Security

Cropping, zooming, rotating, positioning against the guide overlay, and checking your photo against the compliance rules all run as computation inside your own browser, using on-device machine-learning models for face and background detection that download to your browser once and then run locally. For the free tier, and for the paid tier in the United States, United Kingdom, Canada, and China, your original photo is never transmitted to any server at all.

For the paid upgrade, on countries where digital enhancement is legally permitted, one step does touch a server. Here is exactly what that involves:

1. After your payment is verified, your browser sends the photo once, over an encrypted (HTTPS/TLS) connection, to a serverless function we run.
2. That function forwards the image, in memory, to Replicate — a hosted image-processing API we use specifically for this step — and waits for the enhanced result.
3. The result streams straight back to your browser.

At no point in that round trip is your photo written to a disk or a database. There is no database in this product at all — we have nowhere to put it even if we wanted to.

We don't create accounts, so there's no password database and no user profile tied to your identity. We don't persist your photo on our servers at any stage of any flow, free or paid. That means there's no backup of your photo sitting somewhere waiting to be breached, leaked, or subpoenaed after the fact, because it was never kept in the first place.

Face-landmark detection is used only to help position an initial crop guide as a convenience — the coordinates it produces exist transiently in your browser's memory during your session and are used purely for that one geometric purpose. We never generate, store, or transmit a biometric template, faceprint, or any other persistent representation of your face.

Checkout is handled entirely by Stripe. Your card number, expiry, and security code are entered directly into Stripe's own hosted checkout page — they never pass through our servers, and we never see or store them.

These are the only outside companies that ever handle data on our behalf, and each is scoped to one narrow purpose:

Beyond these two, our hosting infrastructure (Vercel) automatically logs standard technical data, such as IP address and request timestamps, for security and reliability, the same way almost any web host does. These logs are about the request, not your photo's content, and are not linked to anything you upload.

Every network request this service makes — checkout, the enhancement call, and everything else — happens over HTTPS/TLS. There isn't a plaintext path anywhere in the flow.