Privacy Policy
Last updated: October 12, 2026
Your photos are never uploaded.
We never use your photos to train AI.
Overview
FaceFilter is designed with privacy as a core principle. All face detection and recognition happens entirely on your device. Your photos are never uploaded to any server.
Data that stays on your device
- Face photos and face embeddings (mathematical representations of faces) are stored locally in an on-device database.
- The list of checked photos (which photos were checked and what we found) is stored locally.
- Corrections (faces you marked "not this person") are stored only on your phone, and you can reset them per person from their profile page.
- Your settings and preferences are stored locally.
None of this data leaves your phone. You can delete a person and their face data from their profile page, clear the list of checked photos in Settings, or remove everything by uninstalling the app.
Data we collect
We collect a small amount of data to keep the app working and improve it. None of it is linked to your name, and none of it includes your photos or face data:
- Crash reports: when the app crashes, an error report may be sent via Sentry. It includes the error message, technical details of where it happened, the device model and the Android version.
- Usage analytics: events such as "photos checked" or "person added" help us understand which features are used, via PostHog. No photos or names of your people are included.
- Face finder statistics: faces are found on your phone by Google ML Kit. ML Kit sends Google technical statistics about how it runs: device and app details, its own random install ID, speed, image size and errors. It never sends your photos or faces.
- Random app ID: a random ID created when you install the app, so reports from the same phone can be grouped. It is not your name, email or phone number, and it resets if you reinstall.
- Approximate location: our service providers may work out a rough location (such as country or city) from your internet address. We never use GPS, and we never use or send where your photos were taken.
- Purchases: if you buy Premium, RevenueCat keeps your purchase history and an anonymous customer ID so your Premium can be restored. Google Play handles the payment; we never see your card details.
Ads (free version only)
- The free version shows ads from Google AdMob, now and then after a photo check. Premium and the free trial have no ads.
- To show and measure ads, AdMob may use your phone's advertising ID and basic device information (such as phone model, operating system, language and approximate location from your internet address).
- Where the law requires it (for example in the EU and UK), we ask for your choice first, and ads are personalised only if you agree. You can change that choice in the app's Settings, and you can reset or delete your advertising ID in your phone's settings.
- Your photos and face data are never shared with ad networks and never leave your phone.
What we never do
- We never upload your photos to any server.
- We never sell your data or share your photos with third parties.
- We never use your photos to train AI models.
- We never create user accounts or ask for your name or contact details (unless you choose to email us).
- We never access your camera or microphone.
Third-party services
Permissions
- Photos and videos: required to check your photos and to save or move them.
- Notifications: optional. Used to tell you when new WhatsApp photos arrive, and when we kept photos for you automatically (decided on your phone; photos are not uploaded).
- Photo location: Android bundles this with photo access. FaceFilter does not use where your photos were taken, and never stores or sends it.
Feedback
If you choose to send feedback, it opens your own email app and is sent to us by email. We receive your email address, your message, anything you attach, and the app version, phone model, Android version and your random app ID that are added to the message automatically (you can delete them before sending). We use this only to reply and to improve the app.
Deleting your data
Everything on your phone is deleted when you uninstall the app. To ask us to delete the crash reports, analytics or purchase records linked to your random app ID, email facefilter.support@gmail.com. We will reply within 30 days.
Children
FaceFilter is meant for adults managing their own photos. It is not directed at children.
Changes to this policy
If we change this policy, we will update this page and the "Last updated" date above. The same policy is also available inside the app, under Settings → Privacy.
Contact
Questions about this policy? Email us at facefilter.support@gmail.com.