Privacy Policy

Last updated: July 13, 2026

1. What we collect

• Account data: email address, password (hashed), date of birth, gender.
• Demographic data: ethnic background, the ethnicity you are usually perceived as, nationality, height, and weight. Providing these is voluntary — every field offers "prefer not to say" or can be left blank. They are used solely for anonymous, aggregate statistics and are never shown to other users, on your profile, in matchups, or anywhere else. Ethnic origin is sensitive ("special category") data in some jurisdictions; we process it only because you voluntarily provide it, and deleting your account deletes it.
• Profile photos: the four photos you upload.
• Biometric data: a live selfie captured during verification, and facial geometry derived from your photos during automated face comparison.
• Activity data: the matchups you are shown, your votes, decision times, and your rating score.
• Payment data: handled by Stripe; we never see your card number.

2. Biometric data — explicit consent

Verification compares a live selfie against your uploaded photos using an automated face-comparison service (AWS Rekognition). This involves processing biometric identifiers. We only do this with your explicit consent, given during onboarding. Face-comparison results (a similarity score and rule flags) are stored; raw biometric templates are not retained by us after the comparison completes. You may withdraw consent at any time by deleting your account, which deletes your photos, selfies, and derived verification data.

3. How your data is used

• Photos are shown anonymously to other verified users for voting.
• Your rating score is visible only to you — never to other users.
• If you subscribe to Premium, your matchup history (opponents' photos, results, decision times) is shown to you.
• We do not sell your data or share it with advertisers.

4. Where your data lives

Data is stored with Supabase (database, authentication, and photo storage — photos live in a private bucket accessible only through short-lived signed links). Payments are processed by Stripe. Verification images are processed transiently by AWS Rekognition.

5. Retention and deletion

Your data is retained while your account exists. Deleting your account (Settings → Delete my account) immediately and permanently removes your photos, live selfies, verification records, profile, score, and matchup history. Aggregate statistics that cannot identify you may be retained.

6. Your rights

Depending on your jurisdiction (including under GDPR and CCPA), you have the right to access, correct, export, or delete your personal data, and to withdraw consent. Most of these are self-service in Settings; for anything else contact us at the address below.

7. Age

FaceELO is for adults 18+. We do not knowingly process data of anyone under 18. If we learn an account belongs to a minor, we delete the account and its data.

8. Contact

Data controller: FaceELO. Contact: casio.cdp.240r@gmail.com