Privacy policy — version 1
Last updated: 25 October 2026
When we change this policy, we tell you in the app and ask you to accept the new version.
1. Who we are
SoluFace is run by SoluFace.AI Limited, a company registered in Sofia, Bulgaria. We decide why and how your personal data is used in SoluFace, so we are the "controller" under the EU General Data Protection Regulation (GDPR).
For anything about your data, write to privacy@soluface.ai.
2. What SoluFace does
SoluFace lets you decide where your face appears. If you enroll your face, we can recognise it in photos that other people submit through SoluFace, and you decide whether your face may be shown. Until you allow it, your face stays blurred.
We only recognise people who have enrolled their own face. We do not try to find out who anybody else is.
3. What we collect and why
Your account. Username, contact e-mail, display name, language, notification settings, and the version and time of the terms and policy you accepted. Your password is stored only as a one-way hash. We need this to run your account (contract, GDPR Art. 6(1)(b)).
Your face — only if you choose to enroll it. The selfies or short live capture you take when you enroll, and the faceprint we compute from them (a list of numbers that describes your face). We use it for one thing: to recognise your face in photos submitted through SoluFace, so that you can decide about them. This needs your explicit consent (Art. 9(2)(a)), and you can withdraw it at any time (section 7).
Photos submitted for a check. The photo, the position of each face in it, and which enrolled person (if any) matched. We need this to blur faces until the people in the photo decide. A photo you check before sharing it is sent to our servers for the check and is not kept.
Your rules and decisions. Your photo rules (allow / ask / deny), the requests you receive and your answers, and a tamper-evident record of the consents you gave and the decisions made about your face. We keep the record to prove what was agreed (Art. 7(1)).
Photo fingerprints. If you ask us to protect a photo, we keep a digital fingerprint (hash) of it, not the photo, to recognise copies.
Your devices. A push-notification token, if you allow notifications. If you switch on sign-in with your phone's fingerprint or face unlock: a public key and the device name. Your phone checks your fingerprint or face itself — SoluFace never receives it.
Security events. Sign-ins, password changes, sign-in methods added or removed, so that you can see your account's activity and we can protect it.
Problem reports — only when you tap "Report". App and device facts (model, system, language), the screen, the error, the list of the last requests the app made (without their content), your comment if you write one, and your account ID if you are signed in. Never face data.
People who are not enrolled. A submitted photo can show people who have no account. To find enrolled faces, every face in the photo is compared with the enrolled faceprints. For a person who is not enrolled, that comparison happens in memory and is then discarded: we store no faceprint of anyone who has not enrolled, and we do not try to identify them. We keep the photo and the position of each face in it, so that faces can be blurred.
4. What we do not do
- We do not sell your data and do not use it for advertising or profiling.
- We do not identify people who have not enrolled their own face.
- Your faceprint never leaves our servers. It is never sent in a notification, written to a log or returned by our apps.
- We do not use your face data to train face-recognition models.
- During the test phase we do not enroll the faces of people who live in the United States.
5. Where your data is, and who else sees part of it
SoluFace runs on our own servers. The service, the database and the photo storage are ours; no hosting company runs them for us. All data in section 3 stays there.
A few outside services still handle a small part of your data, only to do the job named here:
- Push notifications go through Google's notification service (Firebase Cloud Messaging): it receives your device token, the type of notification and a fixed text — never a photo, a name or face data.
- Sign in with Google, if you choose it: Google confirms who you are to us; we keep only your Google account ID and e-mail address.
- E-mails we send (confirmation, password reset, security notices) are delivered through Google's mail service: it sees your e-mail address and the e-mail.
- Problem reports become tickets in our issue tracker on GitLab: a summary of the error (type, versions, counts), not your comment or account, except for our own test accounts.
- This website (soluface.ai) is served by GitLab Pages, which sees what any website host sees when you open a page.
These companies may process data outside the European Union under their standard data-protection terms. We give your data to nobody else, unless the law requires it.
6. How long we keep it
- Account, face data, rules, devices: until you delete them. Deleting your account deletes your face data, rules and devices with it. You can delete your face data alone, in the app, at any time.
- Problem reports: 90 days.
- Records of consents and decisions: their content is deleted with your account. A minimum record that the log is complete stays, without your name, e-mail or face data.
7. Your rights
At any time you can see the data we hold about you and get a copy, correct it, delete your account (in the app under Account → Delete account, or by writing to us), withdraw your consent to face recognition by deleting your face photos in the app (this stops recognition at once), and object to a use based on our legitimate interest.
Write to privacy@soluface.ai; we answer within one month. You can also complain to a data protection authority — in Bulgaria the Commission for Personal Data Protection (www.cpdp.bg), or the authority where you live.
8. Children
SoluFace accounts are for adults (18 or over). Children could be protected by their parents.
9. Security
All connections to our servers are encrypted. Passwords are stored only as one-way hashes. Face data is kept apart from the rest of the system and is never written to logs, sent in notifications or returned by our apps. Only the people who run SoluFace can reach the servers.
10. This website
soluface.ai uses no analytics and no advertising cookies. If you write to us by e-mail, we use your message only to answer you.
11. Contact
SoluFace.AI Limited, Sofia, Bulgaria — privacy@soluface.ai