Privacy policy
Effective September 13, 2026; last updated October 20, 2026. This page explains what FaceFluent collects, why, who helps us process it and the choices you have. It is a plain-language description of how the service works, not legal advice.
Who we are
FaceFluent (facefluent.com) is operated by Sorena LLC, Olive Branch, Mississippi, United States, which is the controller of your personal information. Contact us at support@facefluent.com.
Our database and file storage run on infrastructure that we also use for another product of ours, VoxArena. Sign-in runs on FaceFluent’s own service at api.facefluent.com. Your FaceFluent information is not used for that product.
What we collect, by flow
Browsing and the public sample
You can explore the public sample without uploading a personal photo. It depicts a fictional AI-generated adult. Loading pages, images and models can appear in ordinary hosting logs (for example IP address, browser and page address).
Free photo guide
You can try a personal front photo locally without an account. Your device estimates facial landmarks and calculates the on-screen annotations in browser memory; nothing is uploaded unless you choose to save. When you save a front photo, the photo is uploaded to private account storage, and landmark coordinates and head-pose information are sent to our server to calculate derived measurements. We keep the derived measurements and processing history and discard the raw coordinate list. Uploads are decoded, resized and re-encoded, which removes embedded metadata. Original files stay on your device.
AI styling plan, questions and previews
With your consent we collect your account email, a front photo and the preferences you submit (goals, budget, allowed changes). To create your plan we send the photo and preferences to Google’s Gemini API. If you opt in to photo estimates, a limited set of width and height ratios derived from the photo may also be sent. These are fallible estimates from a photograph, not verified anatomy, and we do not give you a score or rating. When you request an image preview, the saved reference photo, your selected styling instructions and any keep or avoid wording and hair texture you provide are sent to Gemini. Previews are stored privately and labelled as AI-generated. Follow-up questions send the question, your written plan, preferences and up to six recent exchanges to Gemini as text only, without your photo. Questions and answers are saved with your account. Authorized staff may access relevant account content for support, security, administration or a deletion request.
Earlier assessments
Earlier assessments may have collected up to six photos, goals and preferences, and saved derived measurements. Authorized reviewers could access that material to fulfil the original purchase. Where enabled, we use Anthropic to help staff draft written text from stored measurements and structured selections; photos are not sent to Anthropic.
Account, purchases and support
We collect your email address and sign-in records, orders, credit balance and credit transactions, refund and deletion requests, and your support messages. Payments are handled by Stripe. To administer credits and control costs we also keep generation records such as attempt identifiers, model names, outcomes, timing and token counts; these do not contain your photo or prompt text. Minimal identity, payment, refund and audit records can remain after photo deletion for administration and accounting.
Launch notices and email
If you ask to hear when credits open, we store that email address with the date and wording you agreed to, separately from any account, and use it only for that notice. To unsubscribe, email support@facefluent.com and we will remove the address. We send sign-in links and account emails through Resend.
Cookies and measurement
Authentication cookies keep you signed in. Vercel Web Analytics counts page views without cookies, recording the page address with only its campaign tags, the referring site, country, browser, operating system and device type; it does not identify you across days or sites. We also count anonymous product steps, such as opening the photo guide, starting sign-in or viewing pricing. Each record holds only an allowed event name, an optional product category and the time; there is no cookie, account, device identifier, photo, measurement, email or answer attached, and we do not store your IP address with it. It is on by default and you can turn it off under Analytics preferences in the footer; a Global Privacy Control signal from your browser turns it off automatically.
Google Ads measurement is a separate opt-in and is off until you allow it. With your permission Google uses advertising cookies and receives ad-click identifiers, browser and device information (including IP address) and confirmed purchase amounts, currency and a transaction reference. We do not include your email, photos, measurements or answers. Personalized advertising and enhanced conversions are disabled. Use Advertising preferences in the footer to change this. Turning it off stops new purchase events and tells the loaded tag to deny storage and advertising-data use; it does not delete information already sent. Google handles that data under its privacy policy.
Biometric information
When you use the photo guide or AI features, we process your photo to derive face geometry: facial landmark positions and measurements, such as width and height ratios and head pose. This is biometric information (a biometric identifier or face geometry under laws such as the Illinois Biometric Information Privacy Act, and sensitive personal information or biometric data under several other state and EU laws).
- Purpose. Only to produce the styling previews, plans and answers you request, and to provide support for them. We do not use it to identify anyone, to match a face against any database, or to train models.
- No sale or profit. We do not sell, lease, trade or otherwise profit from biometric information.
- Consent first. We ask for your written consent, by checkbox, before we collect or send a photo or face measurements for saving or cloud processing, and we record the version of the wording you accepted and when. You must confirm you are 18 or older and that the photo depicts you.
- Who receives it. FaceFluent and the processors in the table below, chiefly Google (Gemini) for AI analysis and previews, and our storage provider. Disclosures to others occur only with your consent, to complete a service you requested, or where the law requires.
- Retention and destruction. The full schedule is in the biometric data retention and destruction schedule below. Photos, generated images and the measurements saved with a photo are deleted by an automated job within 30 days of the photo being saved. Written plans, answers and reports you receive can describe features derived from your photo and stay in your account until you delete them or your account. We permanently destroy biometric information when the purpose for collecting it has been satisfied, when you delete it or your account, or within the periods above, and in every case no later than three years after your last interaction with us. Database backups are access-restricted and roll off within about 35 days (see the schedule below), so deletion is not instant erasure from backups; uploaded photo files are not copied to backups.
- Security. Files are held in private storage. A photo is delivered only through an authenticated request from your signed-in account or from an authorized, multi-factor-verified reviewer; there is no public or shareable link to it, and responses are marked not to be cached. Each time staff open a customer photo or report we record who, when and which item (identifiers only, no image data).
Biometric data retention and destruction schedule
This is our written, public policy for retaining and permanently destroying biometric information (photos and the face geometry and measurements derived from them). We collect it only for the purpose stated above: to produce the styling previews, plans and answers you request and to support them. We keep it no longer than the periods below.
| Data | Kept until | How it is destroyed |
|---|---|---|
| Uploaded photos (front photo and any others) | 30 days after the photo is saved (the automated job removes files hourly, from 29 days and 23 hours), or sooner if you delete the photo, the assessment or your account | File deleted from private storage; the database record is removed with your deletion request |
| AI-generated previews and alternative images made from your photo | No later than the source photo’s 30-day period, or sooner on request | File deleted from private storage by the same job, or on your deletion request |
| Face geometry and measurements in written reports from earlier assessments | Three years after the report was written, or sooner if you delete it or your account | Measurement and analysis fields are removed from the stored report by the automated job; the written text remains until you delete it |
| All photos, images, measurements, reports, answers and conversations on a verified deletion request | Promptly after the request; failed requests are retried automatically | Records and files deleted; minimal identity, payment, refund and audit records are kept for administration and accounting |
| Database backups (account records, derived measurements, metadata) | Data deleted from our live systems, or expired under this schedule, leaves backups within about 35 days | Access-restricted backups age out and are overwritten. Photo image files are held only in live private storage and are not copied to backups, so a deleted photo is not retained in them |
| Any biometric information not covered above | No later than three years after your last interaction with us | Permanent deletion |
Whichever applies first controls. We do not keep biometric information for any purpose beyond those stated here, and we do not keep it after the purpose for collecting it has been satisfied.
Google’s handling of Gemini inputs and outputs is governed by its Gemini API paid-service terms. Those terms permit limited logging for safety, security and legal disclosures. We do not promise zero provider retention or that deleting your account immediately erases provider logs.
Deleting your information
Request deletion in your account settings, or email support@facefluent.com if you cannot sign in. Deletion removes photos, generated images, measurements, reports, answers and conversations; failed requests are retained for retry and review. We keep necessary account identity, payment, refund and minimal audit records for administration and accounting. Replacing a photo requires renewed consent and applies to new previews only.
Service providers and where data is processed
We use the following providers. They process information on our behalf for the purpose shown.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase (self-hosted, on Hetzner) | Sign-in, database and private file storage | Account email, photos, generated images, derived measurements, plans, messages, orders | United States (Oregon) |
| Vercel | Hosting, serverless functions, cookieless page-view analytics | Request data such as IP address and page address; everything you submit passes through it in transit | United States (Oregon) |
| Google (Gemini API) | AI plans, replies, image previews and photo analysis | Your front photo, preferences, selected measurements and styling instructions; text-only for follow-up questions | United States |
| Stripe | Payments and refunds | Email, order and payment details; we never receive full card numbers | United States |
| Resend | Sign-in links and account emails | Email address and the message content | United States |
| Anthropic | Drafting text for staff review, only where enabled | Stored measurements and styling selections for earlier assessments; never photos | United States |
| Google Ads | Optional purchase measurement, only after you opt in | Ad-click identifier, browser and device data, purchase amount and transaction reference; no email, photo or measurement | United States and other countries where Google operates |
Our hosting, database and file storage are located in Oregon, United States, not in the European Economic Area or the United Kingdom. Private storage restricts public access; authorized service administration and support access may still be necessary.
International transfers
If you use FaceFluent from the EU, EEA, UK or Switzerland, your information is transferred to and processed in the United States. Where a provider offers them in its standard data-processing terms, we rely on the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses (with the UK addendum) for that transfer. You can ask us which mechanism applies to a given provider.
Legal bases (EU and UK)
- Contract: your account, credits, payments, refunds and delivering the features you request.
- Consent: processing your photo and face measurements (special category data), sending them to Gemini, Google Ads measurement, and launch-notice email. You can withdraw consent at any time by deleting the photo or your account, changing the footer preferences, or emailing us; withdrawal does not affect earlier processing.
- Legitimate interests: securing the service, preventing abuse and fraud, rate limiting, keeping basic operational and accounting records, and anonymous product-step counts, which you can turn off at any time.
- Legal obligation: tax, accounting and responding to lawful requests.
Your rights
EU, EEA, UK and Switzerland
You may ask to access, correct, erase, restrict or object to our use of your information, to receive it in a portable format, and to withdraw consent. You may also complain to your supervisory authority, such as your national data protection authority or the UK Information Commissioner’s Office.
California and other US states
If you live in California, Colorado, Connecticut, Texas, Virginia or another state with a privacy law, you may ask to know what we collect and why, receive a copy, correct, and delete your personal information, and not be discriminated against for exercising your rights. Facial measurements derived from your photo are sensitive personal information; we use them only to provide the service you request and not to infer characteristics about you. We do not sell personal information and do not share it for cross-context behavioral advertising. Google Ads measurement is optional, uses purchase events without your email, photo or measurements, and has personalized advertising disabled. You may appeal a refusal by replying to our response.
Biometric laws
Illinois (BIPA), Texas (CUBI), Washington (biometric identifiers law and My Health My Data Act) and Colorado (biometric amendments to its privacy act) regulate biometric data. Consistent with them, we give notice and obtain consent before collection, use the data only for the stated purpose, do not sell or profit from it, protect it with reasonable care, and destroy it on the schedule above.
How to exercise your rights
Email support@facefluent.com from the address on your account, or use the deletion and refund controls in your account. We may need to verify your identity before acting. We respond within 30 days (45 days for California requests, extendable once where the law allows) and tell you if we need more time. There is no charge unless a request is manifestly excessive.
Children
FaceFluent is for adults aged 18 and over and accepts only photos of the person uploading them. We do not knowingly collect information from anyone under 18. If you believe a photo of a minor, or a photo uploaded without the subject’s permission, has been submitted, email support@facefluent.com. We will remove it and any measurements derived from it promptly.
Security
We use access controls, row-level security on our database, private storage and encrypted connections. No system is perfectly secure; if a breach affects you we will notify you and regulators as the law requires.
Changes
We will update this page and its date when our practices change, and ask for fresh consent where the law requires it. Version dated October 20, 2026. See also our terms of service and accessibility statement.