, postal code;
(4) Feedback information: feedback content you submit, contact information, screenshots.
1.2 Information We Collect When You Use Our Services
(1) Photo information: portrait photos you upload for ID photo creation, including original photos and processed ID photos (Note: used only for temporary processing, not permanently stored);
(2) Order information: transaction records for membership orders, print orders, digital orders, etc.;
(3) Payment information: transaction credentials returned by payment channels (WeChat Pay, Apple IAP, etc.);
(4) Membership information: membership type, expiration time, automatic renewal status;
(5) Redemption code usage information: redemption code verification records, membership status before and after redemption;
(6) Device information: operating system type, app version number.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
[Special Note on Facial Data]
We make the following clear statements regarding facial data issues:
■ What facial data does the App collect?
The App does not collect, store, or retain any facial data (Face Data). Photos uploaded by users are only used on the server side for real-time ID photo processing operations. No facial feature data is extracted, stored, or shared.
■ Purpose of facial data use
Uploaded photos are used solely for the single purpose of generating ID photo effects for you (including AI cutout, background replacement, formal wear composition, etc.). Photos are not used for any other purposes, including but not limited to facial recognition, identity verification, advertising push, etc.
■ Is facial data shared with third parties?
Your photos (including original and composite photos) are not shared with any third party. The server only sends photos to the cutout/formal wear composition service interface for processing and does not store or share them in any form.
■ Storage location and retention period of facial data
Your photos are not permanently stored. They are uniformly deleted in the early morning hours after processing is completed. Data cleanup is performed during the early morning hours daily to ensure no photo data remains on file.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
[Special Note on Photo Data]
Photos you upload are only used on the server side for real-time ID photo processing and are uniformly deleted in the early morning hours after processing:
- Original photos: uniformly deleted in the early morning hours after processing
- Composite photos: uniformly deleted in the early morning hours after processing
- Daily early morning: data cleanup is performed to ensure no photo data remains
- Only when you actively choose to save will photos be saved to your device's local storage
We do not collect, store, or retain any facial data (Face Data, biometric data).
1.3 Third-Party Login Authorization Information
When you choose to log in with a third-party account, we will obtain the information you have authorized to share from such third party:
(1) WeChat login: WeChat OpenID;
(2) Apple login: Apple account identifier.
1.4 We do not actively collect your precise location information. Only when you use the print and mail delivery service may you need to select a shipping address, which you actively provide.
1.5 Camera and Photo Album Permissions
The App requires camera permission for taking ID photos and photo album permission for selecting photos from your album and saving ID photos to your album. You may disable these permissions at any time in your system settings. Disabling these permissions will make the related functions unavailable.
II. How We Use the Collected Information
2.1 The information we collect will be used for the following purposes:
(1) Providing you with core services such as ID photo creation, cutout, background color change, formal wear replacement, layout printing, etc. (Note: photos are used only for temporary processing and are uniformly deleted in the early morning hours after processing);
(2) Creating and managing your account, providing login and identity verification services;
(3) Processing your orders, payments, and refund requests;
(4) Providing membership subscription and renewal services;
(5) Providing print and mail delivery services, including address management and logistics delivery;
(6) Displaying advertising content and providing rewarded video unlocking functionality;
(7) Processing your feedback and customer service requests;
(8) Sending service notifications (such as order status, membership expiration reminders, etc.);
(9) Improving our products and service quality;
(10) Complying with legal and regulatory requirements.
2.2 We will not use your personal information for purposes not specified in this Privacy Policy. If we need to change the purpose of use, we will seek your consent again.
III. How We Share, Transfer, and Publicly Disclose Your Personal Information
[Special Note on Photo Sharing]
We solemnly pledge: your uploaded photos (including original and composite photos) will not be shared with any third party.
- Photos are only sent to the cutout/formal wear composition service interface during processing
- They are uniformly deleted in the early morning hours after processing and not stored in any form
- They will not be shared, transferred, or disclosed to any third party
3.1 Sharing
We do not share your personal information with third parties, except in the following circumstances:
(1) After obtaining your explicit consent;
(2) As required by laws and regulations or mandatory requirements of administrative or judicial authorities;
(3) Sharing with our affiliated companies: only to the extent necessary to achieve the service purpose;
(4) Sharing with authorized partners: only to the extent necessary to achieve the service purpose, including:
a. Cutout service provider (such as HiVision): to perform the AI cutout function, we will send your uploaded photos to the cutout service interface for processing. They are uniformly deleted in the early morning hours after processing and not stored in any form;
b. Formal wear composition service provider (such as HiVision): to perform the formal wear replacement function, we will send your photos to the composition service interface for processing. They are uniformly deleted in the early morning hours after processing and not stored in any form;
c. Payment service providers (WeChat Pay, Apple): to complete payment transactions, we will send necessary order information to the payment channels;
d. SMS service providers (such as Twilio): to send verification codes, we will send your phone number to the SMS service interface;
e. Email service providers (Alibaba Cloud Enterprise Email): to send verification emails and notifications, we will send your email address to the email service interface;
f. Print and logistics service providers: to complete print and mail delivery, we will send your ID photos (Note: only those you actively save and submit) and shipping address information to the print service provider.
[Important Note] Sharing with the above service providers is limited to the minimum scope necessary for the service. Photo data is uniformly deleted in the early morning hours after processing, not permanently stored, and not reused.
3.2 Transfer
We will not transfer your personal information to third parties, except in the following circumstances:
(1) After obtaining your explicit consent;
(2) In the event of a merger, acquisition, or asset transfer, we will require the entity receiving your personal information to continue to be bound by this Privacy Policy.
3.3 Public Disclosure
We will not publicly disclose your personal information, except in the following circumstances:
(1) After obtaining your explicit consent;
(2) Based on mandatory requirements of laws, regulations, legal proceedings, litigation, or government authorities.
IV. How We Store and Protect Your Personal Information
4.1 Information Storage
(1) Storage location: except for photo data (photos are uniformly deleted in the early morning hours after processing), your personal information is stored on servers within the territory of the People's Republic of China;
(2) Storage period: unless otherwise provided by laws and regulations, we will retain your personal information only for the period necessary to provide services to you. When the necessary retention period is exceeded, we will delete or anonymize your personal information;
(3) [Special Note on Photo Data] Original photos and composite photos are not permanently stored on the server side. They are uniformly deleted in the early morning hours after processing, with data cleanup performed during the early morning hours daily.
4.2 Security Protection Measures
We adopt the following security measures to protect your personal information:
(1) Data transmission encryption: using encryption protocols such as HTTPS for data transmission;
(2) Encrypted password storage: your password is stored using BCrypt algorithm encryption; we cannot access your plaintext password;
(3) Identity authentication: using JWT tokens and Refresh Token mechanisms for identity authentication, with tokens having validity periods;
(4) Access control: strict permission control for access to personal information, with role-based permission management for backend administration;
(5) Security auditing: recording and monitoring access to and operations on personal information;
(6) Regular backups: performing regular data backups to prevent data loss;
(7) Rate limiting: implementing frequency limits for sensitive operations such as login, SMS sending, and email sending to prevent malicious attacks;
(8) Photo data protection: photo data adopts a temporary processing model, uniformly deleted in the early morning hours after processing, without persistent storage.
4.3 Security Incident Handling
In the unfortunate event of a personal information security incident, we will, in accordance with legal and regulatory requirements, promptly inform you of the basic situation and potential impact of the security incident, the measures we have taken or will take to address it, and recommendations for you to independently prevent and mitigate risks. We will notify you through push notifications, emails, or announcements. When it is difficult to notify each individual, we will do so through an announcement.
V. Your Rights
5.1 Inquiry and Correction
You may inquire about and correct your profile information, including nickname, profile picture, etc., in the "Personal Center" within the App.
5.2 Deletion
You may request us to delete your personal information under the following circumstances:
(1) The processing purpose has been achieved, cannot be achieved, or is no longer necessary for achieving the processing purpose;
(2) We have ceased providing products or services, or the retention period has expired;
(3) You withdraw your consent;
(4) We have processed personal information in violation of laws, administrative regulations, or agreements.
[Photo Data Note] Your uploaded original photos and composite photos have already been uniformly deleted in the early morning hours after processing, so there is no need for and no possibility of applying for deletion. However, if you have any questions about our photo processing, please contact us through the following channels.
5.3 Withdrawal of Consent
You may withdraw the consent you previously granted us by disabling relevant permissions or deleting your account. Withdrawal of consent does not affect the validity of processing activities previously conducted based on consent. After you withdraw consent, we will no longer process your personal information based on that consent, but this does not affect the processing of personal information on other lawful grounds.
5.4 Account Cancellation
You may contact our customer service to apply for account cancellation. After account cancellation, we will cease providing products or services to you and will delete or anonymize your personal information in accordance with the requirements of laws and regulations.
5.5 Obtaining Copies of Personal Information
You have the right to obtain a copy of your personal information. If you need to do so, please submit a request to us through the contact methods set forth in Article IX of this Policy.
5.6 Responding to Your Requests
For reasonable requests from you, we generally do not charge any fees. We will respond within fifteen working days. If you are dissatisfied with our response, you may file a complaint with the cyberspace administration department or the public security department in accordance with the law.
VI. Protection of Minors
6.1 We attach great importance to the protection of minors' personal information. If you are a minor under the age of 18, please use the App under the accompaniment and guidance of a guardian and provide personal information to us only with the guardian's explicit consent.
6.2 We do not actively collect personal information from minors. If we discover that we have collected personal information from a minor without obtaining guardian consent, we will take steps to delete the relevant data as soon as possible.
6.3 Guardians have the right to inquire about, correct, and delete the personal information of minors. To do so, please contact us through the contact methods set forth in Article IX of this Policy.
VII. Cross-Border Transfer
7.1 If you use the App outside the territory of the People's Republic of China, your personal information may need to be transferred across borders to servers within the territory of the People's Republic of China for processing. In such cases, we will ensure that your personal information receives the same level of protection during cross-border transfer as provided under this Privacy Policy.
7.2 We will conduct security assessments for cross-border transfers of personal information in accordance with legal and regulatory requirements and will take necessary security measures.
VIII. Special Facial Data Statement (In Response to Apple App Store Review Requirements)
8.1 Does the App collect facial data?
[Explicit Response]: No. The App does not collect, store, extract, or retain any facial data (Face Data, biometric data).
8.2 What are the planned uses of facial data?
[Explicit Response]: None. The App does not use facial data for any purpose.
8.3 Is facial data shared with third parties?
[Explicit Response]: No. The App does not share facial data with any third party.
8.4 Where is facial data stored?
[Explicit Response]: Facial data is not stored in any location.
8.5 How long is facial data retained?
[Explicit Response]: Zero. The App does not retain any facial data.
8.6 Photo Data Processing Description:
The processing flow of your photos on the server side is as follows:
(1) Photo upload: you upload photos to the server;
(2) AI processing: the server uses AI technology for cutout, background color change, formal wear composition, and other processing;
(3) Result return: the processed ID photo is returned to your device;
(4) Next-day deletion: after processing is complete, data is uniformly deleted in the early morning hours, with daily early morning data cleanup ensuring no photo data remains.
IX. Third-Party AI Service Usage Statement
9.1 Does the App use third-party AI services?
No. The App uses self-developed AI services (HiVision) for photo processing. Photo data is uniformly deleted in the early morning hours after processing and is not permanently stored.
9.2 What data is sent to third-party AI services?
None.
[Important Note]:
- We do not send any information related to facial data (Face Data)
- Photos are only used for this ID photo processing and are uniformly deleted in the early morning hours after processing
- No facial feature data is extracted, stored, or shared
- Not used for facial recognition, identity verification, or other purposes
9.3 Is user consent obtained before data is sent?
Yes. User consent is a prerequisite for obtaining services, specifically through the following methods:
[Consent Mechanism]
(1) When using the App for the first time, users must read and agree to this Privacy Policy before continuing to use the App;
(2) This Privacy Policy explicitly describes the photo data processing methods in the "Special Note on Facial Data" section;
(3) This Privacy Policy provides detailed special notes on photo data in "Section I, Personal Information We Collect";
(4) This Privacy Policy explains photo data sharing in "Section III, How We Share";
(5) This Privacy Policy explains photo data storage and protection measures in "Section IV, How We Store and Protect";
(6) The User Agreement provides important notes on photo processing in "Section III, Service Content."
[Consent Prompt Locations]
- When users first launch the App, a Privacy Policy reading and consent interface is displayed
- The consent button is located at the bottom of the Privacy Policy page
- The Privacy Policy link can be found in the App under "Personal Center" > "About Us" or "Settings"
[Consent Confirmation Method]
By clicking the "Agree" button, the user indicates that they:
- Have read and understood this Privacy Policy
- Agree to our processing of their personal information (including photo data) in accordance with the Privacy Policy
- Understand that photos will be uniformly deleted in the early morning hours after processing
[Methods to Withdraw Consent]
Users may withdraw consent at any time by:
- Stopping use of the App
- Contacting customer service to apply for account cancellation
- Disabling camera, photo album, and other permissions
X. How This Policy May Be Updated
10.1 We may revise this Privacy Policy from time to time. When policy terms are changed, we will display the changed content to you through push notifications, pop-ups, or other means within the App.
10.2 For material changes (such as expanding the scope of information collection, changing the purpose of use, etc.), we will again obtain your explicit consent.
10.3 Material changes referred to in this Privacy Policy include but are not limited to:
(1) Significant changes in our personal information processing model;
(2) Changes in the primary recipients of personal information sharing, transfer, or public disclosure;
(3) Significant changes in your rights regarding participation in personal information processing and how they are exercised;
(4) Changes in our contact methods and complaint channels;
(5) Changes in cross-border transfer of personal information.
XI. How to Contact Us
11.1 If you have any questions, comments, or suggestions regarding this Privacy Policy, you may contact us through the following channels:
(1) Submit feedback through the "Help & Feedback" feature within the App;
(2) Obtain customer support through the "Contact Customer Service" feature within the App.
11.2 We will respond to your request within fifteen working days.
XII. Scope of Application
12.1 This Privacy Policy applies to all services provided by the App. When links within the App direct you to third-party services, the privacy policies of such third-party services are not governed by this Policy. We recommend that you carefully read the privacy policies of such third parties.
12.2 This Policy does not apply to your interactions with third parties outside the App, including but not limited to WeChat, Apple, and other third-party platforms.
12.3 The third-party service providers involved in each functional module of the App have their own independent privacy policies. We recommend that you carefully read them:
(1) WeChat: https://weixin.qq.com/cgi-bin/readtemplate?lang=zh_CN&t=weixin_agreement&s=privacy
(2) Apple: https://www.apple.com/legal/privacy/