Privacy Policy

The App is developed and operated by Tiny Face (“we”, “us”, “our”).

The App is designed to work entirely on your device. It has no user accounts, no sign-in, and no server that stores your content. Everything you create with the App is saved in the App’s local storage on your phone or tablet.

We do not sell your personal information, we do not use your photos, videos, or audio recordings to train machine-learning models, and we do not use your data for advertising.

By downloading or using the App, you agree to this policy. If you do not agree, please stop using the App and uninstall it.

2.1 Content you create — stays on your device

Photos, videos, audio recordings, text, settings, and other files you capture, import, or save in the App are written to storage on your device only. They are never transmitted to us or to any third party, and we have no technical ability to access them.

Media you create is saved to a shared (public) folder on your device — a public media directory such as Pictures/, Movies/, Music/ or a folder you choose — so that you can find your work in your Gallery, Files, or Music app and use it outside the App. You should understand what that means for privacy:

• The files are visible to other apps on your device that have media or storage permission, and to anyone who has access to your unlocked device.
• They may be picked up by other apps you use, including automatic cloud backup or photo-sync services such as Google Photos, a gallery backup, or a file-manager sync. Any upload of that kind is done by that app under its own privacy policy, not by us.
• They survive uninstalling the App and clearing its data. Only you can delete them — see Deleting Your Data.

App settings and internal state are kept separately, in the App’s own private storage, which other apps cannot read.

2.2 Information you send us voluntarily

If you email us for support or send feedback, we receive your email address, your message, and anything you choose to attach (for example a screenshot or a log file). This is the only situation in which we may learn information that identifies you, and it happens only because you chose to contact us.

2.3 Information collected automatically

The App uses Firebase to stay stable and to understand how its features are used. This data is not linked to your name, email, or any account, because no account exists.

To be straightforward about it: the current version of the App does not include a setting to turn analytics and crash reporting off. They are active whenever you use the App, and the only way to stop them is to uninstall the App. We collect only what is described below, never your content, and we are working on adding an opt-out.

• Device and app information. Device model, manufacturer, operating system version, language, region, app version, and a randomly generated installation identifier (Firebase Installation ID). This identifier is reset when you clear the App’s data or reinstall it.
• Usage and analytics events. Which screens are opened, which features are used, session start and duration, and similar aggregate events, collected through Google Analytics for Firebase.
• Crash and performance diagnostics. Stack traces, exception messages, device state at the time of a crash, and performance traces, collected through Firebase Crashlytics and Firebase Performance Monitoring.
• IP address. Automatically visible to Google’s servers when the App sends analytics or crash data. It is used for coarse location (typically country level) and abuse prevention, and we do not store it ourselves.
• Push notification token. If you allow notifications, Firebase Cloud Messaging assigns a device token used to deliver messages to your device. It identifies the installation, not you.

2.4 Information we do not collect

We do not collect your name, email address (unless you write to us), phone number, precise GPS location, contacts, SMS messages, call logs, or health data. We never receive your credit card, debit card, or bank details — all payments are handled entirely by Google Play. We do not create user profiles and we do not track you across other apps or websites.

2.5 Summary (Google Play Data Safety)

The table below summarizes how the App handles each data type. What actually applies depends on the features you use and the permissions you grant.

Android asks for your consent before the App can use sensitive capabilities. You can grant or revoke each permission at any time in Settings → Apps → the App → Permissions. Revoking a permission will disable the features that depend on it, but it does not delete files already saved on your device.

• Camera (android.permission.CAMERA). Used only while you are actively taking a photo or recording video inside the App. The App does not access the camera in the background.
• Microphone (android.permission.RECORD_AUDIO). Used only while you are actively recording audio or video with sound. The App does not listen in the background and does not record without a visible in-app indicator.
• Photos and media (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIO) or the Android photo picker — to let you import existing files you select, and to show you the files the App has saved. We only read the items you pick or that the App itself created.
• Saving to shared storage (MediaStore, or WRITE_EXTERNAL_STORAGE on Android 9 and older) — to write your captures into a public media folder so they show up in your Gallery or Files app and remain yours independently of the App.
• Notifications (POST_NOTIFICATIONS). To send you notifications you have opted into, such as reminders or processing-complete alerts.
• Internet and network state. To send anonymous crash and analytics data, validate purchases with Google Play, and load remote configuration. Your content is not sent over the network.
• Billing (com.android.vending.BILLING). To offer in-app purchases and subscriptions through Google Play.

Camera and microphone data are the most sensitive information the App touches, so we describe them separately.

• Capture is always user-initiated. Recording starts only when you tap a capture or record control, and stops when you stop it or leave the screen. There is no background capture.
• Stored only on your device. Photos, videos, and audio recordings are written to a shared media folder on your device, as described in Section 2.1. They are never uploaded to us, to Firebase, or to any other server.
• Readable by other apps on your device. Because the folder is public, other apps that hold media permission — and any cloud-backup or gallery-sync app you use — can read those files. We cannot control or see that. If you record something sensitive, keep in mind that it lands in your normal media library.
• Processed only on your device. Any editing, filtering, transcoding, or analysis happens locally, offline. The App does not need an internet connection to process your captures.
• No one else can see it. Because nothing is uploaded, we have no copy of your content. Not our staff, not our service providers, not law enforcement — no request to us can produce your recordings.
• You control sharing. Content leaves your device only if you explicitly share or export it to another app, person, or service. From that point, the receiving service’s own privacy policy applies.
• Deletion is immediate and local. Deleting a recording in the App removes it from your device. See Deleting Your Data.

• To provide, operate, and maintain the App’s features.
• To process in-app purchases and subscriptions, verify entitlements with Google Play, and restore purchases on a new device.
• To diagnose crashes, fix bugs, and improve performance and stability.
• To understand which features are used so we can prioritize improvements (aggregate, non-identifying analytics).
• To send notifications you opted into, and to reply to you if you contact support.
• To detect and prevent fraud and abuse of paid features, and to comply with legal obligations.

We do not use your information for third-party advertising or behavioral profiling, and we do not sell or rent it.

The App offers one-time purchases (a permanent unlock of a feature or content) and subscriptions (recurring access billed on a periodic basis). All transactions are processed by Google Play Billing.

6.1 Payment data

We never see or store your payment method. Google Play processes the payment and returns to the App a purchase record containing the product ID, order ID, purchase token, purchase time, and subscription status. Because the App has no accounts and no server, this record is kept on your device and in your Google Play account, and is used only to unlock what you paid for and to check that the purchase is genuine.

6.2 One-time purchases

A one-time purchase is tied to the Google account you used to buy it, not to an account with us. It does not renew and is not charged again. To restore it after reinstalling or on a new device, sign in to Google Play with the same Google account and use the restore option in the App.

6.3 Subscriptions and auto-renewal

• Subscriptions renew automatically at the end of each billing period unless you cancel at least 24 hours before the period ends. The renewal price and period are shown before you confirm the purchase.
• Your Google Play account is charged for renewals. Prices may vary by country and are subject to change; Google Play will notify you of a price increase and ask for consent where required.
• Cancel at any time in Google Play → Subscriptions (or Play Store → Profile → Payments and subscriptions). Cancelling stops future charges; you keep access until the end of the current paid period. Uninstalling the App does not cancel a subscription.
• Free trials and introductory offers, where offered, convert to a paid subscription automatically unless cancelled before the trial ends. Eligibility is determined by Google Play.
• Refunds are handled by Google under the Google Play refund policy. You may also contact us at smartface102@gmail.com and we will help where we can. Statutory rights, including EU/UK withdrawal rights, are unaffected.
• When a subscription ends, premium features become unavailable, but your files stay on your device — we cannot delete them, and losing access to a paid feature never deletes content you already created.

The App does not use Firebase Authentication, Cloud Firestore, or Firebase Cloud Storage, because it has no accounts and stores no content in the cloud. It does use the following services, which process data on our behalf under their own privacy terms:

• Google Analytics for Firebase — aggregate, non-identifying usage analytics.
• Firebase Crashlytics — crash and error reporting.
• Firebase Performance Monitoring — startup time, responsiveness, and similar performance traces.
• Firebase Remote Config — enabling or configuring features without an app update.
• Firebase Cloud Messaging — push notifications, if you allow them.
• Google Play Billing — payment processing for one-time purchases and subscriptions.

Learn more: Firebase Privacy and Security, Google Privacy Policy, and data processed by Firebase services.

If you are in the European Economic Area, the United Kingdom, or another region with similar law, we rely on these legal bases under the GDPR:

• Contract (Art. 6(1)(b)) — to provide the App and to deliver the purchases and subscriptions you bought.
• Consent (Art. 6(1)(a)) — for camera and microphone access and for notifications. You can withdraw that consent at any time by revoking the permission in Android settings. For analytics and crash reporting, the App currently offers no in-app opt-out, so the only way to withdraw is to uninstall the App.
• Legitimate interests (Art. 6(1)(f)) — to keep the App secure, prevent fraud and abuse of paid features, and fix crashes.
• Legal obligation (Art. 6(1)(c)) — to meet tax, accounting, and other legal requirements relating to purchases.

We have no copy of your content, so there is nothing of yours for us to share. The limited diagnostic data described in Section 2.3 is disclosed only in these situations:

• Service providers (processors) listed in Section 7, acting on our instructions.
• At your direction — for example, when you share or export a file from the App to another app or person.
• Legal requirements — to comply with applicable law, a valid legal process, or a government request, and to protect our rights, safety, and property or those of our users.
• Business transfer — in connection with a merger, acquisition, or sale of assets, in which case we will notify you and the successor remains bound by this policy.

We do not share your information with data brokers, advertising networks, or for cross-context behavioral advertising.

• Media in your shared folder — kept indefinitely, until you delete it yourself. It is not removed when you clear the App’s data or uninstall the App. We have no control over this data and cannot retain, delete, or recover it.
• App settings and local state — kept until you clear the App’s storage or uninstall it.
• Crash and analytics data — retained according to Firebase defaults: Crashlytics up to 90 days; Analytics up to 14 months for event-level data, depending on configuration.
• Purchase and transaction records — held by Google Play and, for the aggregate financial records we receive as a developer, retained as long as tax and accounting law requires, typically 5–10 years.
• Support emails — retained up to 24 months.

• Local by design. The strongest protection here is architectural: your photos, videos, and recordings never leave your device, so they cannot be exposed by a breach of our systems — we hold no copy.
• But local does not mean hidden. Your media is saved to a public folder, so it is protected by your device’s own encryption and screen lock, not by app sandboxing. Other apps with media permission can read it. If that matters for what you record, review which apps have media access, and be deliberate about gallery-backup apps. App settings, by contrast, live in private storage other apps cannot read.
• Diagnostic data sent to Firebase is encrypted in transit with TLS/HTTPS and encrypted at rest by Google Cloud.
• Purchases are verified through Google Play’s signed responses, so entitlements cannot be forged.

No method of transmission or storage is completely secure. If a breach affects personal data we hold, we will notify affected users and the relevant authorities as required by law. Please note that if you lose your device or delete the App, we cannot recover your content for you, because we never had it.

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (“right to be forgotten”).
• Export your data in a portable format.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Withdraw consent you previously gave.
• Lodge a complaint with your local data protection authority.

An important practical limit: because the App has no accounts, the diagnostic data we receive is not linked to your identity, and we usually cannot connect a request to specific records. That means an access, correction, or deletion request may be impossible for us to fulfil in the technical sense — not because we refuse, but because we cannot tell which anonymous data is yours. In practice you already hold the strongest control: your content is on your device, and you can delete it yourself at any time.

California residents (CCPA/CPRA) have the right to know what is collected, to delete it, to correct it, and to opt out of sale or sharing — we do not sell or share personal information as those terms are defined. We do not discriminate against anyone who exercises these rights.

To exercise a right or ask a question, email smartface102@gmail.com. We respond within 30 days.

Because your data lives on your device, deletion is entirely in your hands and takes effect immediately:

• Delete individual items — remove any photo, video, or recording from inside the App.
• Delete the saved media files — open your Gallery, Photos, or Files app and delete them from the App’s folder, or delete them from inside the App. This is the only way to remove them: because they sit in a public folder, they are not deleted by clearing the App’s data or uninstalling it. Remember to empty your Gallery’s Trash or Recently Deleted afterwards.
• Clear the App’s own storage — Settings → Apps → the App → Storage → Clear data. This erases settings and the local Firebase installation identifier, but not your media files.
• Uninstall the App — removes the App and its private storage, and stops all analytics and crash reporting. Your media files stay on the device.
• Contact us — email smartface102@gmail.com for anything else, including deleting a support conversation.

Deletion is permanent and cannot be undone, and we cannot restore deleted content. If another app already copied or backed up a file — a cloud photo service, for example — deleting it here does not delete the copy held by that service; you have to remove it there too. Deleting the App’s data does not cancel an active subscription — cancel it in Google Play first, as described in Section 6.3.

The App is not directed to children under 13 (or under the minimum age of digital consent in your country, which may be up to 16). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact smartface102@gmail.com and we will delete it promptly.

Your content stays on your device and is not transferred anywhere. The anonymous diagnostic data described in Section 2.3 is processed by Firebase and Google Cloud, which operate data centers worldwide, so it may be processed in countries other than your own, including the United States. Where such data leaves the EEA or UK, the transfer relies on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, which form part of the Google Cloud and Firebase data processing terms.

We may update this policy as the App evolves. We will change the “Last updated” date at the top and, for material changes — for example if a future version adds accounts or cloud storage — notify you in the App before the change takes effect. Continuing to use the App after a change means you accept the updated policy. Previous versions are available on request.

For questions about this policy or your data, contact us at:

This policy is governed by the laws of Vietnam, without prejudice to mandatory consumer and data protection rights in your country of residence.