Privacy Policy

FaceLS is operated by Facial Gains LLC (Ohio, USA). This policy explains what we collect, why, who processes it for us, and how you delete it. The short version: your photos and results are private to your account, we don't sell your data or run ads, and you can delete everything yourself at any time.

1. What we collect

Account data. When you sign in with Google we receive your name, email address and profile picture. We never see your password.

Photos and facial data. The photos you upload (front, side, and generated hair previews) and what we compute from them: facial landmark coordinates, measurements, proportions, scores, written assessments, and generated preview images. Landmark geometry and scores are biometric-style data — they describe your face. You may also enter optional details yourself (such as age bracket, gender or ancestry) to make the scoring reference more relevant.

Billing data. Handled by Stripe. We store only your plan, subscription status and Stripe customer reference — never card numbers.

Usage and logs. Standard server logs and basic usage records (for example how many scans you've run, which we need to enforce plan allowances). We do not use advertising trackers.

2. How we use it

To run the service: analyzing your photos, showing your results, generating previews, enforcing plan limits, taking payments, sending service emails (welcome, billing, usage notices), and responding to support. With your consent, occasional product emails you can opt out of in one click. We do not sell personal data and we do not share it with advertisers.

3. Your face data, specifically

FaceLS works by measuring your face, so we want to be explicit. Uploaded photos are converted into landmark coordinates and geometric measurements; a vision model additionally rates qualities a tape measure cannot see. These measurements are used only to produce your own report. They are not used to identify you or anyone else, not matched against other people's faces, not used to train models, and not sold or shared for any other purpose. They are stored alongside your account and deleted when you delete the scan or your account.

4. Who processes data for us

We use a small set of service providers, each only for what's listed: Supabase (database, photo storage, sign-in), Railway (hosting), Stripe (payments), OpenAI (visual analysis of your photos), fal.ai (hairstyle preview images), Resend (email delivery), and Google (sign-in). Your photos are sent to OpenAI and fal.ai solely to produce your results; under our API agreements with them, they are not used to train their models.

5. Storage, security and retention

Data is stored in the United States and encrypted in transit. Photos live in our storage bucket at unlisted addresses — we do not publish or advertise them, and the dashboard still requires your sign-in. We do not use advertising or analytics trackers.

How long we keep things

• Account, photos, scans, previews, simulations. Kept while the account exists so your history works. Delete a scan and that scan's photos and derived data are removed immediately. Delete the account and we erase the profile, every scan, every preview, the sign-in identity, and the stored photo files.
• Billing records. Stripe keeps invoices and payment history as tax and card-network rules require (typically years). We keep only the plan, status and Stripe customer reference on our side; those go when the account is deleted.
• Email log. A short ledger of which service emails we already sent (so we never send the same one twice). It is deleted with the account.
• Server and host logs. Short-lived operational logs on our host (Railway) and database (Supabase), typically days to a few weeks, used only to keep the service running and debug failures. They are not used for advertising.
• Inactive accounts. We do not auto-delete an account just because you have not signed in. You can delete it yourself from the account page at any time. If we ever introduce an inactivity deletion, we will email you first.

6. Your rights and controls

From the account page you can view your data, delete individual scans, or delete your whole account — no support ticket needed. Depending on where you live (GDPR, UK GDPR, CCPA and similar), you also have rights to access, correct, export, delete, or object to processing of your personal data, and to complain to your local data-protection authority. For any of these, email facelssupport@gmail.com; we respond within 30 days. We do not discriminate against you for exercising privacy rights.

7. Cookies

We use only functional cookies: keeping you signed in, remembering your theme, and honouring referral links. No third-party advertising or cross-site tracking cookies.

8. Children

FaceLS is for adults. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it. Do not upload photos of minors.

9. Changes

If we materially change this policy we will notify you by email or in the app before the change takes effect.

10. Contact

Privacy questions and requests: Facial Gains LLC — facelssupport@gmail.com