Privacy policy

Last updated · 2026-07-11

Face Card (“we,” “us”) runs facecard.beauty, an AI beauty and color analysis service. You upload photos of your own face and we produce an editorial read of your color season, skin, and style. Because those photos describe your face, we treat them as sensitive data and handle them with care. This policy explains what we collect, why, who we share it with, and the choices you have.

What we collect

Photos of your face

When you request a read, you upload one or more photos of yourself. These are face images — biometric-adjacent data — and they are the heart of the service. We collect them only to produce the analysis you ask for. We do not sell your photos, and we do not use them to train AI models.

Account and contact

We sign you in with a magic link sent to your email address, so we store your email and the associated sign-in events. We have no passwords to lose.

Payment information

Purchases are handled by Stripe. We never see or store your full card number. We retain payment metadata — the product you bought, amount, currency, timestamps, and limited card details such as the last four digits — to fulfil your order and keep our records.

Usage and device data

We use product analytics to understand how the service is used and to improve it. This includes pages viewed, actions taken, approximate location derived from your IP address, and basic device and browser information.

How we use your information

• · To generate the reads, boards, and share cards you request.
• · To check uploads for safety and quality before we process them.
• · To sign you in and keep your reads tied to your account.
• · To take payment and provide receipts and support.
• · To understand usage, fix problems, and improve the product.
• · To meet legal obligations and enforce our terms.

Your face data and consent

Before we accept any photo, we ask for your consent and record it. Your uploads are stored in private storage that is not publicly accessible. Results are visible only to you — Face Card does not offer public sharing links, and no one can browse to your read.

To keep the service safe, every uploaded face is screened by an automated face-detection check (AWS Rekognition) before analysis. This confirms a single face is present, that image quality is workable, and that the subject does not appear to be under 18. Photos that fail these checks are rejected. This screening is automated and is used only to decide whether a photo can be accepted — we do not build a persistent faceprint of you for identification.

Providers we share data with

We do not sell your personal information. We share it only with the service providers that make Face Card work, and only for that purpose:

• · OpenAI — receives your photos to generate your analysis.
• · AWS Rekognition — screens uploaded photos for safety and quality.
• · Supabase — hosts our database, authentication, and private photo storage.
• · Stripe — processes payments.
• · Resend — delivers our sign-in and transactional emails.
• · PostHog — provides product analytics.

Each processor handles your data under its own terms and only as needed to provide its part of the service. We may also disclose information where the law requires it, or to protect the rights and safety of our users and the service.

How long we keep your data

Your photos are kept in your photo collection so your reads stay available to you and so you can run a fresh read without re-uploading. We compare uploads to your existing photos so we do not duplicate the same image. Your reads are kept until you ask us to remove them. Account, payment, and consent records are kept as long as your account is active and as long as we are required to keep them for legal and accounting reasons.

Your rights

You can ask us to access, correct, export, or delete the personal data we hold about you, including your photos and reads. To make a request, email hello@facecard.beauty. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we will honour those rights where they apply.

Children

Face Card is for adults. The service is not intended for anyone under 18, and our upload screening rejects images that appear to be of minors. If you believe a child has used the service, contact us and we will delete the data.

Security

We use reputable providers, private storage, and access controls to protect your data. No service can promise perfect security, but we work to keep your information safe and to limit who can reach it.

Changes to this policy

We may update this policy as the product evolves. When we do, we will revise the date above. If the changes are significant, we will make a reasonable effort to let you know.

Contact

Questions about privacy, or a request about your data, can go to hello@facecard.beauty.