FaceLS is operated by Facial Gains LLC (Ohio, USA). This policy explains what we collect, why, who processes it for us, and how you delete it. The short version: your photos and results are private to your account, we don't sell your data or run ads, and you can delete everything yourself at any time.
1. What we collect
Account data. When you sign in with Google we receive your name, email address and profile picture. We never see your password.
Photos and facial data. The photos you upload (front, side, and generated hair previews) and what we compute from them: facial landmark coordinates, measurements, proportions, scores, written assessments, and generated preview images. Landmark geometry and scores are biometric-style data — they describe your face. You may also enter optional details yourself (such as age bracket, gender or ancestry) to make the scoring reference more relevant.
Billing data. Handled by Stripe. We store only your plan, subscription status and Stripe customer reference — never card numbers.
Usage and logs. Standard server logs and basic usage records (for example how many scans you've run, which we need to enforce plan allowances). We also use, or may use, privacy-focused product analytics (see below). We do not use advertising trackers.
2. How we use it
To run the service: analyzing your photos, showing your results, generating previews, enforcing plan limits, taking payments, sending service emails (welcome, billing, usage notices), and responding to support. We also use, or may use, product analytics to see how the product is used — page views, which features people open, and funnel events such as an upload, a finished scan, a paywall view, and a purchase — so we can improve it. That analytics data is not sold and is not used for advertising. With your consent, occasional product emails you can opt out of in one click. We do not sell personal data and we do not share it with advertisers.
3. Your face data, specifically
FaceLS works by measuring your face, so we want to be explicit. Uploaded photos are converted into landmark coordinates and geometric measurements; a vision model additionally rates qualities a tape measure cannot see. These measurements are used only to produce your own report. They are not used to identify you or anyone else, not matched against other people's faces, not used to train models, and not sold or shared for any other purpose. They are stored alongside your account and deleted when you delete the scan or your account.
4. Who processes data for us
We use a small set of service providers, each only for what's listed: Supabase (database, photo storage, sign-in), Railway (hosting), Stripe (payments), OpenAI (visual analysis of your photos), fal.ai (hairstyle preview images), Resend (email delivery), PostHog (privacy-focused product analytics), and Google (sign-in). Your photos are sent to OpenAI and fal.ai solely to produce your results; under our API agreements with them, they are not used to train their models.
5. Storage, security and retention
Data is stored in the United States and encrypted in transit. Photos live in our storage bucket at unlisted addresses — we do not publish or advertise them, and the dashboard still requires your sign-in. We do not use advertising trackers. We do use, or may use, PostHog for privacy-focused product analytics: page views, feature usage, and funnel events such as upload, scan completion, paywall views, and purchases. We use that to improve the product. This data is not sold and is not used for advertising. To opt out, contact us.
How long we keep things
- Account, photos, scans, previews, simulations. Kept while the account exists so your history works. Delete a scan and that scan's photos and derived data are removed immediately. Delete the account and we erase the profile, every scan, every preview, the sign-in identity, and the stored photo files.
- Billing records. Stripe keeps invoices and payment history as tax and card-network rules require (typically years). We keep only the plan, status and Stripe customer reference on our side; those go when the account is deleted.
- Email log. A short ledger of which service emails we already sent (so we never send the same one twice). It is deleted with the account.
- Server and host logs. Short-lived operational logs on our host (Railway) and database (Supabase), typically days to a few weeks, used only to keep the service running and debug failures. They are not used for advertising.
- Inactive accounts. We do not auto-delete an account just because you have not signed in. You can delete it yourself from the account page at any time. If we ever introduce an inactivity deletion, we will email you first.
6. Your rights and controls
From the account page you can view your data, delete individual scans, or delete your whole account — no support ticket needed. Depending on where you live (GDPR, UK GDPR, CCPA and similar), you also have rights to access, correct, export, delete, or object to processing of your personal data, and to complain to your local data-protection authority. For any of these, email facelssupport@gmail.com; we respond within 30 days. To opt out of product analytics, contact us at the same address — there is no in-app switch for this. We do not discriminate against you for exercising privacy rights.
7. Cookies
We use functional cookies: keeping you signed in, remembering your theme, and honouring referral links. PostHog may also set a first-party cookie (or a similar identifier) to count page views and feature use. No third-party advertising or cross-site tracking cookies.
8. Children
FaceLS is for adults. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it. Do not upload photos of minors.
9. Changes
If we materially change this policy we will notify you by email or in the app before the change takes effect.
10. Contact
Privacy questions and requests: Facial Gains LLC — facelssupport@gmail.com