Privacy Policy.
Photo FaceFinder for iOS, iPadOS, and macOS is built to keep your photos and facial data secure and entirely under your control.
Overview
Photo FaceFinder is a photo organization app, available for iOS/iPad and macOS, developed and owned by TGSane Technologies. The app uses on-device face detection and on-device machine-learning models to help you group, search, and organize photos of the people already in your own Photos library — automatically detecting duplicate photos, building smart albums, and letting you search by face. All of this processing — face detection, generating face "fingerprints," grouping people, and finding duplicates — happens locally on your device using Apple's Vision framework and a Core ML model bundled inside the app, on every platform we ship on. We do not have our own servers that receive, store, or process your photos or facial data, and we do not use any third-party AI or cloud service to process them either. This policy explains exactly what stays on your device, what (if anything) we ever see, and the controls you have.
Apps Covered & App vs. Website
This policy covers both Photo FaceFinder for iOS (iPhone/iPad) and Photo FaceFinder for Mac (collectively, "the App" or "the Apps"). Both apps are built by TGSane Technologies, share the same on-device face-detection and face-recognition engine, and follow identical data practices — everything described below applies equally to both, regardless of which device you're using.
This is distinct from this marketing website (photofacefinder.com), which uses Google Analytics (a third-party service) to understand site traffic, via standard cookies/tags in your browser. Google Analytics only runs on this website — it is not included in, and does not run inside, either app.
Company Information
Photo FaceFinder is a product developed and owned by TGSane Technologies.
Intellectual Property
PhotoFaceFinder, its source code, trademarks, logos, graphics, and documentation are owned exclusively by TGSane Technologies. No part of the Software may be copied, modified, reverse engineered, or redistributed except as permitted by applicable law.
Data We Collect
We do not collect any data, on any platform. Photo FaceFinder (iOS and Mac) has no account system, no sign-in, and no backend server, so there is nothing for us to receive, store, or collect. Here is what the app itself works with, and where it stays:
Your photos Stays on your device
With your permission, the app reads photos already in your Photos library — on your iPhone/iPad or your Mac — to detect faces and find duplicates. Your photos are never uploaded, copied to a server, or sent anywhere — they are only read locally to perform on-device processing.
Facial recognition data Generated and stored on-device only
The app generates a mathematical face embedding (a numeric "fingerprint," not a photograph) for each detected face, entirely on your device using a bundled Core ML model. These embeddings — along with the groupings of photos by person — are saved only in a local file on your device, never transmitted to us or to any third party, and never combined with data from any other user.
Duplicate-photo hashes Generated and stored on-device only
To find duplicate or near-duplicate photos, the app computes an image hash locally for each photo. Like face embeddings, this stays on your device only.
Subscription status Handled by Apple
If you purchase Photo FaceFinder Pro on either platform, the purchase is processed entirely by Apple through StoreKit. We do not operate our own payment or subscription system, and we do not receive your payment details. A Pro purchase is tied to your Apple ID/App Store account per Apple's rules, not to any account of ours.
Face Data Policy — How Face Data Is Processed
When you run a scan, Photo FaceFinder uses Apple's on-device Vision framework to detect faces in each photo, then runs a Core ML model bundled inside the app to generate a numeric face embedding for each detected face — all on your device's CPU/GPU/Neural Engine, whether that device is an iPhone, iPad, or Mac. These embeddings are compared locally to group photos of the same person, and a separate on-device image-hashing step finds duplicate or near-duplicate photos. This is identical behavior across our iOS and Mac apps — they share the same on-device engine.
What face data is collected: face embeddings (numeric vectors describing facial geometry) generated from photos already in your own library.
Sharing: face data is never shared with us or with any third party, including any third-party AI service. We have no access to it — it never leaves your device, and the app makes no network requests containing photo or face data.
Storage: face embeddings and person groupings are stored only in a local file inside the app's private storage on your device. There is no cloud sync and no server-side copy.
Retention & deletion: this data is kept until you delete the underlying photo from your library, delete or merge a person within the app, or delete the app itself — any of which removes the corresponding local data.
What We Never Do
These commitments apply to every account, on every plan:
We never see, collect, or sell your data
Your photos, facial data, and personal information are processed only on your device. We have no server for this feature, so there is nothing on our end to sell, rent, or share with data brokers or advertisers.
We never use photos for ad targeting
Photo FaceFinder contains no advertising SDKs and does not use your photos or facial data to build ad profiles.
We never share facial data with anyone
Face recognition is scoped entirely to your own library, on your own device — it is never uploaded, pooled, matched against other users, or shared with any third party, including third-party AI services.
Subscriptions & Payments
Photo FaceFinder Pro is billed entirely through Apple's App Store using StoreKit. We do not operate our own payment system and do not receive or store your card details.
Data Storage & Security
Because photos, metadata, and face embeddings are processed and stored only on your device, they are protected by your operating system's own security — Apple's file-system protections and, if enabled, your device passcode/Face ID/Touch ID/Mac login and iOS/macOS's on-device encryption. We do not operate servers or databases that hold this data, so there is no production system of ours for it to be exposed from.
Data Retention
Photo FaceFinder has no account and no server-side storage, so there are no backups of your data on our end to purge. Face embeddings, person groupings, and duplicate-detection data are kept in a local file on your device until you delete the corresponding photo, delete or merge a person within the app, or delete the app entirely — deleting the app removes all of this local data immediately, since none of it exists anywhere else.
Children's Privacy
Photo FaceFinder is not directed at children under 13, and we do not knowingly collect account information from children. Parents or guardians who believe a child has created an account can contact us to request deletion.
Your Rights and Controls
Because everything stays on your device, you're always in direct control of it — there's no account or server-side copy to separately request access to or deletion of:
- 1
View your data
Browse the people, groups, and duplicate sets the app has found directly within the app at any time.
- 2
Delete specific data
Remove a person, merge groupings, or delete photos from your library — the app's local records update immediately.
- 3
Delete everything
Deleting the app removes all face embeddings, groupings, and duplicate-detection data instantly, since it only ever existed on your device.
- 4
Revoke Photos access
You can revoke the app's access to your Photos library at any time — on iPhone/iPad via iOS Settings → Privacy & Security → Photos, or on Mac via System Settings → Privacy & Security → Photos — which stops the app from reading any further photos.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes are reflected by revising the "Last updated" date above. Continued use of Photo FaceFinder after changes take effect constitutes acceptance. The current version is always available at photofacefinder.com/privacypolicy.
Contact Us
We aim to respond to all privacy-related inquiries within 5 business days.