How we handle accounts, prompts, images, browser storage, third-party processing, and your information rights.
1. Scope and information processor
This policy explains how the Hueward web service processes information relating to individuals. The operator and personal information processor is 成都一个蘑科技有限公司 (referred to as “we” or “us”). Contact aiart@choosefire.com for privacy requests.
The unified account center, WeChat, and other third parties may apply their own privacy notices when providing their services. This policy explains Hueward’s own use of information; it does not replace third-party notices or any necessary authorization.
2. Information categories and purposes
| Information category | Processing and purpose |
|---|---|
| Accounts and authentication | User IDs, nicknames, login channels, authorized identity identifiers, session credentials, and account status support login, account linking, and permission management. Unified login may involve the identity, email, and profile scopes you authorize. Hueward uses an authorization flow and does not receive your unified account password on this page. |
| Creation inputs | Prompts, images you upload, selected models, aspect ratios, and other parameters support uploads, image editing, template generation, prompt processing, and task execution. |
| Images and tasks | Generated results, task IDs, status, times, original parameters, and favorite or deletion actions support result display, history, downloads, parameter reuse, and troubleshooting. |
| Credits and API usage | Credits, image point snapshots, charge or redemption records, API key management, and request records support balance display, permission checks, billing review, and abuse prevention. Online purchasing is currently unavailable on the web; the plan page does not collect bank card information. |
| Technical and safety information | Connection IP addresses, request and error records, times, network information transmitted by browsers or devices, and necessary safety check results support content safety, access control, diagnosis, and service operation. |
| Information you send us | Contact email addresses, issue descriptions, task or account IDs, and necessary evidence of rights support assistance, privacy requests, complaints, and appeals. |
We process information according to the features you use and their necessary purposes. If you decline to provide information needed for login or generation, those features may be unavailable, but public legal documents and contact information remain accessible. Do not upload others’ information that you are not entitled to process, sensitive personal information, or confidential materials.
3. Processing grounds and necessary scope
Account authentication, task execution, history, and credit review provide the services you request. Where applicable law permits, this processing is based on the necessity of performing our service agreement. Legally required record retention and responses to competent authorities are based on the relevant legal obligations. Security protection and troubleshooting occur only where applicable law permits and a valid processing ground exists.
We will obtain valid consent before other processing that requires it begins. General acceptance of terms or a notice to read the Privacy Policy does not replace separate authorization required for sensitive information, additional public display, or other processing.
4. Browser storage and external resources
| Storage purpose | Content and controls |
|---|---|
| Staying signed in | Local storage holds refresh credentials and account snapshots; access credentials are used in the current page’s memory. Signing out clears login-related state. Clearing browser site data may require you to sign in again. |
| Login return navigation | Session storage temporarily holds verification information and the return destination for unified login, and is cleared after the callback reads it. Closing the relevant browser session generally clears this storage. |
| Creation drafts | Local storage saves prompts, models, aspect ratios, and related editing state by account and site region for recovery after refresh or return. Signing out does not mean all drafts have been deleted. On shared devices, clear them through your browser’s site settings. |
| Appearance and page position | Local storage saves light, dark, or system appearance preferences and your interface language choice. Session storage may save the image history page’s scroll position and temporary editing state during language changes. You may change the theme or language, or clear site data. |
This storage supports the current features and does not grant access to your entire device or browsing history. Blocking browser storage may affect persistent login, draft recovery, or preference memory.
Pages also request fonts, example images, and other static resources. Resource providers receive the information necessary to establish those network connections. You choose whether to follow external website links; read the destination site’s notices after leaving this service.
5. Technical providers and information transfers
| Service stage | Related services and information |
|---|---|
| Site access and resources | Cloudflare provides hosting, content delivery, and related infrastructure; Google Fonts provides external fonts. These services receive IP addresses, request times, and necessary network information sent by your browser. |
| Login and accounts | The unified account center provides authorized login. Recovering or linking a legacy WeChat account involves WeChat services. The relevant paths process authorization identifiers, account links, sessions, and the profile information you authorize. |
| Image storage | Uploaded images and task results are saved and retrieved through object storage. Relevant technologies include Tencent Cloud COS and Cloudflare storage. Required images and file information are sent to the corresponding storage services. |
| Generation and safety processing | Depending on the selected model and task type, model computing providers such as Tuzi and RunPod and necessary content safety services process prompts, images or image links, generation parameters, and results. Not every request sends content to every provider. |
| Contact email | Cloudflare Email Routing forwards messages to a Gmail inbox managed by the operator. Cloudflare and Google process message content, sender addresses, attachments, and necessary delivery information. |
We transfer information within the scope necessary for the relevant feature. Third parties acting as entrusted service providers should process information within the agreed scope. When third parties independently provide account, resource, or other services, their own processing is also governed by their privacy notices. Contact us to learn which recipients are involved in your tasks.
General permission to process tasks does not authorize selling personal information or unrestricted public disclosure. When providing information to other processors, transferring it across borders, or responding to competent authorities, we will fulfill applicable notice, authorization, and other legal obligations.
6. Regions and cross-border processing
Hueward serves supported regions outside mainland China. Information may be processed in China and other regions where relevant infrastructure, storage, and model services are located. We do not guarantee processing or storage exclusively in your region.
Processing locations may vary between providers and model routes. Contact us about recipients, processing locations, and applicable safeguards for the features you use, or to make a request concerning information transfers.
For cross-border transfers of personal information, we will fulfill necessary obligations according to actual data flows and applicable law. Additional notices, separate consent, or other safeguards required by law will be completed before the relevant processing. The product’s global positioning does not change your statutory information protection rights.
7. Retention, image removal, and security
We retain information for the period necessary for the relevant processing purpose. Account information maintains active accounts. Task and image records support history, downloads, and requested account services. Credit, request, and dispute records support charge reviews, disputes, and legal retention obligations. Technical logs and backups are retained as needed for operation, security, recovery, and legal obligations. Third-party services may have different retention periods.
Browser drafts and preferences generally remain until overwritten or cleared by you. You can remove unwanted images from your history. Currently, this removes them from the account list and does not simultaneously destroy stored files, billing records, provider copies, or all backups. Contact us with the scope of your request to delete personal information or original images, or close an account.
When handling deletion requests, we review the relevant data and any necessary reasons for retention, such as legal obligations or unresolved disputes. We will explain the grounds and restrictions for information that cannot be deleted immediately. Information kept solely for legally required retention will not be used for other purposes.
We use necessary access controls and security measures to protect information, but cannot promise absolute security. Recipients may forward public links, and browsers or shared devices may retain copies. Share carefully and save images you need.
8. Creative content and model training
Submitting prompts, images, or generation tasks does not automatically authorize us to use your private creative content for model training, advertising, or public datasets. If we offer such additional uses, we will separately explain their purposes, scope, and choices and obtain necessary authorization.
Third-party model providers receive inputs, outputs, or related records as needed for tasks. Their retention and other use conditions depend on the relevant model service and processing arrangements. This policy does not promise “zero retention” or “never used for training” for every model service. If you need specific confidentiality or processing safeguards, contact us before submitting to understand the relevant model’s conditions, and avoid uploading confidential or sensitive materials.
9. Your rights and requests
Under applicable law, you may request information about processing, access or correction, deletion or account closure, and, where applicable, restriction of processing, objection, or a portable data copy. Where processing is based on consent, you may withdraw consent as permitted by law; withdrawal does not affect earlier lawful processing.
Send requests to aiart@choosefire.com, optionally with the subject “Hueward Privacy Request”. State your user ID, request scope, and a contact method that can receive replies. To prevent disclosure, identity verification proportionate to the request’s risk may be necessary; unrelated evidence should not be required. The current web interface has no self-service account closure button. Signing out must not be treated as account closure.
We will handle requests within the period required by applicable law. If a request cannot be fully fulfilled or an extension is legally necessary, we will explain the reasons, relevant limitations, and available paths. If you disagree with the outcome, appeal by email or complain to competent regulators as permitted by law.
10. Minors, changes, and contact
The service involves image uploads and content generation. Minors may use it only where local age requirements and necessary guardian authorization are met, and should not submit children’s information they are not entitled to provide. Guardians who discover improper processing of a minor’s information may contact us to request review and appropriate action.
If processing purposes, information categories, recipients, or other important matters change, we will update this policy and provide appropriate notice before changes apply. We will obtain fresh consent or other authorization separately where required by law.
The version and update date appear at the top of this page. Send privacy questions, deletion or account closure requests, complaints, and appeals to aiart@choosefire.com.
Operator and contact
Hueward is operated by 成都一个蘑科技有限公司.
For support, privacy requests, copyright complaints, and appeals, contact aiart@choosefire.com.