Privacy

Draft, pending legal review. Last updated 3 October 2026. This describes exactly what the app does today, in plain language.

What Facevault stores

• Your account: your email address and a hashed password (never the password itself).
• Your Dropbox connection: the access tokens Dropbox gives us, stored encrypted, and the Dropbox account email.
• Photo records: for each photo in the folders you choose: its Dropbox path, file id, content hash and dates. Not the photo itself, except for the temporary copy below.
• Face crops: a small image of each detected face, used to show you the faces in the app.
• Face templates: for each face, a list of 512 numbers that describes it, so similar faces can be grouped. This is biometric data, which is why we ask for your explicit consent.
• Names you give people, and which faces belong to them.
• A temporary copy of each processed photo, kept for 30 days so it loads quickly, then deleted.
• "Don't recognise" lists: when you mark faces as "Stranger / not a face / can't tell" (or forget a person and tick "don't recognise them again"), their faces and face crops are deleted, but up to 20 face templates are kept - numbers only, no images - so the app can skip that person in future photos instead of asking you again. It also remembers where in which photo their faces were, so you can review and restore them. You can clear any entry at any time; an entry that hasn't matched anything for a year is deleted automatically.

What Facevault does in your Dropbox

It reads the folders you pick. When you name a person, it adds that name as a tag on the matching photos. It never deletes, moves or renames your files, and it only ever removes tags it added itself.

Who can see it

• Only you. Every account is fully separate; nothing is mixed or shared between users.
• The operator's admin page shows account-level information (email, counts, storage used), not your photos or faces.
• Nothing is sold or shared. Besides Dropbox itself, the outside services are:
  • Contabo (Germany, EU): the server Facevault runs on. Your account, photo records, faces, face crops, cached photos and backups are stored there, on a server only the operator can log in to.
  • Scaleway (France, EU): large syncs send batches of your photos to servers rented there, which find the faces and send the results straight back. Nothing is stored there.
  • one.com (Denmark, EU): sends the app's emails (invites, password resets, notices), so it sees your email address and those messages.
  • Telegram: when a background job fails, the operator gets an alert there with your account number and the error - never your email, photos or face data.

People in your photos

The people in your photos haven't signed up for Facevault. You can remove any detected face at any time, or use Forget this person on a person's page to delete all of their faces, face crops and face templates at once and remove their name tags from your Dropbox.

How long it's kept

• Everything is kept until you delete it or delete your account.
• When a photo is removed from your Dropbox, its record and faces are deleted after 30 days.
• A backup of the database is made every night and kept for 14 days, on the same server. Anything you delete can stay in those backups until they expire - at most 14 days.
• Disconnecting Dropbox deletes the stored connection and revokes this app's access at Dropbox.
• Deleting your account (on the account page) immediately removes everything: your account, photo records, faces, face crops, cached photos and your Dropbox connection, whose access is also revoked at Dropbox. Tags already written to your Dropbox stay there; use "Remove all tags" on the account page first if you want them gone too.

Questions or requests

Email faces@umbhau.dk, for example to get a copy of your data or have it deleted.