Huriohuang — Privacy Policy

Effective date: 2026-09-23 · Last updated: 2026-11-05

In short: your photo is uploaded to our AI model provider for scoring (the compressed image, longest edge ≤ 1024 px). We store only the resulting scores and a small thumbnail for your history; the original is never stored. You can delete everything at any time.

1. Introduction

Huriohuang ("we", "us") is operated by Guangzhou Huronghuang Cultural Development Co., Ltd., E1134, Room 201-2, 2nd Floor, No. 9 Lingshan East Road, Tianhe District, Guangzhou, Guangdong, China mainland ("Operator").

This policy explains what personal data we collect when you use Huriohuang, why we collect it, where it is processed, how long we keep it, and what rights you have.

2. What we collect

2.1 Data you provide

Data	Purpose	Legal basis
Photos you upload	Uploaded to our AI model provider for scoring. We store only the resulting scores and a small thumbnail; the original is never stored by us.	Performance of a contract
Account identifier (anonymous profile ID)	To sync your score history across devices	Performance of a contract
Payment information	To process purchases	Performance of a contract
Purchase / transaction records	To comply with tax and accounting law	Performance of a contract; compliance with a legal obligation

Payment card details are collected and processed by Apple (App Store) or Google (Google Play), not by us. We receive only a purchase confirmation and an order identifier. We never see or store your card number.

Sensitive data: please do not upload photographs that reveal sensitive personal data about you or others (such as racial or ethnic origin, religious or philosophical beliefs, health, or sexual life), unless you have the explicit consent of everyone concerned for such processing.

2.2 Data we generate

Five dimension scores (composition, color, light, theme, mood)
Timestamp, to build your history

AI scoring. Your compressed photo is analysed by an AI model (Qwen3-VL-Plus, processed at Alibaba Cloud's Singapore node) to produce aesthetic scores. Scores are generated by AI and are for reference only. Your photo is not used to train, fine-tune or improve any model.

2.3 Technical data

Data	Purpose	Legal basis
IP address	Rate limiting, abuse prevention, and approximate region for service delivery	Legitimate business interests
Device identifier (device_id)	To associate your score history with your device and prevent fraud	Legitimate business interests
Device language	Read on your device only to localize the app UI (e.g. score labels). It is never transmitted to our servers.	Not transmitted — on-device only

We do not collect: precise location, contacts, health data, biometric identifiers, advertising identifiers (IDFA/AAID), or browsing history.

3. Third parties we share data with

We share the minimum necessary with the following service providers. Each acts under a data-handling agreement and may not use your data for its own purposes.

Before adding any new service provider or subcontractor, we will post a notice on this page at least 30 days in advance, describing its role and where it processes data.

Service provider	What it receives	Where processed	Retention
Alibaba Cloud (Model Studio / 百炼) Qwen3-VL-Plus — AI scoring inference	The compressed photo + scoring prompt (AI scoring inference, incl. automated content-safety screening)	Singapore for all users (international deployment scope, excluding China mainland)	Not retained — the compressed photo is discarded once the result is returned, except where retention is required for abuse prevention or legal obligations.
Cloudflare Workers AI (Moondream, content-safety pre-screen)	The compressed photo, for automated safety screening only	Global	Not retained
OpenAI (Moderation API)	Not currently enabled. No photos are sent to OpenAI at this time. If enabled in the future, this policy and the store data-safety disclosures will be updated accordingly.	—	—
Our infrastructure provider (Cloudflare)	Thumbnail storage, score history	Global	See §5
Apple / Google	Purchase data	Per their own policies	Per their own policies

Important: your photos are never used to train, fine-tune, or improve any AI model — by us or by our model provider. The compressed photo is sent for inference once; the model provider does not persist your image.

We do not sell your personal data. We do not use it for advertising.

4. Where your data is processed

Your compressed photo is sent to Alibaba Cloud Model Studio ("百炼") and processed at its Singapore node — the international deployment scope, whose inference compute is scheduled across regions excluding China mainland. This applies to all users, regardless of location: scoring is not routed by country, and there is no separate United States processing path.

Score history and thumbnails are stored on Cloudflare R2, a global edge storage network. Other technical data (IP address and device identifier) is handled by our service providers in the regions where they operate. We use providers that maintain appropriate technical and organisational safeguards, including encryption in transit and at rest.

Cross-border transfers: sending your photo to Singapore is a cross-border transfer from your location, protected by appropriate technical and organisational safeguards under applicable data-protection laws — including encryption in transit and at rest and contractual confidentiality and security obligations. We do not offer Huriohuang in the European Union / EEA, the United Kingdom, Russia, Turkey, Israel, or China mainland.

4.1 International data transfers

Our service runs on global infrastructure, so your personal data is transferred to and processed in countries outside your home country. AI inference for every user is performed by Alibaba Cloud at its Singapore node (international deployment scope, excluding China mainland). Supporting infrastructure (such as Cloudflare) may process data in the regions where those providers operate.

To protect personal data as it moves between jurisdictions, our service providers' data-handling agreements incorporate appropriate technical and organisational safeguards — including encryption in transit and at rest and contractual confidentiality and security obligations. Where a particular market's law requires a specific transfer mechanism, we put that mechanism in place for users in that market.

Our operator is established in China (Guangzhou). No personal data is transferred to or processed on servers located in China; all processing occurs in Singapore (Alibaba Cloud) and on Cloudflare's global network as described above. Our establishment in China serves only to identify the responsible party under applicable data-protection law.

You may request a copy of the relevant safeguards by emailing contact@huronghuang.com.

5. How long we keep your data

Data	Retention
Thumbnails (small preview images, 240 px, stored for your history)	Until you delete them
Scores (your history)	Until you delete them
Account record	Until you delete your account
Purchase / transaction records	As required by tax law (typically 6–10 years) — retained in anonymised or minimal form, not linked to your photos

We retain your thumbnails and scores until you delete them. You can delete a single record, delete several records at once, or clear your entire history. Clearing your history erases your score records and their thumbnails but keeps your account and any unused score credits. Deleting your account erases everything, including the account. We do not automatically delete your history based on inactivity.

6. Your rights

Under applicable data protection laws, you may:

Access — get a copy of your data
Rectify — correct inaccurate data
Erase — delete your photos, history, and account
Restrict — pause processing while a dispute is resolved
Port — receive your data in a machine-readable format (JSON/CSV)
Object — object to processing based on legitimate business interests
Withdraw consent — where processing relies on consent
Complain — where the law of your country or region provides for it, lodge a complaint with the data protection regulator in your country or region, where one exists.

How to exercise them:

In-app: My Report → Delete account (erase all data) (deletes your entire history and account)
In-app, history only: My Report → Score history → Clear all history (erases all score records and their thumbnails; your account and any unused score credits are kept)
On the web: huronghuang.com/delete-account.html — works even if you have already uninstalled the app
By email: contact@huronghuang.com

We respond within 30 days. We may ask you to verify your identity first — this protects you against someone else deleting your account.

Deletion covers all copies: primary storage, backups (which are flagged for re-deletion on restore), and — where applicable — CDN caches and thumbnails.

Note on backups: backups exist for business continuity. Deleted thumbnails and score records (never original photos) may persist in encrypted backups for up to 90 days. They are never restored into active use, and any restore operation re-applies pending deletions. Original photos are never stored — in active systems or in backups.

7. Children

Huriohuang is not directed to children. You must be at least 13 years old (or the minimum legal age in your country of residence, if higher) to create an account or use Huriohuang. We do not knowingly collect data from children. If you believe a child has provided us data, contact us at contact@huronghuang.com and we will delete it. Where local law sets a higher minimum digital-consent age (for example, 16), that higher age applies.

8. Security

TLS 1.2+ in transit
Encryption at rest
Field-level encryption for sensitive data; keys managed in KMS
Role-based access control; access logged
Breach notification: if a breach affects your rights, we notify the relevant regulator within 72 hours where applicable, and inform you where required

9. Automated decision-making

The score is generated automatically. It is an aesthetic opinion for informational and entertainment purposes, not a professional photographic assessment, and it has no legal or similarly significant effect on you.

You may disregard it, request a re-analysis, or contact us at contact@huronghuang.com to have a human review the result.

10. Changes

We will post any changes here and update the "Last updated" date. If a change materially reduces your rights or materially changes how we process your personal data, we will notify you at least 30 days before it takes effect via an in-app notice, and, where required, ask for your consent again before applying the change to you.

11. Contact

Operator: Guangzhou Huronghuang Cultural Development Co., Ltd.
Address: E1134, Room 201-2, 2nd Floor, No. 9 Lingshan East Road, Tianhe District, Guangzhou, Guangdong, China mainland
Email: contact@huronghuang.com