Privacy Policy
Effective
In short
- Your photo is never stored. It is used for one read and discarded; body scans never leave your device.
- We keep the measurements from your read, so you don't need a new photo each time, in a profile that works without an account.
- We never sell your data, never use it for advertising, and never rate how anyone looks.
- You can export or delete your data at any time from your profile, and turn usage data off under Privacy choices.
- Questions: [email protected].
Who we are
FaceAuraAI is operated by Face Aura AI, Bangalore 560047, India. Face Aura AI is in the process of registration; these terms will name the registered entity once it exists. In this policy, “we” means the operator of FaceAuraAI. We decide why and how your personal data is processed, so we are the data fiduciary for it under India's Digital Personal Data Protection Act, 2023.
Your photo
When you choose a photo, it is resized and its location and camera metadata are removed in your browser. For face tools, facial landmarks are found in your browser where it can; otherwise they are found on our server, by our own model or by Amazon Rekognition. The photo is then sent once, over an encrypted connection, so we can check its lighting and sharpness and, for colour tools, sample your skin colour.
We never store your photo. It is held in memory for that one request and discarded. The body shape detector never uploads its photo at all: only three ratios leave your device. The celebrity lookalike sends your photo to Hive, a third-party vision service, for that one comparison (see section 6).
What we collect and keep
What Why How long Measurements from your photo: normalised positions of about thirty facial landmarks, and what we derive from them (face shape, eye and lip measurements, proportions, left–right differences), your measured skin colour, undertone and season, or your body ratios To give you your read and remember it, so you don't need a new photo each time Without an account: 90 days after you last use your profile. With an account: until you delete it A working record of each analysis (the same measurements and the result) So the recommendations for that result can be fetched 7 days, then deleted Answers you give us (for example your occasion, climate, hair length or a season you declare) To tailor recommendations With your profile What we recommended, and what you saved or dismissed, including saved looks So we don't show you something you dismissed, and can show what you saved With your profile Your email address, if you create an account To sign you in and keep your profile across devices Until you delete your account Your plan and payment status, if you subscribe (card details are handled by Razorpay and never reach us) To provide what you paid for As long as the law requires us to keep billing records How many reads you have used To apply the free limits For the current limit period Usage events (for example that a profile section was viewed or a colour was copied), with a random browser ID and, if signed in, your account ID. Never your photo or anything measured about you To understand which parts of the product help, in aggregate Only if you allow usage data (see section 5). Kept in aggregate; you can turn it off at any time Measurements from your face are sensitive
Measurements derived from your face can count as biometric data. We process them only to give you the result you asked for, with your consent, which you give by choosing a photo and starting a read. We never use them to identify you, never sell them, never share them for advertising, and never use them to rate how anyone looks. We don't use your photo or measurements to train models.
Usage data and your choice
Usage data is on by default and stays with us: it is not sent to advertisers, analytics companies or any third party, and it never contains your photo or appearance data. You can turn it off under Privacy choices on your profile. If your browser sends a Global Privacy Control signal, we treat usage data as off.
Who else processes your data
We use a small number of service providers, each only for the purpose below:
- Supabase: account sign-in.
- Amazon Web Services (Rekognition): finds facial landmarks on our server when your browser can't. Receives the photo for that one request.
- Hive: the celebrity lookalike only. Receives the photo for that one comparison.
- Razorpay: payments. Handles card and payment details directly.
- Our hosting provider: runs our servers and database.
Some of these providers may process data outside India. We don't sell your personal data to anyone.
Your rights and controls
You can, at any time:
- Get a copy of everything in your profile: Export my data.
- Delete your saved read, or your whole profile: Your data.
- Correct an answer you gave us, from your profile, or retake a read.
- Withdraw consent for usage data under Privacy choices, or stop using the tools.
- Ask us about anything else, or nominate someone to act for you, by emailing [email protected].
You also have the right to complain to the Data Protection Board of India.
Children
FaceAuraAI is not meant for anyone under 18. Please don't use it, or upload a photo of anyone, under 18.
Security
Data travels over encrypted connections. We keep as little as the service needs: no photos, and measurements rather than images. Access to our database is limited to the people who run the service. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Grievance officer and contact
For any question or complaint about your data, write to our Grievance Officer at [email protected], FaceAuraAI, Bangalore 560047, India. We will acknowledge your message and respond within 30 days.
Changes to this policy
If we change this policy, we will update the effective date above, and for significant changes we will tell you on the site before they take effect.