Privacy Policy

The Face Report ("we," "us," or "our") operates the website at https://thefacereport.com. This Privacy Policy explains how we collect, use, and protect your information when you use our facial analysis services.

By using The Face Report, you agree to the practices described here. If you do not agree, please do not use our services.

1. Information We Collect

Facial geometry (free tools)

For geometric measurements (Face Shape Detector, Symmetry Test, Golden Ratio scoring, Harmony Score), your photo is processed entirely in your browser using MediaPipe Face Mesh. We do not upload, transmit, or store your photo or the resulting facial landmark data on our servers for these measurements.

Perceived age & visible-attribute inference

On certain tools (Perceived Age estimator, the Full Analysis page), we send your photo to Google's Gemini API to estimate perceived age and infer a small set of visible attributes used to personalise recommendations and produce aggregate analytics. The inferred attributes are: apparent sex (male / female / unsure), Fitzpatrick skin tone, hair colour / type / length, eye colour, presence of facial hair, and presence of glasses. These attributes are inferred from the image — we never ask you to declare them. Photos are not retained on our servers; the inferred attributes are stored alongside your analysis record.

Facial analysis data (paid Full Report)

When you spend tokens to generate the Full Report, your photo is sent to Google's Gemini API for qualitative analysis and visualization generation. This transmission is encrypted in transit. We do not permanently store your photo — it is automatically deleted within 24 hours of processing. The analysis results (text scores, recommendations, inferred attributes) are stored in your account.

Account information

When you create an account, we collect your email address and password (hashed, never stored in plain text). Account data is managed by Supabase.

Payment information

Payment processing is handled entirely by Stripe. We never see or store your credit card number. We receive only your Stripe customer ID and purchase history.

Automatically collected data

We use essential cookies for authentication (session management). We do not use tracking cookies, advertising pixels, or third-party analytics that track individual users.

2. Biometric Data Notice

Certain jurisdictions (including Illinois under BIPA, Washington under MHMDA, and the EU under GDPR) classify facial geometry as biometric or special category data. We take this seriously:

• Geometric tools: Facial landmarks are computed locally in your browser and never transmitted to us.
• AI tools (perceived age, attribute inference, paid analysis): Your photo is temporarily transmitted (encrypted) to Google Gemini. We obtain your consent at signup. Photos are deleted within 24 hours. The inferred visible attributes (see Section 1) are stored with your analysis record.
• We do not sell, lease, or trade biometric or inferred-attribute data to any third party.
• We do not use your facial data to train AI models.
• You may request deletion of all your data at any time by contacting contact@thefacereport.com.

3. How We Use Your Information

• To provide facial analysis results and recommendations
• To personalise recommendations (e.g. skincare ingredients, hairstyles, color palettes) using the visible attributes inferred from your photo
• To generate your "optimized self" visualization (paid feature)
• To manage your account and token balance
• To store your analysis history so you can track progress
• To produce aggregate, de-identified analytics and statistics (e.g. distributions of analysis scores, face shapes, or inferred attributes across users) used to improve the product and to publish anonymous research, statistics, or educational content. Any published figures are reported only in aggregate and never include personal data, photos, or individual results.
• To respond to support requests

We do not use your data for advertising, profiling, or automated decision-making beyond the analysis you explicitly request.

4. Data Retention

• Photos: Automatically deleted 24 hours after upload.
• Analysis results & inferred attributes: Stored for as long as your account is active. You can delete individual analyses or your entire account at any time. Inferred attributes captured from anonymous (logged-out) sessions are retained for aggregate analytics only and contain no personal identifiers.
• Account data: Retained until you request deletion. Upon deletion, all associated data is permanently removed within 30 days.

5. Third-Party Services

We use the following third-party services:

• Supabase — Authentication and database hosting (EU/US servers)
• Google Gemini API — AI-powered facial analysis and image generation (paid tier uses the Paid API which does not use inputs for training)
• Stripe — Payment processing
• Vercel — Website hosting

Each service processes data according to their own privacy policies. We select services that meet high data protection standards.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data and account
• Export your data in a portable format
• Withdraw consent for biometric data processing at any time
• Object to processing of your data

To exercise any of these rights, contact us at contact@thefacereport.com. We will respond within 30 days.

7. Children's Privacy

The Face Report is intended for users aged 18 and older. We do not knowingly collect data from anyone under 18. If we learn that we have collected data from a minor, we will delete it immediately.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website. The "Last updated" date at the top reflects the most recent revision.

9. Contact

For questions about this Privacy Policy or your data, contact us at:

contact@thefacereport.com