Privacy policy

Effective 5 November 2026. Applies to the FaceErase iPhone app and this website, both provided by Praise The Sun LLC ("we").

In short: FaceErase works on your phone. Your photos never leave it unless you choose to share them. The app makes no network connections: no accounts, no servers, no analytics, no advertising.

Your photos

• Faces are detected and covered on your iPhone. Photos are never uploaded to us or anyone else.
• Only the covered version of a photo is saved. The uncovered original is held in memory only while you review it, and is wiped when you save, retake, or leave the app.
• Saved photos are stored inside FaceErase, protected by iOS file encryption whenever your phone is locked, and excluded from iCloud and device backups. They are not added to your Photos library.
• Location, time, camera and other hidden data are removed from every saved photo.
• A photo leaves your phone only when you share it yourself. Once shared, it is handled by the app or person you sent it to, not by FaceErase.
• Deleting a photo, or deleting the app, removes the photos from your phone. We cannot recover them, because we never had them.

Camera and face data

• FaceErase asks for camera access so you can take photos. It does not use the microphone.
• Face detection finds where faces are in an image. It does not identify who anyone is, and FaceErase never creates or stores a record of anyone's face.
• On iPhones with a TrueDepth camera, the selfie camera can use Apple's face tracking (ARKit) to place the chosen cover on your face in real time. That face data is used only for the live preview, stays on your phone, is never stored, and is never shared with us or anyone else.

Your PIN and Face ID

• Your PIN is stored only on this iPhone, as a salted hash in the iOS Keychain. It is never sent anywhere and is not included in backups. We cannot see or reset it.
• If you turn on Face ID in FaceErase, Face ID is handled entirely by iOS. The app only learns whether the check succeeded. It never receives your face data.

Settings

• Your choices (light or dark mode, default style, auto-lock and similar) are stored on your phone only.

What we do not collect

• No account, name, email or phone number is needed to use FaceErase.
• We add no analytics, advertising, ad identifiers or tracking to the app.
• We do not sell or share personal data, because we do not have any from the app.

Third-party components

• FaceErase uses Apple's Vision framework and Google's ML Kit to detect faces on your phone. Images are processed on the device and are never sent to Apple, Google or anyone else.
• ML Kit normally sends Google technical usage diagnostics. FaceErase disables that reporting and blocks all network connections from inside the app, so the app contacts no servers at all. You can confirm this yourself in Settings > Privacy & Security > App Privacy Report.

Beta testing

• Beta versions are distributed through Apple's TestFlight. If you join, Apple shares with us the name and email address you were invited with, and information such as crash reports, device model, and any feedback or screenshots you choose to send. We use this only to improve FaceErase and to contact you about the beta. See Apple's privacy policy.

Email and this website

• If you email us, we keep your message and address to reply, and delete them when no longer needed. We never add you to a mailing list without asking.
• This website uses no cookies, analytics or tracking, and loads its fonts from our own server. The company that hosts it may keep standard server logs, such as IP addresses, for security.

Children

• FaceErase is not directed at children under 13, and we do not knowingly collect information from them.

Changes and contact

• If this policy changes, we'll update it here with a new effective date.
• Questions: hello@praisethesun.io, Praise The Sun LLC, California, USA.