Who operates FaceBrief
FaceBrief is a service of Bamboo Labs LLC. This product-specific notice supplements the Bamboo Labs privacy policy by describing the FaceBrief data flow in more detail.
Information we collect
We store your email address, optional name, sign-in and session records, FaceBrief user ID, plan status, briefs, people and contact-style details you add, notes, tags, uploaded headshots, other content you provide, study progress, and product interactions. Study progress and interactions personalize which faces FaceBrief asks you to practice next.
For store billing, we process purchase history, subscription status, and renewal information. RevenueCat receives the device's identifier for vendor (IDFV), and FaceBrief identifies the RevenueCat customer with your FaceBrief user ID so purchases can be verified and restored to the correct signed-in account.
We also process timestamps, user agent, IP address, coarse location derived from the IP address, requested path, request outcome, and error logs for security, abuse prevention, and reliability. When a request is authenticated, this diagnostic data can be linked to your account. FaceBrief does not use this information or the IDFV to track you across other companies' apps or websites.
If you choose to join the product-update list, we store the email address you submit and use it to send FaceBrief product news and marketing. This is separate from the email needed to operate your account.
Public-profile and image tools
When you ask FaceBrief to find or import a person, the query or public profile URL may be sent to Apify, Bing, DuckDuckGo, or public websites to retrieve public profile details and image candidates. Those external search requests do not include your FaceBrief user ID. FaceBrief treats the query as search history used only to return the requested results and does not link it to your account in the external search request. These providers may retain request or run data under their own terms and privacy policies. Only use information and photos you are permitted to use. Selected headshots are copied into private storage; they are delivered through short-lived signed links.
Billing and service providers
Stripe processes web payment details. If a released mobile app offers an in-app purchase, Apple or Google processes that store purchase and RevenueCat helps FaceBrief verify and restore its entitlement. FaceBrief stores the resulting customer, purchase, subscription, status, and renewal identifiers, but not complete card numbers. Cloudflare delivers the website, Supabase hosts application data and private images, Resend delivers email, and platform sign-in providers process authentication when you select them. These providers process data to provide their contracted services.
How we use and protect data
We use data to operate FaceBrief, authenticate you, provide study and enrichment features, personalize adaptive study, process subscriptions, prevent abuse, support users, and improve reliability. We use an optional product-update email for FaceBrief marketing only when you choose to provide it for that purpose. We do not sell personal information, use it for third-party advertising, or track activity across other companies' apps or websites. Private app data is accessed through authenticated server endpoints. Browser sessions use secure, HTTP-only cookies, and stored headshots are not public bucket objects.
Private brief sharing
A current Pro account can share a brief with the exact email address of another registered FaceBrief account. FaceBrief does not send an invitation or magic link for this feature. The recipient can read the people and brief details, study them with progress stored under their own account, and download the brief PDF. The recipient cannot change the brief, people, or headshots. The owner can revoke access, and the recipient can remove the brief from their own account.
We store the sharing relationship, including the brief, owner, recipient, and creation time. Recipient access pauses when the owner no longer has a current Pro entitlement, while the relationship remains so access can return after a valid renewal. Suspended received relationships are not included in the recipient's account export. Deleting either account removes its sharing relationships.
Retention and your choices
We retain active account data until you delete it or ask us to do so, subject to backups, fraud-prevention needs, and legal obligations. From Account you can download a JSON copy and permanently delete your FaceBrief data. Deletion cancels an active FaceBrief Stripe subscription first. Apple does not let FaceBrief cancel an App Store subscription for you, so you must cancel that subscription in your Apple subscription settings. Stripe, Apple, and RevenueCat may retain transaction records they are legally required to keep. Deleting FaceBrief does not delete a shared BambooLabs sign-in identity used by another product.
Children
FaceBrief is not directed to children under 13, and Bamboo Labs does not knowingly collect their personal information. Contact us if you believe a child has submitted information.
Contact
For privacy questions or requests, email privacy@bamboolabsllc.com.