Privacy

This is not a legal document but an honest list of what happens to your data. A policy with company details and GDPR rights will come together with payments.

Today: Always Free

• The app does not go online. Photos, faces, names and face vectors never leave your computer.
• The app has no telemetry and no analytics.
• This site sets no cookies and does not count visitors. Its font and scripts are served only from the site itself. Request logs exist only at Cloudflare, which hosts the site.

Once Pro arrives — planned

Pro is not out yet, and everything in this section is a plan, not something that works today.

• Photos, face boxes and names are encrypted on your computer before upload. The service stores and passes on only encrypted data and has no keys to it: not “we don’t look”, but “we can’t”.
• Backups live in storage you connected yourself — Google Drive and similar. Encrypted data stays with us only temporarily, in transit, and is deleted on a schedule.
• Face vectors never leave your computer, not even encrypted.
• The exception is AI features. A photo you yourself chose to bring to life or enhance goes to a third-party service unencrypted — only after a warning and your consent, without names, face boxes or facts about people. Consent can be withdrawn in settings. Once a service is chosen, it will be named here.
• What the service does see: your account, who shared an album with whom, the sizes and times of uploads. Your email address is stored encrypted; IP addresses are not stored.
• An encryption password cannot be recovered without the recovery key. That follows from us having no keys; it is not an oversight.