Last Updated: April 13, 2026
Thank you for using Nuwa Face and for reviewing our Privacy Policy. This document explains how we collect, process, store, and protect your personal information when you use our mobile application and related services (collectively referred to as the “Services”). By using our Services, you confirm that you understand and agree to the practices described in this policy.
Nuwa Face is an AI-powered application that allows users to upload photos and use artificial intelligence to identify potential social media profiles associated with the individuals in those photos. Given the sensitive nature of the data we process, including facial imagery and biometric information, we are committed to maintaining the highest standards of data protection and transparency.
1. Scope of This Policy
This Privacy Policy applies to all users of the Nuwa Face application on iOS (Apple App Store) and Android (Google Play Store) platforms. It covers our practices regarding the collection, processing, storage, and protection of personal information, including biometric data. We are committed to complying with applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), the Illinois Biometric Information Privacy Act (BIPA), and other applicable regional and national privacy laws.
2. Information We Collect
When you use Nuwa Face, we may collect the following categories of information:
2.1 Photos and Facial Data
- Photos you upload through the app for the purpose of facial recognition search.
- Facial feature data (biometric information) extracted from uploaded photos by our AI system, including facial geometry, faceprints, and facial feature vectors used for identification purposes.
- We process facial data solely to provide search functionality and do not use it for any other purpose without your explicit consent.
2.2 Account Information
- When you create an account or sign in via a third-party service (such as Google or Apple Sign-In), we may collect your email address, display name, account ID, and profile picture.
2.3 Device and Technical Information
- Device model, operating system version, unique device identifiers, and language settings.
- IP address, network type, and connection information.
- App version and diagnostic data including crash reports, error logs, and performance metrics.
2.4 Usage Data
- Information about how you interact with the app, including features used, search history, search results viewed, and frequency of use.
- Log data such as access times, pages viewed, and interactions with search results.
2.5 Search Results Data
- Publicly available social media profile information retrieved in response to your search queries, such as profile names, profile URLs, and profile images.
2.6 Anonymized and Aggregated Data
We may collect non-personally identifiable, aggregated, or anonymized data for analytics and service improvement purposes.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide core app functionality, including AI-powered facial recognition and social media profile search services.
- To process and analyze uploaded photos using artificial intelligence to generate facial feature data for identification.
- To return relevant search results matching the uploaded photo to publicly available social media profiles.
- To create and maintain your user account and authenticate your identity.
- To analyze app performance, identify and fix technical issues, and optimize the stability and reliability of our Services.
- To understand usage patterns and improve features, user experience, and service quality.
- To communicate with you regarding service updates, security alerts, and support messages.
- To comply with legal obligations and enforce our Terms of Service.
- To provide personalized content or advertising, where applicable and in accordance with applicable laws.
We do not use your facial data or biometric information for advertising, marketing, or any purpose unrelated to the core search functionality, unless we have obtained your separate, explicit consent.
4. Biometric Data and Facial Recognition
Given that Nuwa Face processes biometric information, we wish to provide additional transparency regarding how this data is handled:
- Consent: We will obtain your explicit, informed consent before collecting or processing any biometric data. You may withdraw your consent at any time.
- Purpose Limitation: Facial feature data is extracted and used solely for the purpose of searching and matching social media profiles. We do not use biometric data for any other purpose.
- Data Retention: Facial feature data extracted from your uploaded photos is processed in real-time and is not permanently stored on our servers unless you explicitly choose to save a search. Uploaded photos are automatically deleted from our servers once the scan is complete.
- No Sale of Biometric Data: We do not sell, lease, trade, or otherwise profit from your biometric information.
- Security: Biometric data is encrypted during transmission and processing using industry-standard encryption protocols.
- Right to Delete: You may request the deletion of any biometric data associated with your account at any time by contacting us or using the in-app deletion feature.
5. App Permissions
Nuwa Face requests the following permissions to deliver its core functionality:
- Camera Access: To allow you to take photos directly within the app for facial recognition search. Photos taken via the camera are processed the same way as uploaded photos.
- Photo Library / Gallery Access: To allow you to select and upload existing photos from your device for facial recognition search.
- Network / Internet Access: Required for transmitting photo data to our AI processing servers and retrieving search results.
We do not request unnecessary access to your contacts, location, microphone, or other device features beyond the functions described above. On iOS, we use the system photo picker where possible to minimize the scope of access to your photo library.
6. Data Sharing and Third Parties
We do not sell your personal information, including biometric data, to third parties.
We may share limited data with trusted third parties only in the following circumstances:
- AI Processing Partners: We may use third-party AI service providers to assist in facial recognition processing. These partners are bound by strict data protection agreements and may only process data on our behalf and in accordance with our instructions.
- Analytics and Crash Reporting: We use third-party analytics and diagnostic tools to monitor app performance and fix technical issues. These tools process anonymized or pseudonymized data only.
- Legal Compliance: We may disclose information when required to comply with applicable laws, legal proceedings, or governmental requests.
- Safety and Security: We may share information when necessary to protect the safety, rights, and security of our users, our company, or the public.
- Advertising Partners: If applicable, we may work with third-party advertising partners to deliver relevant content. These partners do not receive biometric data or facial imagery.
All third-party partners are contractually required to maintain data protection standards equivalent to or stricter than those described in this Privacy Policy.
7. Data Retention and Deletion
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. Specifically:
Uploaded Photos: Automatically deleted once the scan is complete. Photos are not stored on our servers.
Facial Feature Data: Processed in real-time and not permanently stored unless you choose to save a search. Saved search data can be deleted at any time.
Account Information: Retained for the duration of your account. Upon account deletion, all associated data will be permanently removed within 30 days.
Usage and Technical Data: Retained in anonymized or aggregated form for up to 12 months for analytics purposes.
You may request deletion of your account and all associated data at any time through the in-app settings or by contacting us. We provide an accessible account deletion mechanism both within the app and via our website, in compliance with Apple App Store and Google Play Store requirements.
8. Data Security
We implement appropriate technical and organizational security measures to protect your information, including biometric data, from unauthorized access, disclosure, alteration, or destruction. These measures include:
Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. Biometric data is encrypted both in transit and at rest.
Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.
Infrastructure Security: Our servers are hosted in secure data centers with physical and logical security controls.
Regular Audits: We conduct periodic security assessments and vulnerability testing.
While we strive to protect your data using commercially reasonable measures, no method of electronic storage or transmission can be guaranteed to be 100% secure.
9. International Data Transfers
Our Services are accessible globally. Your information, including biometric data, may be transferred to, stored, and processed in countries outside your own jurisdiction, which may not provide the same level of data protection as your home country. Where such transfers occur, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure that your data receives an adequate level of protection. By using our Services, you consent to the transfer of your information as described in this section.
10. Children’s Privacy
Nuwa Face is not intended for use by children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information, including biometric data, from children under this age. If we become aware that we have inadvertently collected data from a child without valid parental consent, we will take immediate steps to delete such information. If you believe that a child has provided us with personal information, please contact us immediately.
Users must not upload photos of minors for the purpose of facial recognition search without the explicit consent of their parent or legal guardian. Nuwa Face reserves the right to remove any content or restrict any account that violates this policy.
11. Your Rights
11.1 For All Users
Regardless of your location, you have the right to:
Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your personal data, including biometric data and uploaded photos.
Withdraw Consent for the processing of biometric data at any time.
11.2 For Users in the European Union (GDPR)
If you are located in the EU/EEA, you additionally have the right to restrict or object to data processing, the right to data portability, and the right to lodge a complaint with a supervisory authority. Biometric data is classified as special category data under GDPR Article 9, and we process it only with your explicit consent.
11.3 For Users in California (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect and how it is used, the right to request deletion, the right to opt out of the sale of personal information (we do not sell your data), and the right to non-discrimination for exercising your privacy rights. Biometric information is classified as sensitive personal information under CPRA, and you have the right to limit its use and disclosure.
11.4 For Users in Illinois (BIPA)
If you are an Illinois resident, we will obtain your written informed consent before collecting or using any biometric identifiers or biometric information. We will not sell, lease, trade, or otherwise profit from your biometric data. We maintain a publicly available written policy for the retention and destruction of biometric data.
To exercise any of these rights, please contact us using the information provided at the end of this Privacy Policy.
12. Cookies and Similar Technologies
Our app does not directly use cookies. However, third-party services integrated within the app (such as analytics or advertising tools) may use cookies or similar tracking technologies. You can manage cookie and tracking preferences through your device settings or the relevant platform’s privacy controls (such as Apple’s App Tracking Transparency or Android’s advertising settings).
13. Third-Party Links and Services
Nuwa Face search results may contain links to third-party social media profiles and websites. We are not responsible for the privacy practices or content of these third-party services. We encourage you to review the privacy policies of any third-party service before providing your personal information.
14. Do Not Track Signals
We honor Do Not Track (DNT) signals sent by your browser or device. When we detect a DNT signal, we will not engage in cross-site tracking of the individual user. We also respect the Global Privacy Control (GPC) signal as a valid opt-out request under applicable laws.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any material changes will be communicated to you through an in-app notification or via email before the changes take effect. The updated policy will also be posted within the app and on our website. We encourage you to review this policy periodically. Your continued use of the Services after changes are posted constitutes your acceptance of the updated policy.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, your biometric data, or our data practices, please contact us:
Email: zhuoxiaojing930519@gmail.com
Website: https://nuwaface.com/