Privacy Policy

Face Checker AI is a product of Observio Studio, operated by Serhii Viacheslavovych Zelinskyi, Individual Entrepreneur (FOP), registered in Ukraine (“we”, “us”, or “our”). We are the controller of personal data described in this policy.

Privacy requests may be sent to support@facechecker.app.

• Telegram account data made available to the Mini App, such as Telegram user ID, username, name, language, profile photo URL, and authentication data;
• photos you upload — normally your own photo, and only in a narrow case a photo of another consenting adult you have permission to upload;
• the context and options you select, generated reports, report history, and unlock status;
• transaction references, product, amount, currency, payment status, refund events, and related billing metadata;
• device, browser, approximate location derived from an IP address, usage events, diagnostics, and error information;
• support messages and information you choose to include in them.

A photo is personal data about the person shown. By default you upload your own photo. You may upload a photo of another person only when that person is an adult, knows about the intended use, and has freely given you explicit permission, and only when you have the right to upload and process that photo for this purpose. You must not upload photos of minors, private or intimate images, unlawfully obtained images, or images where you cannot meet these requirements.

If you appear in a photo processed by the Service and want it removed, contact support@facechecker.app with enough information for us to locate the upload. We may request verification while minimizing any additional data collected.

We process information to authenticate users, receive and temporarily store uploads, generate requested reports, maintain report history, deliver paid access, provide support, prevent abuse and fraud, secure and improve the Service, and comply with legal obligations.

Depending on the activity, processing is necessary to perform our contract with you, comply with law, or pursue legitimate interests in operating, protecting, and improving the Service. Where the law requires consent, we rely on consent. Your confirmation about another person's photo does not override that person's rights.

We send an expiring private link to the uploaded photo, selected context, and relevant answers to OpenAI to generate a report. The output is designed as speculative entertainment inspired by visible presentation. It is not a verified assessment of identity, personality, emotion, intention, compatibility, trustworthiness, or future behavior.

The uploaded photo is used only to generate this speculative entertainment report. We do not perform facial recognition or facial identification, and we do not build, enroll, or retain any biometric database or biometric templates. We do not compare photos against identity databases, authenticate identity, or create facial-recognition templates, and we do not use uploaded photos or reports to train our own AI models. OpenAI processes API data under its business and API data terms.

We use Telegram for the Mini App environment, Vercel for web hosting, Fly.io for API hosting, a managed PostgreSQL database, Supabase for private photo storage, OpenAI for AI generation, PostHog for product analytics, Sentry for error monitoring, and Creem for checkout, payment, refund, and chargeback events.

Providers process only the information needed for their services. Information may be processed in the European Economic Area, the United States, or other countries. Where required, transfers rely on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism.

Creem acts as Merchant of Record for Face Checker AI purchases. Creem collects payment details and handles payment processing, applicable taxes, refunds, and chargebacks. We receive transaction information needed to unlock a report and provide support, but we do not receive or store full card numbers or card security codes.

• uploaded photo files: up to 30 days after upload, unless earlier deletion is requested or longer retention is strictly required for security or a legal claim;
• generated reports and account history: until deletion is requested and otherwise generally no longer than 24 months after account inactivity;
• Telegram-linked account data: while the account is active and generally up to 24 months after the last activity;
• analytics data: generally up to 24 months;
• routine technical and security logs: generally up to 90 days;
• support correspondence: generally up to 24 months after the matter is closed;
• transaction, tax, fraud-prevention, and accounting records: for the period required by law, generally up to 7 years;
• backups: deleted information may remain for up to 30 additional days before being overwritten.

Photos are stored in a private bucket and accessed through time-limited signed links. We also use authenticated access and restricted service credentials. No storage or transmission method is completely secure.

Depending on your location, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent where processing relies on consent and complain to a competent data-protection authority.

Send requests to support@facechecker.app. This address is also available to a person shown in an uploaded photo. We may need to verify identity and locate the relevant data before completing a request.

Face Checker AI is for adults aged 18 or older. We do not knowingly allow minors to use the Service or permit photos of minors to be uploaded.

We may update this policy when the Service, providers, or legal requirements change. Material changes will be communicated where required.

Privacy questions, deletion requests, and other enquiries: support@facechecker.app.