Face-data policy

What we collect

With your separate, explicit consent, we keep two things from your selfie. The first is a standardized image: your photo cropped, resized, and stripped of location data, so it still looks like you but carries none of the original file’s metadata. The second is a face embedding, a mathematical representation of your face. We do not keep the original file you uploaded; it is processed in memory and discarded.

What it's used for

Learning your type, estimating mutual attraction, and running the Radar game, inside Cupid's Trick only. We never sell, license, share, trade, or otherwise profit from biometric data, and no code path exports it to third parties.

Retention schedule

• While your account is active: we keep the standardized image and embedding to run the features you consented to.
• If you withdraw biometric consent (or we remove a photo): we purge your image and embedding immediately and face features turn off, but your non-biometric history (which faces you chose, your play history) stays so you can re-consent later.
• If you delete your account: we purge everything immediately. Either way, completion is guaranteed within 30 days.
• If your account goes inactive: after 12 months without activity, everything biometric is purged automatically.

An automated job enforces this schedule daily. It is not a manual process.

What destruction means

Deleting the photo but keeping the embedding would not be deletion. Account deletion removes: the standardized image, the face embedding, the learned taste vector, your contribution to the aggregate preference matrix (recomputed without you), and your hearts/passes in both directions, including where you appear as a label in other people's pools. Aggregate scores other players already received are not retroactively recomputed, but the underlying signal is gone and can't influence anything going forward.

Withdrawing consent (or a photo takedown) removes the biometric specifically — the image, the embedding, and the appearance-derived interest and matches — but keeps your non-biometric taste and play history, so re-consenting picks up where you left off. The regulated identifier (your face embedding) is gone in both cases.

Where we operate

US only, 18+, and not offered in Illinois, Texas, or Washington. We check region before any face is captured, and again at capture time.