Effective date: 1 October 2026

This policy explains what the FaceFrame app ("FaceFrame", "we", "us") does with information on iPhone, iPad and Android. In short: your photos and face data are analysed on your phone and never uploaded. FaceFrame has no account, no ads and no server that receives your photos.

1. What stays on your phone

FaceFrame processes the following only on your device. We never receive it, and it is never sent to anyone:

• Camera frames and photos you take or upload for a scan. Each saved scan keeps an upright copy of its photo without location or other metadata; your original in the photo library is not changed.
• Face points and measurements: the face landmarks found in the photo and about ten measurements calculated from them, plus a few numbers about your hair (for example its height on top and whether glasses show). The hair labels used to compute them are dropped right away.
• Scores and results: face shape, Harmony Score and Look Score, recalculated from the stored measurements.
• Your choices: your goals (haircut, beard, glasses), whose styles to show, your hair texture, saved styles, logged haircuts and notes, and reminder settings.

This data lives in the app's private storage, which is excluded from iCloud, Google and computer backups and from device-to-device transfer. FaceFrame never infers anything about you (such as gender, age, ethnicity or hair type) from your photo; the answers you give are the only ones used.

2. Information that leaves your phone

FaceFrame itself sends nothing. Two services built into the app receive limited information:

Purchases (RevenueCat, Apple and Google)

When you view, buy or restore FaceFrame Pro, the purchase goes through the App Store or Google Play, and our subscription provider RevenueCat receives an anonymous app ID it creates, the store's receipt and the products bought, with standard technical data: platform, device model and brand, OS and app version, language, and store country. On iOS this also includes the identifier for vendor (IDFV) and the App Tracking Transparency status. It is used only to provide and restore your purchase. RevenueCat never receives your photo, face data, scores or choices. See RevenueCat's privacy policy. Payments are handled by Apple or Google under their own privacy policies; we never see your payment details.

Anonymous usage statistics (Google MediaPipe)

FaceFrame uses Google's MediaPipe library to find face points and hair on your device. Google's released MediaPipe libraries send Google anonymous usage statistics, such as which model ran, how long it took and basic app and device information. They do not include your photos or any face data. See Google's privacy policy.

3. What we don't do

• No account or login, no advertising, no advertising identifiers, no tracking across apps or websites.
• We don't sell or share your personal information, and your face data is never used for advertising, marketing or any purpose other than showing you your result.
• No analytics of how you use the app.

4. Sharing your result