Privacy Policy
1. Your data stays on your phone
Faceora uses the front camera only while an exercise or progress-photo screen is open: to show you a live mirror next to the guide, to notice when your forehead creases (“brow guard”) and to line up progress photos. Camera frames are processed in real time on your phone only with Google ML Kit face detection, which runs on the device through Google Play services. Frames, face landmarks and measurements are not recorded, not stored and never sent to us or anyone else — not to analytics and not to crash reports. Faceora does not create face templates and does not recognise who you are. There is no account.
Progress photos are taken only when you tap “Progress photo”. They are saved in the app's private storage on this phone, are excluded from Android's cloud backup to your Google account, and leave the phone only if you export or share them yourself. Your routine history and settings also stay on the phone; they may be included in Android's own backup of the app so a reinstall on the same Google account keeps your streak. An optional export file (.faceora) can include photos and is encrypted with a password you choose.
The free version shows ads and sends anonymous app-usage analytics (see sections 3 and 4). Those never include photos, camera frames or anything about your face.
2. Permissions
- Camera — asked on the second onboarding screen, with “Not now”. Used only for the live mirror and brow guard while you exercise, and for progress photos you take. Without it the routines still work; the mirror area shows a button to allow it.
- Notifications — asked only if you turn on the daily exercise reminder (off by default). You can turn it off any time.
- Run at startup and vibration — to re-schedule your reminder after the phone restarts, and for gentle haptic cues.
- No microphone, location or storage permission — photos are kept in the app's own storage and exported through the Android share sheet or file picker.
- Internet — ads, analytics, purchases and consent. Your content is never sent.
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob, Unity Ads, Meta Audience Network)
The free version shows ads: one slim banner on list screens (Today, Library, History, Settings), an occasional full-screen ad after you close the “Done” screen of a finished routine, and optional rewarded ads you choose to watch to unlock a Pro item for a while. Ads never appear during an exercise, a countdown, the camera or progress photo screens, onboarding or the paywall, and never in the first two minutes of first use. Faceora Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads and Meta Audience Network competing through AdMob mediation. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's and Unity's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Faceora asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your content remains on your device until you delete it or uninstall the app. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Faceora is intended for adults (18+). It is not directed to children and we do not knowingly collect their data.
9. Wellness only
Faceora offers exercise routines for general wellness. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. If you have jaw (TMJ), neck or skin problems, or after facial surgery or fillers, ask a doctor before starting.
10. Changes
We will update this page if our practices change and revise the date above.