Biometric data policy
We don't collect faceprints. This policy explains how we treat photos of faces, how long we keep them and when we destroy them.
Last updated
In short
- We don't create, collect or store biometric identifiers or biometric information — no face geometry, faceprints or face templates.
- Photos are processed only to render the edit you ask for. Uploads are deleted within 24 hours.
- We never sell, lease or trade data about faces, or profit from it, and we never use photos to identify anyone.
What this policy covers
Biometric privacy laws — including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act and Washington's biometric identifier law — protect identifiers such as a scan of face geometry. A photograph on its own isn't a biometric identifier, but some features look closely at a face, such as Hairstyle Try-On and the haircut, beard and color matches.
This policy applies to every photo of a person uploaded to Outwow, and it is our written retention and destruction schedule under those laws.
What we do, and don't do, with faces
- We send your photo to an AI image model to render the edit you asked for — a look, a haircut, a scene. The model works on the image itself; we don't extract, calculate or keep measurements of your face.
- Before a feature that matches styles to your face uses your photo for the first time, we ask for your consent with a checkbox and keep a record of it.
- Automatic safety checks may count the faces in a photo, or estimate whether someone in it might be a child, so that our consent and child-safety rules apply. The answer is a number or a yes/no used during that request. It isn't stored as a template and can't identify anyone.
- We don't use photos to recognize or identify people, verify identity, match faces across photos or accounts, or infer race, ethnicity, health, emotions or any other sensitive trait.
- We don't sell, lease, trade or otherwise profit from photos or anything derived from faces. We disclose them only to the providers that render the edit (see subprocessors) or when the law requires it.
Retention and destruction schedule
| Data | Kept for | How it's destroyed |
|---|---|---|
| Uploaded photos | Up to 24 hours | Deleted automatically by a scheduled deletion job |
| Face counts and child-safety checks | Only while the request runs | Never written to storage |
| Results that show a person | Your plan's history window, or until you delete them | Deleted with your history or your account |
| Biometric identifiers (face geometry, faceprints) | Never collected | Nothing to destroy |
Uploaded photos
- Kept for
- Up to 24 hours
- How it's destroyed
- Deleted automatically by a scheduled deletion job
Face counts and child-safety checks
- Kept for
- Only while the request runs
- How it's destroyed
- Never written to storage
Results that show a person
- Kept for
- Your plan's history window, or until you delete them
- How it's destroyed
- Deleted with your history or your account
Biometric identifiers (face geometry, faceprints)
- Kept for
- Never collected
- How it's destroyed
- Nothing to destroy
Anything that could count as biometric data is permanently destroyed as soon as the purpose it was collected for is done, and never later than 3 years after your last interaction with us. In practice that means within 24 hours.
Consent and withdrawal
Where a feature needs it, we ask for your consent before the first upload and tell you what's processed, why, for how long and who receives it. You can withdraw consent at any time by writing to privacy@outwow.app. We then stop using those features for your account and delete the related photos.
How we protect photos
We store and transmit photos with at least the care we use for other confidential data: encrypted connections, access limited to the systems that render the result, and no human access except to handle a report, an appeal or a support request you make.
Questions
Write to privacy@outwow.app. This policy is published by Moonlight Agency LTD (“Outwow”, “we”, “us”):