Biometric Privacy Notice

In one sentence

Our on-device tools measure facial geometry on your device only and keep nothing; AI features (analysis, report and try-ons) upload a head-and-shoulders crop only after you sign in, buy a plan and give separate written consent.

What counts as biometric data here

When you choose a photo or use your camera, our tools detect 478 facial landmarks and compute proportions (face length and widths, jaw angle, symmetry, eye angle) and color readings (skin, hair and eye samples). Facial geometry can be biometric information under laws such as the Illinois Biometric Information Privacy Act (BIPA), Texas CUBI and Washington’s My Health My Data Act.

On-device tools — retention: zero

• Where the analysis runs: In your browser tab (MediaPipe Face Landmarker, WebAssembly)
• What is sent to us: Nothing — no photo, no landmarks, no measurements
• What is stored: Nothing. A single localStorage flag remembers that you acknowledged this notice
• Retention: 0 — the photo is gone when you close or reload the tab
• Model files: Downloaded once from public CDNs (jsdelivr.net, storage.googleapis.com)

Before the first analysis of your own photo we ask you to confirm that you are 18 or older and that it is your photo. Demo portraits on the site are illustrations or AI-generated models.

Verify it yourself: open your browser’s developer tools → Network, then run a tool — no request carries your image. Or switch on airplane mode after the model loads; the tools still work.

AI features

For the AI analysis, style report and try-ons:

• a head-and-shoulders crop is uploaded only after you sign in, buy a plan and give separate written consent (18+, your own photo, biometric processing);
• the crop is first checked for NSFW content by fal.ai, then sent to kie.ai, which runs Google’s Gemini (photo checks and analysis) and Nano Banana (try-ons) for us;
• it is used only to create your analysis, report and try-ons, and never for identification, advertising or model training;
• the photo and generated images are deleted from our systems within 24 hours. kie.ai deletes the uploaded photo within 24 hours and, under its own policy, keeps generated images for up to 14 days and request logs for up to 2 months;
• report text and palettes contain no biometric data and stay in your account until you delete them (each report has a delete button);
• we never sell, lease, trade or otherwise profit from biometric data.

Your rights

You can withdraw consent at any time before upload, request deletion of your account and reports, and ask what we hold about you by emailing support@faceandcolor.com or, after signing in, through Settings → Support Tickets. We respond within 30 days. See also our Privacy Policy.

Contact

Questions about this notice: email support@faceandcolor.com. We will update this page — with a new date above — before any change in how facial data is handled.