Privacy Policy

Last updated: February 19, 2026

1. Introduction

Facenow ("we", "our", or "Platform") values your privacy. This Privacy Policy describes how we collect, use, store, and protect your personal information when using our AI-powered face transformation services.

By using Facenow, you agree to the practices described in this policy. This policy complies with the European General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Brazil's LGPD, and other applicable privacy laws.

2. Data We Collect

2.1. Account Information

  • Full name: Provided through Google login
  • Email address: Used for authentication and communication
  • Profile photo: Optional, obtained from Google
  • Unique user ID: Automatically generated for internal identification

2.2. Images and Content

  • Uploaded photos: Facial images you upload for transformation
  • Generated results: AI-transformed images
  • Transformation preferences: Styles, colors, and chosen settings
  • Metadata: Upload date/time, transformation type, processing status

2.3. Usage and Technical Data

  • IP address: For security and fraud prevention
  • Browser and device type: For experience optimization
  • Access logs: Pages visited, actions performed, timestamps
  • Cookies and similar technologies: For session and preferences

2.4. Payment Data

  • Purchase history: Credits purchased, amounts, dates
  • Billing information: Processed by third-party payment providers
  • Note: We do NOT directly store credit card data

3. How We Use Your Data

3.1. Primary Purposes

  • Process transformations: Send your images to Google Gemini AI API for face transformations
  • Store results: Save original and transformed images in your personal gallery
  • Account management: Authentication, credit control, usage history
  • Payment processing: Manage credit purchases and subscriptions

3.2. Service Improvement

  • AI optimization: Aggregated analysis (non-identifiable) to improve algorithms
  • A/B testing: Test new features and interfaces
  • Performance analysis: Monitor transformation quality

3.3. Communication

  • Service notifications: Transformation status, payment confirmations
  • Customer support: Respond to your inquiries and requests
  • Marketing (optional): News, offers, and updates (opt-in)

4. Data Sharing

4.1. Service Providers

We share your data with:

  • Google Gemini AI: Your images are sent for transformation processing.View Gemini policy
  • Google Cloud Platform (GCP): Application hosting and data storage.View GCP policy
  • Supabase: Database and authentication.View Supabase policy
  • Payment processors: PayPal or similar for financial transactions

4.2. We Do Not Sell Your Data

We guarantee: We NEVER sell, rent, or trade your personal information or images to third parties for marketing purposes.

5. Your Rights (GDPR/CCPA/LGPD)

Depending on your location, you have the following rights regarding your data:

5.1. Rights for All Users

Access

Request a copy of all data we hold about you

✏️

Correction

Update or correct inaccurate information

🗑️

Deletion

Delete your images, results, or complete account

📦

Portability

Export your data in structured format

How to Exercise Your Rights:

Contact us at: privacy@facenow.app
We will respond within 15 business days (GDPR: 30 days, CCPA: 45 days).

5.2. California Residents (CCPA)

California residents have additional rights under CCPA:

  • Right to know what personal information we collect, use, and share
  • Right to delete personal information (with exceptions)
  • Right to opt-out of sale of personal information (we don't sell your data)
  • Right to non-discrimination for exercising privacy rights

To exercise CCPA rights, contact: privacy@facenow.app

5.3. European Union Residents (GDPR)

EU residents have enhanced rights under GDPR, including the right to lodge complaints with supervisory authorities. Find your data protection authority at: EDPB Members

6. Data Security

  • Encryption: TLS/SSL for data in transit, encryption at rest for storage
  • Authentication: OAuth 2.0 with Google, no password storage
  • Access control: Least privilege principle, multi-factor authentication for admins
  • Infrastructure: Servers in certified data centers (Google Cloud Platform)
  • Monitoring: Security logs, anomaly detection, regular backups

7. Contact

For privacy questions:

Privacy Policy - Facenow | Facenow