This is how we treat your face, your account data, and what we do when someone asks us for it. We've tried to keep it readable.
What we collect
- Account info: your handle, your email, a hashed password. That's it.
- Uploads: selfies you drop into the transformer. Stored encrypted, scoped to your account.
- Transforms: the outputs. Saved to your library so you can go back.
- Posts and reactions: if you post to the feed, that's public. Reactions and remixes are part of it.
- Device basics: browser, OS, rough location from IP. Standard stuff for fraud and abuse prevention.
- Billing (Pro only): we use Stripe. We never see your card number.
What we don't do
We don't train machine-learning models on your uploads. We don't sell your data. We don't embed third-party ad trackers across the site.
Why we store what we store
- To run the service: transforming the selfie, showing it back, letting you revisit.
- To keep the feed safe: abuse detection, report handling, moderation queues.
- To run the business: billing, support, legal obligations.
How long we keep things
Uploads and transforms live in your account until you delete them. Deleted items are gone from our live systems within 24 hours and purged from backups within 30 days. If you delete your account, we keep minimal records for about 12 months for fraud and legal reasons, then purge.
Sharing
Service providers we trust — cloud hosting, payments (Stripe), email (Resend), error monitoring. Each signs a data-processing agreement. They don't get to use your data for their own purposes.
We'll respond to lawful requests from authorities, but we push back on overbroad ones and tell you when we can.
Your rights
Depending on where you live, you can ask us for a copy of your data, fix wrong info, port it out, delete it, or object to certain uses. Most of that is already one button in the app under Settings → Data. If you can't find it, use the contact form and we'll handle it inside 30 days.
Kids
Facetopia is not for kids. We don't knowingly collect info from anyone under 16. If you think we have, tell us and we'll delete it.
Cookies and analytics
We use first-party cookies for login sessions and Vercel's privacy-friendly web analytics. No third-party ad cookies. See the cookie policy for the details.
Changes
When we update this policy, we'll post the change with a new date. For meaningful changes, we'll email active accounts.
Contact us
Privacy questions, data requests, complaints: use the contact form and mention "privacy" — we'll route it to Noor.