Privacy Policy
Last updated: 2026-08-21
This Privacy Policy explains how Lala Chrome Global (also “Lala Chrome”, “we”, or “us”) collects, uses, stores, and protects your personal data when you use the Global service. The Global service is operated independently from the China service (magicandgrind.com): accounts, data, and payment ledgers are not shared between them.
1. Who we are
Lala Chrome Global is operated by an independent developer. For any privacy question or request, contact us at caizhidian@gmail.com.
The Global service is provided from Singapore and is governed by Singapore’s Personal Data Protection Act 2012 (PDPA).
2. Data we collect
- Account data: email address, authentication credentials (password hash or OAuth identity), display name.
- Content you provide: prompts, reference images, product materials, and generated assets on your canvas.
- Usage data: log data needed to operate and secure the service (timestamps, IP address for abuse prevention and rate limiting, feature usage).
- Billing data: when paid features launch, order and refund records. Card details are handled by our payment processor; we never see or store full card numbers.
3. How we use your data
- Provide, maintain, and improve the service.
- Authenticate you and secure your account.
- Process Coins transactions and keep auditable ledgers.
- Prevent abuse, fraud, and violations of our Acceptable Use Policy.
- Respond to your support and rights requests.
4. Where your data is processed
Account, content, and ledger data for the Global service is stored on Alibaba Cloud infrastructure in Singapore.
To generate images, your prompts and reference images are sent to the model provider you selected (for example OpenAI), which processes them in its own supported regions. Each model’s data handling is shown in the product before you use it.
We do not transfer Global-service data into the China service, and we do not move your data between regions automatically based on your IP address.
5. Processors
- Alibaba Cloud (Singapore) — hosting, database, and object storage.
- OpenAI — image generation provider, when you use models it powers.
- Google — sign-in provider, if you choose Google login.
- Email delivery provider — transactional email (verification codes, receipts).
6. Retention
We keep account and ledger data for as long as your account is active and as required for financial record-keeping. You may request export or deletion at any time (Section 8).
7. Region availability
The Global service is not directed at residents of the European Economic Area (EEA) during the invitation beta. If you are in the EEA, please do not register for the Global service at this time.
8. Your rights and requests
You may request access to, correction of, export of, or deletion of your personal data, and you may withdraw consent where processing is based on consent. During the beta these requests are handled manually: email caizhidian@gmail.com and we will respond within 48 hours. Deletion applies to the Global service unit only; it does not affect any separate account you may hold on the China service.
9. Changes
We will post material changes on this page and update the “Last updated” date above. Continued use after a change takes effect constitutes acceptance.