FacetrailPrivacy Policy
The short version
- You search with one face photo that you crop yourself. It is sent to our face-search provider only to run that search and is deleted from our servers as soon as the search ends.
- The small face preview you see in History is stored only on your phone, never uploaded.
- Search results (links, preview images, scores) are automatically deleted after 30 days. You can delete them sooner.
- We keep a misuse log without any photo or link for 365 days so we can handle complaints and abuse.
- No ads, no data selling, no third-party analytics. You can delete your account in the app at any time.
1. Who we are
Facetrail: AI Face Search (“Facetrail”, “we”) is operated by MEG Studio, an independent developer based in Türkiye. We are the data controller for the personal data described here. Contact: [email protected].
2. What we collect
| Data | Details |
|---|---|
| Account data | When you sign in with Google: your name, e-mail address, profile picture URL and Google account ID. |
| Face photo | The cropped photo you submit for a search (see section 3). |
| Search results | Links to matching web pages, their domain, a small preview image supplied by the provider, a similarity score and the search time and status. |
| Consent records | The time you confirmed you are 18+, accepted the Terms (and which version), and gave explicit consent to processing of your photo and its transfer to the provider. |
| Misuse log | Your account ID, search ID, time, which provider was used, status, error code and number of results. No photo and no result links. |
| Credits and purchases | Credit balance, credit transactions, subscription status (e.g. Pro end date) and refund count. Payments are handled by Google Play; we never see your card details. |
| Notifications | If you allow notifications: your device’s push token and the app language, so we can tell you when a search is finished. |
| Technical data | IP address and request details in short-lived server logs, used for security and rate limiting. |
We do not collect your location, contacts, microphone audio or your photo gallery. On Android the system photo picker gives the app only the single photo you select. We do not use advertising IDs, ad networks or third-party analytics.
3. Your face photo
- You take or choose a photo and crop it to one face on your device. Only the cropped area (resized to at most 1024 px) is uploaded.
- Our server forwards it to a third-party face-search provider, which compares it with faces on publicly accessible web pages and returns matches. This comparison involves processing of facial features, which may be biometric data. We process it only with your explicit consent, which you give in the app before your first search.
- The photo is deleted from our servers when the search ends, whether it succeeds or fails. We do not build or keep a face template or a face database.
- The provider receives the photo only to perform the search. We do not allow it to be used for any other purpose on our behalf.
- To show your history, the app saves a small preview (about 160 px) of the cropped face on your device only, in a folder that belongs to your account. It is never uploaded. It is removed when you clear your history, delete your account or uninstall the app.
- You must only search your own photo or a photo of an adult who has explicitly agreed. Photos of children are not allowed.
4. Why we use data, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Running searches, showing results and history | Performance of our contract with you; for the face photo, your explicit consent. |
| Account, sign-in, credits and subscriptions | Performance of contract. |
| Search-finished notifications | Your consent (the Android notification permission). You can turn it off anytime. |
| Preventing misuse, fraud and refund abuse; handling complaints; security and rate limits | Our legitimate interest in keeping the service safe and lawful. |
| Accounting and tax records; answering lawful requests from authorities | Legal obligation. |
5. Who receives data
We do not sell personal data. We share it only with service providers that help us run Facetrail:
- Face-search providers: receive the cropped photo to perform the search.
- Hosting and database providers: store account data and results on our behalf (Hosting Dünyam; servers in Istanbul, Türkiye).
- Cloudflare: network security and delivery for our website and API. Requests to our servers, including the photo you upload, pass through Cloudflare encrypted.
- Google: Google Sign-In, Google Play Billing and Firebase Cloud Messaging (to deliver notifications).
- RevenueCat: manages in-app purchases and subscriptions. It receives our internal account ID, purchase receipts, product, price, currency and country.
- Expo: relays push notifications to your device using your push token.
- Authorities: when we are legally required to, or to protect people from serious harm.
6. Transfers abroad
Our own servers and database are in Istanbul, Türkiye. Our face-search providers and several of the services above (Cloudflare, Google, RevenueCat, Expo) process data on servers outside your country, including outside Türkiye and the EU/EEA. The transfer of your face photo to the search provider happens only with your explicit consent, given before your first search after being informed of this transfer. Other transfers rely on the providers’ standard contractual safeguards where available.
7. How long we keep data
| Data | Retention |
|---|---|
| Face photo (server) | Deleted when the search ends. |
| Face preview (your device) | Until you clear history, delete your account or uninstall the app. |
| Search results | Automatically deleted after 30 days, or earlier if you delete them. |
| Misuse log (no photo, no links) | 365 days, also after you clear history or delete your account. |
| Account, consent records, push tokens | Until you delete your account. Push tokens are removed when you sign out. |
| Purchase and credit transactions | As long as required by tax and accounting law; unlinked from your profile after account deletion. |
| Server logs | Short term, for security purposes. |
8. Your rights
Depending on where you live (for example under KVKK in Türkiye or the GDPR in the EU), you may have the right to: know whether we process your data and get a copy; have it corrected or deleted; restrict or object to processing; receive it in a portable format; withdraw consent at any time (this does not affect searches already done); and complain to a data protection authority (in Türkiye: the KVKK Board). Write to [email protected]; we answer within 30 days. Turkish users can also read our KVKK notice.
9. Deleting your account
In the app go to Settings → Delete account. This immediately deletes your profile, search history, results and push tokens, and removes the face previews stored on that device. The misuse log and transaction records are kept only for the periods in section 7. You can also request deletion by e-mail; see Delete your account.
10. Age limit
Facetrail is only for people aged 18 or over. Searching photos of children is forbidden. If we learn that an account belongs to a minor, or that a child’s photo was searched, we will delete the related data and may close the account.
11. Security
Data is encrypted in transit (HTTPS). Access to our servers is restricted. Sign-in tokens are stored in your phone’s secure storage. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as required by law.
12. Changes and contact
If we make important changes, we will tell you in the app and ask you to accept them again where needed. Questions: [email protected].