Effective: June 11, 2026
This Privacy Policy describes how Facette ("we", "us", "the app") handles information when you use the application. We designed Facette to be privacy-first: Facette has no servers and never collects or receives your data. Your information stays on your device — and, if you use iCloud Backup, in your own private Apple-encrypted iCloud backup.
Facette collects only information you actively create within the app:
We do not collect: your name, email address, phone number, location, contacts, browsing history, advertising identifiers, analytics events, crash reports, or any other identifying information.
All data is stored exclusively on your device, in the app's private sandbox. The data is not transmitted to any Facette server, third party, advertiser, analytics provider, or cloud backup we control.
If you have iCloud backup enabled for your device, iOS may include the app's data in its standard encrypted device backup. This is managed entirely by Apple, not by Facette.
Facette uses your device's front camera and TrueDepth sensor solely to perform face measurement during a scan session. The camera is active only while you are inside the scan view. We do not capture audio.
Some U.S. state laws (including Illinois BIPA, Texas CUBI, and Washington's biometric law) and international laws (including GDPR Article 9) treat 3D face geometry and face geometry-derived measurements as biometric identifiers / biometric information. Facette processes biometric face data only on your device, only for the purpose you initiate (your scan). We never transmit it to ourselves or any third party.
Purpose: We process biometric data solely to measure and track changes in your cosmetic facial appearance over time, and to produce the on-screen comparisons, heatmaps, and metrics inside Facette.
Retention: Biometric data is retained on your device only until you delete it or uninstall the app. In no event will it be retained for longer than three (3) years from your last interaction with the app. If you use iCloud Backup, a copy is included in your own Apple-encrypted iCloud backup, which you control in iOS Settings; we never receive it.
Destruction: Biometric data is destroyed when you delete a scan, when you choose Settings → Data → Delete all scans, or when you uninstall the app. Because we never receive a copy off your device, your destruction is complete and immediate.
No disclosure: We do not sell, lease, trade, profit from, or otherwise disclose your biometric data to any third party. We will only disclose biometric data if compelled by a valid warrant or subpoena, or with your express written consent.
Withdrawal of consent: You may withdraw consent to biometric processing at any time by deleting your scans inside the app or by uninstalling the app.
We do not sell, rent, or share your information with any third party. There are no advertisers, no data brokers, and no third-party SDKs that receive your data.
You can:
Because Facette never receives your data, there is no remote copy for us to delete on your behalf. Any copy in your own iCloud Backup is controlled by you in iOS Settings.
Facette is intended for users 18 years of age or older and is not directed to children. We do not knowingly collect data from anyone under 18.
Your data inherits the security of iOS's app sandbox and any device passcode or biometric lock you have enabled. We recommend enabling a device passcode or Face ID/Touch ID to protect access to your scans.
If we change this policy in the future, the new version will appear in the app and at this address, effective on the date listed at the top.