PhotoMagicPrivacy Policy

PhotoMagic Privacy Policy

Last updated, effective and published: 26 December 2025

This Privacy Policy applies to PhotoMagic software and services (hereinafter referred to as "the Services"). The Services are provided and controlled by Hong Kong Mishi Technology CO., Limited and its affiliates (collectively referred to as "we").

We are committed to protecting and respecting your privacy. This policy explains how we collect, use, share, and otherwise process personal information of users and other individuals associated with this software. To ensure secure service usage, you should read and comply with the PhotoMagic Privacy Policy (hereinafter referred to as "this Policy"). If you do not agree to this Policy, we may be unable to provide you with this service.

Personal Information refers to any information related to an identified or identifiable individual. This policy describes the information we collect from you through our services, how we use and disclose such information, and the steps we take to protect it.　

1. Introduction

1.1 The PhotoMagic Privacy Policy applies to all products and services provided by PhotoMagic, including the PhotoMagic mobile client ("APP") and other client applications.

1.2 Before using any PhotoMagic products or services, please read and fully understand this Privacy Policy. By using or continuing to use PhotoMagic's products/services, you agree to our use and processing of your information in accordance with this Privacy Policy.

1.3 We may revise this Privacy Policy from time to time in accordance with laws, regulations, or business adjustments. When changes are made, we will notify you of the updated content through prominent prompts after the version update.

1.4 You must understand that we will only collect, use, process, and store your personal information in accordance with this Privacy Policy after you confirm and agree to it. You have the right to refuse to agree to this Privacy Policy, but please be aware that if you refuse to agree, you may be unable to fully utilize PhotoMagic's services and features or achieve the intended service outcomes.

2.How we collect and use your personal information

2.1 We fully recognize the importance of your personal information and will make every effort to safeguard its security. We are committed to maintaining your trust in us and protecting your personal data. Additionally, we pledge to implement appropriate security measures in compliance with local legal standards to protect your personal information. If we intend to use your personal information for purposes not specified in this Privacy Policy, or to use the collected information for other purposes based on specific objectives, we will promptly notify you through reasonable means and obtain your consent.

2.2 We typically collect and use your personal information for the following purposes:

2.2.1[Maintaining Basic Functions]To detect account anomalies, assess product compatibility, and provide essential services like browsing, we may collect and store information about your service usage and behavior. This includes:

Log information: When you use our service, we may collect detailed usage data of your service as network logs. This includes your login account, access records, membership activation records, and collection and sharing records.

Device information: We may collect and record device-related information based on the permissions you grant during software installation and use, including device model, operating system and version, client version, and device identifier (IMEI/Android ID/OAID).

Mobile network information, such as Public Land Mobile Network (PLMN) provider ID, geolocation (cell ID of the device's location), and Internet Protocol (IP) address.

Location information. When you access location-based services, we collect, use, and process your device's approximate or precise location. This information may be obtained through GPS, Wi-Fi, or the service provider's network ID. We will ask you to enable location services. You can disable the corresponding permissions or refuse to share your location.

2.2.2 [Registration & Login]When you register for a PhotoMagic account, we collect your voluntarily provided information, including but not limited to: nickname, gender, date of birth, city, personal profile, and third-party media platform account details. This information is collected to assist you in completing the registration process and establishing your personal account. Your provided information will remain under our usage authorization throughout your service period.

2.2.3 [Image/Video Creation Services and Feedback] When using PhotoMagic for image editing, feedback, or similar functions, we require access to your device's camera (camera) and photo album (storage) permissions. These are classified as sensitive permissions, and we will only use them with your explicit consent. You may revoke this authorization at any time.

When using PhotoMagic's image, video editing, or creative services, we may process your uploaded photos, images, and videos. After you upload content, we analyze multiple visual features to enable AI-enhanced beautification. This analysis may include facial features (e.g., eyes, nose, mouth points), expressions, and other visual elements in the image.

When using AI features like AI outfit changes and photo dancing, PhotoMagic identifies key facial features (e.g., eyes, nose, mouth points) in images. The process involves: (1) Uploading photos to our servers. (2) Servers analyze images and return processed data. (3) The app automatically combines facial data with source materials to create final results. (4) All data is temporarily stored in encrypted storage. Important: This process does not collect or process biometric data, and neither the original photos nor the generated images are stored on our servers.

Unless otherwise expressly stated and with your explicit consent, we will not transmit, store, or share the aforementioned information with third parties. Such data is processed solely locally on your device. We will never sell your personal information to third parties. Upon completion of image generation, your original photo will be immediately deleted. We retain anonymized or aggregated data only when necessary to fulfill the purposes outlined in this Privacy Policy.

We will never turn on your camera or access your photo album to steal your privacy or view your images. We will never use such illegal methods to send you information or ads.

2.2.4 [Audio-Visual Display, Playback, and Download Services] When using audio-visual display and playback features, we collect browsing and playback history, favorites, and other data generated during your usage. To enable the download function, we will request access to your device's storage permissions. If you refuse to grant storage permissions, you will be unable to download video content via PhotoMagic, but this will not affect your access to the basic audio-visual display and playback services.

2.2.5[Set Wallpaper]To use wallpaper-related services, you must enable storage permissions and modify system wallpaper permissions. If you do not grant these permissions, the aforementioned features will not be available, but this does not affect your use of other PhotoMagic features and services. You can enable or disable these permissions at any time through your device's settings.

To ensure the best wallpaper experience, PhotoMagic needs to collect device information, including but not limited to device model, operating system version, screen resolution, and network status. Based on your device's characteristics, it displays wallpapers with the appropriate resolution and format to avoid errors or resource waste. It also optimizes wallpaper loading according to your device's performance and network conditions.

2.2.6 [Lock Screen Settings] To use lock screen services, you must enable the following permissions: background pop-up interface, lock screen display, floating window, auto-start, and app notification reading. Without these permissions, the aforementioned features will be unavailable, though your access to other VibeWalls functions remains unaffected. You can manage these permissions anytime through your device's settings. If you revoke these permissions, we will cease providing the corresponding services.

2.2.7[Profile Editing]When using PhotoMagic to edit your profile picture, we need access to your device's storage permissions to retrieve images from the device's album for selection.

To view the permissions required for the above functions, check the table below for details on each permission's purpose, method, and scope.

authority	Permission Name	Usage scenarios and purposes
Storage permissions Read/Write/Storage Card Permissions	READ_EXTERNAL_STORAGE WRITE_EXTERNAL_STORAGE	1.When creating a local video in the creation module, read videos and images from the local album 2.When using the wallpaper and lock screen features, images are stored and accessed
Album access	READ_EXTERNAL_STORAGE	Use this to access local videos and images when setting your profile picture in local videos
Download and install app permissions	REQUEST_INSTALL_PACKAGES	When a new version is available, download the latest installation package and install it
Network permissions	INTERNET、ACCESS_NETWORK_STATE、ACCESS_WIFI_STATE、CHANGE_NETWORK_STATE	1. Read the current network type to determine if it is Wi-Fi or mobile network 2. Connect to the network and request interface data
Application environment monitoring permissions	QUERY_ALL_PACKAGES	Ensure wallpapers and lock screen services run smoothly

2.2.8 [Third-Party Services]Our products may contain third-party SDKs, advertisers, or similar applications. When using such third-party services on our platform, you agree to their direct collection and processing of your information (e.g., through embedded code). Third-party SDK providers and advertisers shall comply with their own privacy policies, which do not apply to this policy. To ensure maximum information security, we recommend reviewing their privacy policies before using any third-party SDK services. To protect your legal rights, if you identify risks in SDKs or similar applications, we advise you to immediately terminate related operations and contact us promptly.

2.2.9 [Customer Support] When you file a complaint, appeal, or request assistance with PhotoMagic, we may require you to provide account information for identity verification. This process verifies your account with our system security requirements. To facilitate communication and issue resolution, we may also collect personal information (including sensitive details) such as your name, email, and contact details. Additionally, we gather communication records (text, images, audio/video) and other relevant information to investigate cases and assist you. Refusing to provide this information may delay our response to your inquiries. During these processes, you may need to access your photo album or camera to submit materials. You can manage these permissions through your device settings at any time.

2.2.10 [Personalized Services & Recommendations]We leverage collected data to craft a tailored PhotoMagic experience. For instance, we may suggest tailored effects or filters based on your usage history, recommend new features that might interest you, and optimize the interface to match your preferences.

Personalized services also include communication and interaction. We may send you notifications about new features, usage tips, and account updates, all tailored to your habits and preferences.

2.2.11[Communication & Marketing]We will send you important service notifications, including security alerts, policy updates, and technical improvements, via your provided contact information. With your consent, we may also send marketing materials such as new feature launches, exclusive promotions, and other PhotoMagic-related content that we believe you might find interesting.

All marketing messages include clear unsubscribe options. You can adjust your preferences for receiving messages through account settings. We respect your choices and will never send spam that bothers you.

2.2.12 To upgrade our mobile app ("APP") or access third-party ads in our products/services, you may need to grant app installation permission. If you decline, you may not be able to complete the APP upgrade or use third-party products/services.

2.2.13 The features and services we provide to you are continuously updated and enhanced. If any feature or service is not listed in the above description but still collects your information, we will inform you of the content, scope, and purpose of the information collection through page prompts, interactive processes, or announcements to obtain your consent.

Furthermore, we only process your personal data in compliance with applicable laws. We may use your personal data under one of the following legal grounds: your consent; to fulfill or execute contracts with us; to protect the legitimate interests of you or others; to fulfill legal obligations; or to safeguard the legitimate interests of our business.

3.How We Use Cookies and Similar Technologies

3.1 Cookie

To ensure smooth website operation and provide a more convenient experience, we store small data files called Cookies on your computer or mobile device. Cookies typically contain identifiers, site names, and numbers or characters. With Cookies, websites can store your preferences and other data.

3.2 Website Beacons and Pixel Tags

In addition to cookies, we employ other similar technologies such as website beacons and pixel tags on our site. For instance, emails we send may contain links to content on our website. When you click these links, we track the click to help understand your preferences for products or services, enabling us to proactively improve the service experience. Website beacons are typically transparent images embedded in websites or emails. Through pixel tags in emails, we can determine whether the email has been opened. If you prefer not to have your activities tracked this way, you can unsubscribe from our mailing list at any time.

3.3 Ensuring the Safe and Efficient Operation of Products and Services

If you opt out of our use of cookies and similar technologies to collect and process your information, you may manage your preferences in your browser settings (partial or complete) or delete cookies stored on your computer, mobile device, or other devices. This will prevent us from tracking your personal information in whole or in part. For detailed instructions on adjusting browser settings, please refer to your browser's settings page. Please note that some of our products/services require cookies or similar technologies to function. If you refuse to use or delete them, you may not be able to access our products/services or enjoy optimal service experience through them.

4.How we share, transfer, and publicly disclose your personal information

4.1 Sharing

We do not share your personal information with third parties unless you explicitly grant permission. However, we may share your personal information under the following circumstances:

4.1.1 Your personal information may be shared among our affiliated companies. We will only share necessary personal information (such as sharing your account details among affiliated companies to facilitate your use of other products/services via your PhotoMagic account, identify account anomalies, or protect the personal and property safety of PhotoMagic's affiliated companies or other users/public) for the purposes stated in this Privacy Policy. If we share your sensitive personal information or if the affiliated companies change the purposes of using and processing your personal information, we will seek your authorization and consent again.

4.1.2 To deliver more comprehensive and premium products and services, we collaborate with trusted third-party service providers, including cloud hosting providers, data analytics firms, payment processors, and AI technology specialists. We only share your personal information for legitimate, necessary, specific, and clearly defined purposes, disclosing only the minimum information required for service delivery. All partnerships strictly adhere to rigorous data protection protocols, and we never transfer your data to third parties. Additionally, we require our partners to sign strict confidentiality agreements, mandating they maintain equally high data protection standards. Our partners are prohibited from using shared personal information for any other purposes. If you refuse to allow our partners to collect the necessary personal information for service provision, you may be unable to use the third-party service on our platform.

Our current partners are:

1)Third-party SDK providers: Our products may include third-party SDK applications. By using these third-party services on our platform, you agree to their direct collection and processing of your information, subject to their respective privacy policies.

2)Advertisers: We share with advertisers how many users view or click on ads within this service.

4.2 Transfer

We will not share your personal information with any company, organization, or individual, except in the following cases:

4.2.1 Transfer with explicit consent: Upon obtaining your explicit consent, we will transfer your personal information to third parties.

4.2.2 In the event of mergers, acquisitions, or bankruptcy liquidation involving the transfer of personal information, we will notify you in advance and require the new entity holding your personal information to continue complying with this Privacy Policy. Otherwise, we will require the entity to obtain your authorization again.

4.3 Public Disclosure

We will only publicly disclose your personal information under the following circumstances:

1) With your explicit consent;

2) Disclosure for legal or legitimate reasons: We may disclose your personal information when required by law, legal procedures, litigation, or mandatory requirements from government authorities.

Important Notice: For your publicly disclosed personal information, we will promptly and prudently review its legitimacy, reasonableness, and legality upon receiving the disclosure request. We will implement the strictest personal information security measures both during and after the disclosure to protect it.

5.How we protect your personal information

5.1 We employ security measures compliant with local standards to safeguard your personal information, preventing unauthorized access, public disclosure, misuse, or modification, as well as data damage or loss. We implement various security measures at a reasonable level to ensure information protection. For instance, we use encryption technologies (e.g., SSL) and anonymization to protect your personal data. We have established access control mechanisms to ensure only authorized personnel can access personal information. Additionally, we regularly conduct security and privacy training sessions to enhance employees' awareness of the importance of protecting personal information.

5.2 We continuously enhance the security of software installed on your device through advanced technical measures to prevent personal information leakage. For instance, we encrypt certain data locally on your device for secure transmission. To guard against viruses, trojans, or other malicious programs, websites may access information about applications installed on your device or processes currently running.

5.3 We have established a dedicated Personal Information Protection Department, management systems, processes, and organizational structures to ensure information security. For instance, we strictly limit access to personnel, require them to comply with confidentiality obligations, and conduct audits.

5.4 In the event of a data breach, we have established a comprehensive emergency response protocol to swiftly identify, contain, and resolve security incidents. In compliance with applicable laws and regulations, affected users and relevant regulatory authorities are notified within 72 hours of detection. Our emergency response team comprises cybersecurity experts, legal professionals, and communications specialists. The team works in close coordination to minimize the impact of the breach and provides transparent updates to users and stakeholders regarding the incident.

5.5 We will take all reasonable and feasible measures to ensure that no irrelevant personal information is collected. We will only retain your personal information for the period necessary to achieve the purposes stated in this policy, unless the retention period needs to be extended or permitted by law.

5.6 The internet is not an entirely secure environment. We strongly recommend taking proactive measures to protect your personal information, including refraining from disclosing your account credentials or other sensitive details. Should you discover any personal information breach, please contact PhotoMagic customer service immediately for appropriate action based on your request.

5.7 The internet environment is not 100% secure. We will make every effort to ensure the security of any information you send to us. In the event of a personal information security incident, we will promptly notify you in accordance with local legal requirements, providing details of the incident and its potential impact, the measures we have taken or will take, recommendations for you to mitigate risks, and remedial actions. We will keep you informed via email or other means. If individual data subjects cannot be individually notified, we will issue public announcements through appropriate and effective channels. Additionally, we will proactively report the incident's handling to local regulatory authorities as required.

6.Your Rights

We understand your concerns about personal information. To help you access, update, supplement, or delete your personal data more conveniently, while ensuring your right to withdraw consent and log out of your account, we have incorporated user-friendly settings into our product design. Please refer to the instructions below for guidance. Additionally, we have established a complaint and reporting channel to ensure your feedback is promptly addressed.

6.1 Access, Correction, and Supplement of Your Personal Information

Access, correct, and supplement basic information such as birthday, gender, profile picture, and personal profile:

After signing in, click My, then click the profile icon to access, edit, or add information.

6.2 Access to Google/FaceBook/Apple ID account information

After signing in, click My, then click the settings button in the upper right corner and select Account Management to access your information.

If you cannot access the personal information through the above methods, you can contact us via "Contact Us" in Article 10 of this Privacy Policy. PhotoMagic will respond to your request within 15 days.

If you encounter difficulties in exercising the aforementioned rights, or if we are currently unable to provide online self-correction/modification services, you may, after identity verification and provided that such corrections/changes do not affect the objectivity and accuracy of the information, make corrections or modifications to erroneous or incomplete information. In specific cases, particularly when data errors occur, you may submit your correction/modification requests to us through published feedback and error reporting channels, requesting corrections or modifications to your data, unless otherwise stipulated by laws and regulations. However, for security and identity verification purposes, you may not be able to modify certain initial registration information submitted during registration.

6.3 Delete your personal information

You can also delete some of your personal information through the methods listed in this section "Access, Correct and Supplement Your Personal Information".

You may request the deletion of your personal information in the following cases:

1) If our processing of personal information violates laws and regulations;

2) If we collect or use your personal information without obtaining your explicit consent;

3) If our processing of personal information constitutes a material breach of the agreement with you;

4) If you stop using our products or services, or you cancel your account;

5) If we permanently cease to provide you with products or services.

If we decide to respond to your deletion request, we will also notify the entities that have obtained your personal information from us as much as possible, requesting them to delete it promptly unless otherwise required by laws and regulations or they have obtained your separate authorization.

When we assist you in removing information from our services, we may not immediately delete the corresponding information from the backup system in accordance with relevant laws and regulations. We will securely store your personal information and isolate it from any further processing until the backup can be cleared or anonymized.

6.4 Delete your account

After signing in, click My, then click the settings button in the upper right corner, click Account Management, and click Sign Out.

6.5 Feedback and Suggestions

You can click "My" and then "Feedback" to submit your issue.

6.6 Access Privacy Policy

You can go to the login page, or click My, then click the Settings button in the upper right corner, click About Us, and click Privacy Policy.

6.7 Withdrawal of Your Consent to Personal Information

Some features of our products and services require access to your device. You can revoke this permission at any time after granting it. To withdraw authorization: Go to Mobile System Settings> Permission Management. Note: Revoking authorization does not affect personal information processing that was already conducted based on your previous authorization.

To manage personalized services and recommendations, click My, then the settings button in the top-right corner, select Personalized Recommendations, and choose Unpersonalize.

6.8 Respond to your request

To ensure security, you may need to provide a written request or verify your identity in another way. We may ask you to verify your identity before processing your request.

We will respond within 15 days. We may reject requests that are unwarranted, require excessive technical means (e.g. the development of a new system or a fundamental change in existing practice), risk the legitimate rights and interests of others, or are highly unrealistic.

We cannot respond to your request under the following circumstances as required by laws and regulations:

1)the local law does not grant the data subject the relevant rights;

2)The identity of the applicant cannot be verified;

3)The application cannot be verified or is out of scope, especially when the application is sent repeatedly.

4)The requested information relates to compensation that we will make or receive due to the ongoing dispute, and disclosing such information may harm our interests;

5)The data retained is used only for statistical and research purposes, and the publication of the results will not reveal personal identity;

6)Other circumstances prescribed by law.

If we refuse the request, we will provide the requester with a formal explanation.

special explanation ：

1)Only the legal guardian or the person authorized by law has the right to access the personal data of others.

2)Most laws/regulations specify situations in which an organization may not provide data to a data subject. These include: providing the data may undermine ongoing counter-terrorism efforts; the data subject has repeatedly requested the data; or obtaining and providing such information would consume excessive resources.

3)We do not normally provide the following information:

4)Information about others: Requests from data subjects may involve other individuals. We do not provide such information unless authorized by the relevant individuals.

5)Duplicate requests: If a data subject repeatedly submits the same or similar requests related to a data subject, and the data has not changed since our last provision, we generally do not provide a copy of the data. Additionally, we are not obligated to provide publicly available information.

6)Confidentiality: If the information is classified, we are not obligated to provide the requested information.

7)Special Files: We will not disclose any special information in response to requests for access to personal data. Typically, special information includes any confidential documents (such as attorney-client communications) and information obtained or expressed to provide corresponding legal advice, whether or not it is related to the litigation itself or to court proceedings.

6.9 To California users:

Under the California Consumer Privacy Act ("CCPA"), you have certain rights regarding your personal information collected for commercial purposes. Please note that this section applies only to residents of California. Your rights include:

1）Understand your rights regarding the personal information collected by the company, how it is used and shared;

2）The right to delete the information collected from you;

3）opt out of personalized ads

4）The right to exercise CCPA rights without discrimination.

6.10 To EU users

Under the applicable General Data Protection Regulation ("GDPR"), you have certain rights regarding your personal data collected by us for commercial purposes. Please note that this section applies only to individuals residing in the European Union. Your rights include:

1）The right to access certain information about how we process your data, including: the purpose of processing the data; the categories of personal data being processed; the recipients of your personal data; and how long we will store your personal data.

2）You have the right to receive a copy of any personal data we process about you in a commonly used and machine-readable format;

3）right of deletion;

4）Restrict the rights to process your personal data;

5）the right to object to the processing of your personal data;

6）The right to withdraw your consent granted to us;

7）If you believe we have violated any of your rights, you have the right to file a complaint with the relevant data protection authority.

8）The right not to be bound by automated decisions related to your personal data. We confirm that we do not use automated decisions.

9）The right to be notified of a personal data breach that could put your rights at high risk.

7.How we store your personal information

7.1 International Data Transmission

Your information may be stored on servers outside your country of residence, such as Singapore and China. In these places, the level of privacy protection may not be as strong as in your state, province, or country.

7.2 Duration of Information Storage

Generally, we store your personal information when you use our services and will delete or anonymize it within a reasonable period after you log out of your PhotoMagic account.

When our products or services are suspended, we will notify you through official announcements and remove your personal information or anonymize it within a reasonable timeframe.

8.How we handle personal information of minors

PhotoMagic primarily provides its products and services to individuals aged 18 or above (or the age specified by your country/region). If you are a guardian of a child under 18 (or the age specified by your country/region), we urge you to fulfill your guardianship responsibilities to protect the child's personal information security. Additionally, please provide guidance and assistance to your child when using our products and services. Should we discover that our products have inadvertently collected a child's personal information, we will promptly delete the relevant data.

9.How to update this policy

9.1 To provide you with enhanced services, we will update the terms of the "PhotoMagic Privacy Policy" in accordance with product updates and relevant legal requirements. These updates shall form an integral part of the "PhotoMagic Privacy Policy". Without your explicit consent, we will not reduce your rights under this policy. If such updates result in material reduction or significant changes to your rights under this "PhotoMagic Privacy Policy", we will notify you through prominent notices or other means prior to the policy's effective date. By continuing to use our services, you acknowledge that you have read, understood, and agreed to be bound by the revised "PhotoMagic Privacy Policy".

9.2 Major changes include but are not limited to:

1) Our service model has undergone significant changes, including the purposes of processing personal information, the types of personal information processed, and the methods of using such information;

2) We have undergone significant changes in ownership structure and organizational framework, including ownership changes due to business adjustments, bankruptcy, or mergers and acquisitions.

3) The primary recipients of personal information sharing, transfer, or public disclosure have changed;

4) Your rights regarding personal information processing and how you exercise them have undergone significant changes;

5) Changes in the department responsible for personal information security, contact details, and complaint channels;

6) When the Personal Information Security Impact Assessment Report indicates high risk.

10.other

10.1 All notices under this Agreement may be delivered via page reminders, emails, or other means; such notices shall be deemed delivered to the recipient on the date of dispatch.

10.2 The formation, entry into force, performance, interpretation and dispute resolution of this Agreement shall be governed by the laws of the Hong Kong Special Administrative Region of the People's Republic of China (excluding conflict of laws).

10.3 This Agreement is executed in the Hong Kong Special Administrative Region of the People's Republic of China.

10.4 In the event of any dispute or controversy between you and PhotoMagic, you shall first attempt to resolve it through amicable negotiation. If no agreement is reached, you agree to submit the dispute to the competent People's Court at the place where this agreement is executed.

10.5 The headings of all terms in this Agreement are for reference only and shall not constitute the actual meaning of the Agreement, nor shall they serve as the basis for interpreting the Agreement.

10.6 If any provision of this Agreement is invalid or unenforceable for any reason, the remaining provisions shall remain valid and binding on both parties.

11.contact us

11.1 If you have any questions, inquiries, or complaints regarding the content of the PhotoMagic Privacy Policy or privacy-related matters when using our services, you may contact us through any of the following methods:

1) You may submit feedback to us in accordance with Article 6.5 of this Privacy Policy.

2) You can contact us by email (email: photomagic528@gmail.com). We will reply to you as soon as possible within 15 days after receiving your comments and suggestions and verifying your user identity. (End of text)