Privacy & your photos

Last updated: June 13, 2026

Uploading your face to a website asks for real trust. This page sets out, in plain language, exactly what we collect, what we will collect if you ever upload a photo, and the firm rules we hold ourselves to. These are commitments, not aspirations.

Right now: we hold no face data

Photo upload and headshot generation are not yet live — they are in early access. Today the site lets you browse AI-generated style examples and, if you choose, join an early-access list with your email. We currently collect no photos and no biometric data of any kind. The policy below governs upload-and-generate so that the rules are public before the feature exists.

Your photos and your face (when upload opens)

When the upload feature launches, the following rules apply to every photo you provide and to any face data derived from it (such as the temporary model used to render your likeness):

• Purpose limitation. Your photos are used for one purpose only: to generate headshots of you. Nothing else.
• Explicit, opt-in consent. Before any upload you must tick a consent checkbox that is never pre-ticked. No consent, no processing.
• 7-day deletion. Your uploaded photos and any derived face data are permanently deleted within 7 days, automatically.
• Instant deletion on demand. You can delete your photos and derived data immediately, at any time, without giving a reason.
• Never used to train other models. Your face is never added to a training set and never reused to generate images for anyone else.
• No original-photo hoarding. We do not retain your original photos beyond what is needed to generate your headshots within the deletion window.
• No selling or third-party disclosure. We never sell, rent, or disclose your photos or biometric data to third parties.

Biometric data, specifically

To create a faithful headshot, the generator may compute a temporary mathematical representation of your facial features (sometimes called a face embedding or face geometry). We treat this as sensitive biometric information:

• It is created only to render your headshots and is deleted together with your photos, within the same 7-day window.
• It is never sold, disclosed, or used to identify you anywhere else.
• We do not use it to recognise you across sessions, build a profile, or match you against any database.

If you are in a jurisdiction with a specific biometric privacy law (for example, Illinois’ BIPA in the United States, or the GDPR in the EU/UK), the consent, retention and deletion practices above are designed to honour those rights. If any compliance question arises, we will pause open access and serve only users who have given clear, informed consent until it is resolved.

Your rights and how to use them

You can ask us to confirm what data we hold about you, to delete it, or to withdraw consent — consistent with the GDPR, the CCPA/CPRA, and similar laws. We honour deletion requests promptly. To exercise any right, email support@freeheadshot.app and we will action it.

The early-access list

If you join the early-access list, we store one thing: your email address. We use it only to notify you when upload-and-generate opens and for occasional related updates. We never sell it or share it with third parties, and every message includes a one-click unsubscribe. Ask us to remove you at any time at support@freeheadshot.app.

Example portraits are synthetic

Every example headshot shown on this site is fully AI-generated and depicts no real, living, deceased or famous person. They exist only to demonstrate styles. We never display real users’ photos as examples.

Analytics

We use a lightweight, cookieless analytics script that records anonymous, aggregated events — such as which page was viewed and whether the style explorer was used. It sets no persistent identifiers and collects no personal information, so this site shows no cookie banner. We run no advertising trackers and load no third-party pixels.

Outbound links

Some pages link to other free tools we operate. Those links carry a simple source tag so we can understand traffic between our own sites; they contain no personal data.

Changes to this policy

If we change this policy — in particular before launching upload-and-generate — we will update the date above and, for material changes affecting your data, make the change prominent. The core commitments (consent, 7-day deletion, no training on your face) are foundational and not intended to weaken.

Contact

Questions, requests, or concerns? Email support@freeheadshot.app. A real person handles privacy and deletion requests.