Privacy policy
These photos are people's lives, sometimes children's and sometimes of those who are gone. We collect little, store it in Israel, give providers only what they need, and delete when asked.
Who is responsible
CodePal.AI, an Israeli licensed dealer (osek murshe), no. 205666134, Hoshen 10, Ness Ziona, which runs Glim, is responsible for the personal data collected in the service. This policy is also the notice under section 11 of the Israeli Privacy Protection Law, 5741-1981, as amended by Amendment 13 (in force since August 2025): it explains what we ask for, why, who receives it and what your rights are. You're under no legal obligation to give us data, but without an e-mail address there's no account, and without photos there's no film. For any privacy question: hello@glim.co.il. This English text is a translation; the Hebrew policy prevails.
What we collect
- Account details: e-mail, password (stored as a one-way hash, not as text), your name if you gave it, and your preferred language. When you sign in with Google, Google gives us your e-mail, name and profile picture.
- What you upload and create: photos, captions and dates, instructions you wrote for an animation, answers to the song questionnaire, audio you uploaded, and the animations, openings, songs and films that were made.
- Photos from Google Photos, if you choose to bring them from there: only the photos you chose in Google's picker, each with its file name (details).
- Event details you gave, such as the date of the event or the date of passing, and reminders you asked for.
- Check results: whether a photo was stopped by the content check, where its faces are and how many, and the similarity score between the faces in the photo and in the animation.
- Purchases: what you bought, when, how much and in which currency, and what Paddle told us about the transaction (transaction and customer IDs, country, and partial payment details such as the card type and last four digits). We never receive the full card number. When you buy before signing up, also the e-mail address you gave for the receipt.
- Messages: what you wrote to us in the help form, to the assistant in the app, by e-mail or on WhatsApp.
- Feedback: your answer to the short question we ask once after your first film (a score from 0 to 10, and words if you wrote any), and a testimonial you wrote, with the form of your name you chose and whether you agreed that we publish it.
- A phone number, if you added one on the account page to get WhatsApp updates.
- Technical and operational data: IP address and browser type when you sign in, a random device ID for the free trial, error reports, and a record of actions in the service such as signing up, buying and making a film. If you agreed to measurement, also usage events from the browser, such as a page view or a step in the welcome tour.
- For the free trial, also a one-way hash of a few browser details (browser type and operating system, time zone, screen size and the first part of the IP address), so we can tell a browser already had a trial. We keep only the hash, not the details.
- Referrals and benefits: who referred you, through which campaign or vendor you came (the first time and the latest, which is also recorded on each order), and the link or screenshot of a post you submitted for a benefit.
The site glim.co.il itself sets no cookies and runs no trackers.
What we use it for
- To create the animations, songs and films, keep them and show them to you.
- To check that photos are allowed and that the animation kept the faces.
- To run your account, purchases, refunds and benefits, and to prevent abuse of the free trial.
- To send e-mails about the service itself: sign-up confirmation, password reset, “your film is ready”, order and refund confirmations, and reminders you asked for.
- To answer your messages and help. The assistant in the app answers with a language model, through KIE.ai, and you can switch to a person from the team at any point.
- To show an offer in the app, or a one-time personal offer, for example to someone who made an animation and hasn't bought yet. Such offers appear only in the app and are never e-mailed.
- To publish a testimonial you wrote on the site, only if you ticked that we may.
- To secure the service, fix faults and improve it: for example, to count where buyers came from, and to try two versions of a feature on different accounts. Which version an account gets is decided on the server from the account ID, with no cookie, and we count only how many signed up and bought with each version.
- To send marketing e-mails, only if you agreed.
- To meet legal duties such as bookkeeping, and to protect our rights.
We won't use your data for another purpose without telling you, and without asking for consent where the law requires it. Two decisions are made automatically: the content check may stop a photo, and the device check (the device ID, or the hash of browser details) may prevent a second free trial. In either case you can contact us and ask for a person to review it.
Children, the departed, and faces
- Photos often include children and people who have passed away. Upload them only with consent, as described in the terms of use. The service itself is for adults aged 18 or over, and we don't knowingly collect data from children using it.
- Pictures of faces are sensitive data. We process them only to create what you asked for and to check it: we don't identify who the people are and don't build a face database. To frame a photo, check it and suggest how it moves, our own server finds where the faces are, and only their position and number are kept. The identity check compares the faces in a photo with the faces in the animation made from it, and only the similarity score is kept.
Where it is stored
Photos, animations, films and the database are stored on Amazon Web Services servers in its Israel region, in Tel Aviv (il-central-1). Photo checks (Amazon Rekognition) and e-mail sending (Amazon SES) also run there. The AI providers get a copy only for the creation, as described below.
Providers that receive data
Each provider gets only what its task needs, and uses it under its own terms and privacy policy (linked from its name).
| Provider | What it does | What it gets | Where |
|---|---|---|---|
| Amazon Web Services | File storage and the database, sending e-mail and checking photos | Everything stored in the service | Israel |
| KIE.ai (NEXUSAI SERVICES LLC) | Creating the animations, openings and growing-up transitions, planning the transitions, the personal song (Suno) and writing its lyrics, and the in-app assistant's answers | The photo or pair of photos for that task, through a link that expires after two hours, and the instruction for the creation; for a song, what you wrote in the questionnaire; for the assistant, the conversation with it and the state of the project you're in (its name, how many photos and animations it has, and your balance), without the photos | United States, and the AI models' countries |
| Sign-in with a Google account, and the team's mailboxes on Google Workspace | At sign-in: e-mail, name and profile picture; and in the team's mailboxes, whatever you write to us by e-mail, and notices of messages, with the details you gave in them | United States | |
| Paddle.com Market Limited | Merchant of record for our orders: payment, receipts, tax and refunds | The payment details you enter in its form, e-mail, country and what you bought | United Kingdom |
| Meta (WhatsApp) | Conversations with our team on WhatsApp, and a “your film is ready” message for those who asked for it | The phone number and the messages | United States |
- KIE.ai passes each task to the model that performs it: Kling by Kuaishou, Google, OpenAI or Suno. Those models may process the task outside Israel.
- Paddle is the merchant of record, and is itself responsible for the payment data it collects, under its own privacy policy. When you open the checkout we fill in your account's e-mail address (or the one you gave when buying before signing up), and Paddle sends the receipt and messages about that purchase to it.
Under KIE.ai's terms, it may use the content it receives to operate and improve its service. Glim itself doesn't train models on your photos and doesn't sell data. Beyond these providers we don't disclose data, unless the law requires it (for example a court order), or to protect people's safety and our rights. Before we add a provider that receives personal data, we'll update this list.
Transfers outside Israel
Some providers are outside Israel, mainly in the United States and the United Kingdom, and the AI models they run may process a task in other countries too. Transfers follow the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, and are limited to what the task needs: for an animation, only its photo, through a link that expires after two hours.
How long we keep it
- Files and projects: as long as the account is active.
- A project you deleted: 30 days in the trash, then it is deleted completely, files included.
- The link an AI provider gets to a photo expires after two hours.
- Temporary files from uploading and assembling the film: up to 7 days.
- System logs: 14 days. Database backups: 7 days.
- Records of orders, payments and refunds: 7 years, as tax and bookkeeping law requires.
- The zip file of your photos, animations and films that you make on the account page: one day, then it is deleted.
- A link for uploading from your phone is open for 30 minutes, and a link for family for 14 days. We keep only a hash of the link, not the link itself. Photos family sent wait until you decide on them. The copy that waited for your decision is deleted within a day of your adding or declining the photo, and so are photos that never finished uploading.
- A testimonial: until you ask us to take it down, or until you delete your account.
- A purchase made before signing up that hasn't moved into an account yet: kept for its e-mail address, like any order record.
- The free-trial device check: the hash of browser details until 30 days after the device's free trial, or 30 days after its last visit if it had none; the random device ID until a year after it was made, when its cookie has expired.
Deleting your account
Delete your account on the account page in the app, or ask us. Deletion starts immediately: all photos, animations, songs and films, projects, share and upload links, benefit submissions, testimonials, the words you wrote for the short question and conversations with the assistant are deleted, and the e-mail, name, picture and phone number are removed from the account.
What remains: records of orders, payments and refunds (for the period above), and with them the e-mail address of a purchase made before signing up; messages you sent us in the help form, by e-mail or on WhatsApp, which you can ask us to delete; the free-trial record of the device you used (for the periods above), so the trial isn't given twice; and an activity log and usage data, which stay linked to an account ID that no longer has an e-mail or a name. None of these include photos or films. Copies in backups are deleted as the backups roll over.
Marketing and updates
- Marketing e-mails (ideas, offers, and a reminder about an order you didn't finish) are sent only if you ticked that you agree, at sign-up or on the account page, as section 30A of the Israeli Communications Law requires. Every such e-mail has a one-click unsubscribe link, and you can also turn it off on the account page.
- E-mails about the service itself, such as “your film is ready”, an order confirmation or a password reset, keep coming after you unsubscribe from marketing.
- “Your film is ready” WhatsApp messages are sent only if you added a phone number on the account page. Delete the number to stop them.
- Reminders before an event or before a yahrzeit are sent only if you asked for them in the event details, and you can cancel them there.
- Offers and personal offers appear only inside the app, and you can close them. They are never e-mailed.
Cookies and measurement
The site glim.co.il sets no cookies. The app uses the cookies the service needs, and measures usage only if you agreed. The full list, and how to change your choice, is in the cookie policy.
Share links
A film or an animation you share opens for anyone who has the link, without signing in. We count how many times a link was viewed, without recording who viewed it. Viewing pages don't appear in search engines. You can stop sharing at any time, and deleting the film, the animation or the account disables the link, but we have no control over copies others have already downloaded.
Photos sent through a link
Someone making a film can send their family a link for sending them photos without signing up. Sent photos that way? You gave us the name you wrote, the photos and the captions. They reach only the person who sent you the link, in their project, and they decide whether to add them to the film. A photo they added becomes a photo in their project, with the caption you wrote, and this policy applies to it like any photo they uploaded. Photos they declined, or that never finished uploading, are deleted within a day. Your browser remembers the name you wrote, so you don't have to type it again. Send only photos you may share. Want us to delete a photo you sent? Write to us, or to the person who sent you the link.
Photos from Google Photos
When the option appears on the upload page, you can bring photos straight from Google Photos. This is how we handle what comes from there:
- On Google's screen you grant one permission: to choose photos in Google's picker. We get no access to your library, your albums or your Google account details, and a photo you didn't choose never reaches us.
- We copy into the project only the photos you chose, without videos, each with its file name. From then on they're like a photo you uploaded from your device: they go through the same checks, reach the same providers only to make what you asked for, are kept for the same period and are deleted the same way.
- The permission Google gives lasts an hour. It's kept encrypted only in a cookie in your browser, tied to your Glim account, and not on our side. “Disconnect Google Photos” revokes it with Google at once, and you can also remove it in your Google account, under third-party apps & services.
- Once the photos are here, we delete the selection at Google. We don't touch the photos in Google Photos themselves: deleting here doesn't delete them there, and deleting there doesn't delete our copy.
- A team member sees such a photo only if you ask us for help with it, or to check a photo that the content check stopped or that was reported.
- Glim's use and transfer of information received from Google Photos APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We won't sell the photos, or use them for advertising or to train AI models.
Your rights
- To see your data and get a copy: on the account page, download your account data as one file, and your photos, animations and films as a zip file; or ask us.
- To correct wrong or outdated data: your name and phone on the account page, anything else by writing to us.
- To delete a project or the whole account, and to ask us to delete messages you sent.
- To stop marketing, and to ask for a person to review a photo the automatic check stopped.
We'll respond within 30 days, and before we hand over data we'll make sure the request comes from you. Think we didn't handle it properly? You can complain to the Privacy Protection Authority.
Security
Connections are encrypted (HTTPS), files and the database are stored encrypted and private, links to files expire after a short time, and team access is limited to those who need it. We follow the Privacy Protection (Data Security) Regulations, 5777-2017. No system is completely immune. If a serious security incident affects your data, we'll report it to the Privacy Protection Authority and let you know, as the law requires.
Changes to this policy
We'll update this policy when something in the service changes, and the date at the top will change. We'll announce a material change in advance by e-mail or in the app.
Contact
CodePal.AI, an Israeli licensed dealer (osek murshe), no. 205666134, Hoshen 10, Ness Ziona.
hello@glim.co.il · phone 050-6793057 · WhatsApp. See also the terms of use.