Privacy Notice

FACY is operated by Tahneel Phippen ("FACY", "we", "us"). We are the data controller for the personal data described in this notice — meaning we decide how and why it is used. You can contact us about privacy at privacy@facyapp.com.

• Account data — your name, email address and login credentials, used to create and secure your account (legal basis: performance of our contract with you).
• Biometric templates — the mathematical features extracted from your face, voice, typing rhythm and drawn patterns when you enroll your 100 lenses and when you complete verification lenses. Used solely to verify that you are you (legal basis: your consent, given at enrollment, and performance of our contract).
• Support and help requests — messages you send us, including the phone model, browser and problem description you enter in the camera & microphone help tool, used to troubleshoot your issue (legal basis: legitimate interests).
• Usage and device data — pages visited, where visitors came from, country, browser, operating system, device type, time on page, page speed and errors, used to keep the service secure and improve it (legal basis: legitimate interests).

Payment details are collected and processed by Paddle, our Merchant of Record — we never see or store your card numbers.

Biometric matching decisions are made on our servers, and your biometric templates are stored only on FACY's servers. They are never shared with the apps you verify for — connected apps receive only a verified/not-verified result. We do not sell biometric data and we do not use it for advertising.

• Service providers that help us run FACY, such as hosting and database infrastructure;
• Paddle, our Merchant of Record, for the sale of our plans, subscription management, payments, tax compliance and invoicing;
• Lovable, which provides our visitor analytics (see below);
• professional advisers (legal, accounting) where needed;
• authorities, where required by law.

This site uses Lovable's visitor analytics. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

For every visitor it records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, and errors — without cookies and without identifying anyone. It also records which buttons and links visitors click. Detailed data is kept for 90 days and daily summaries for a year.

FACY itself uses only essential storage: the sign-in session token kept in your browser so you stay logged in. We do not use analytics or marketing cookies.

We keep your account data and biometric templates for as long as your account is active. When you delete your account, your biometric templates are deleted with it. Other data is deleted or anonymised when it is no longer needed for the purposes above.

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to how we use it, to data portability, and to withdraw consent (for example, to biometric processing) at any time. You can also complain to your local data protection authority — in Australia, the Office of the Australian Information Commissioner. To exercise any of these rights, email privacy@facyapp.com and we will respond within one month.

We use appropriate technical and organisational measures, including encryption and access controls, to protect your data. Some of our service providers process data outside Australia; where they do, we rely on appropriate safeguards such as standard contractual clauses.