Privacy Policy

1 Who We Are

reFaced is a free iOS application developed by Facial Privacy™. Our mission is to protect individuals from unauthorized AI facial recognition. We build privacy tools, and we take that responsibility seriously in how we operate our own software.

If you have questions about this policy, contact us at support@facialprivacy.com.

2 Information We Collect

We collect no personal information. reFaced does not collect, transmit, store, or process any of the following:

• Your name, email address, or any contact information
• Your location or IP address
• Device identifiers, advertising IDs, or hardware fingerprints
• Usage statistics, crash reports, or analytics data
• Photos, selfies, or any image data
• Facial landmarks, biometric identifiers, or facial embeddings

This is not a policy of minimization — it is a policy of zero collection. We have no servers that receive user data because there is nothing to receive.

3 On-Device Processing

All image processing performed by reFaced — including facial landmark detection and the application of adversarial perturbation — runs entirely on your device using Apple's on-device machine learning frameworks.

Your photos and facial data are:

• Never uploaded to any server or cloud service
• Never transmitted over any network connection
• Never shared with Facial Privacy™ or any third party
• Not retained by the app after your session ends

The only copy of your image that exists at any point is the one on your own device.

4 Device Permissions

reFaced requests the following permissions solely to deliver its core functionality:

• Camera access — to allow you to take a live photo or selfie for protection within the app.
• Photo Library access — to allow you to import an existing photo for protection, and to save a protected photo to your camera roll.

These permissions are used only when you actively initiate an action within the app. They are not used for background processes, tracking, or any purpose beyond the specific action you request. You may revoke these permissions at any time via iOS Settings.

5 No Account Required

reFaced does not require you to create an account, register, or provide any personal information to use the app. There is no login, no profile, and no user record of any kind associated with your use of reFaced.

6 Third-Party Services

reFaced does not integrate any third-party analytics, advertising, or tracking SDKs. We do not use services such as Firebase, Mixpanel, Facebook SDK, Google Analytics, or any similar tool.

Because we collect no data, we share no data. We have no data-sharing agreements with advertisers, data brokers, or any commercial third parties.

7 Children's Privacy

reFaced does not knowingly collect personal information from anyone, including children under the age of 13. Because we collect no data from any user, no special provisions for children are required beyond this general policy of zero collection.

8 Data Security

Because reFaced collects and transmits no user data, there is no data in transit to intercept and no server-side database to breach. The security of your photos and facial data is guaranteed by the fact that they never leave your device in the first place.

9 Your Rights

Under various privacy regulations — including the GDPR (EU), CCPA (California), and others — individuals have rights relating to their personal data, including the right to access, correct, delete, or port their data.

Because reFaced holds no personal data about you, there is nothing to access, correct, delete, or transfer. You have nothing to request, and we have nothing to provide. If you have questions or concerns regardless, you are welcome to contact us at any time.

10 Changes to This Policy

If we make material changes to this Privacy Policy, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of reFaced after any changes constitutes acceptance of the updated policy.

Any future version of reFaced that collects data of any kind will include a clearly updated policy and in-app disclosure prior to any data being collected.