Privacy Policy

NameFace is operated by YBC USA LLC (651 N Broad St, Suite 201, Middletown, DE 19709, United States), which is the data controller for the personal information described in this policy. You can reach us at hello@nameface.ai.

• Account information: your email address, display name, and authentication method (email and password, email link, or Google sign-in). When you sign in with Google, we receive the basic profile information Google shares with us.
• Learning and gameplay data: quiz answers, XP and scores, Daily Challenge results, leaderboard entries, memory-mastery progress, independent-recall and recognition history, and spaced-repetition review schedules.
• My People content: photographs, names, and notes you upload about your own private contacts, and the decks you organize them into.
• Billing information: if you subscribe to Premium, we store your subscription status, plan, and billing period dates. Payment card details are collected and processed directly by Stripe; NameFace never sees or stores your full card number.
• Technical information: session and security tokens needed to keep you signed in and protect your account.

• Provide the memory-training service: scoring, spaced repetition, progress tracking, and Daily Challenges.
• Display leaderboard standings using your display name and score.
• Manage your Premium subscription and billing.
• Send optional daily challenge reminder emails, only if you opt in. You can unsubscribe at any time.
• Keep the service secure, prevent abuse, and debug problems.

Photographs, names, and notes you save in My People are private to your account. They are stored in private storage, are never shown to other users, never appear on leaderboards or in public quizzes, and are never used to train or generate AI content. You can delete them at any time.

Public famous-person content (names, photographs, and facts shown in quizzes) comes from public sources such as Wikipedia and is separate from your private contacts.

Living Portraits animate a small number of historical public-domain portraits using a third-party image-to-video service (fal.ai). Only verified public-domain portraits of long-deceased historical figures are processed this way. Your private My People photographs are never sent to any AI or image-processing service.

• Stripe processes payments and subscriptions under its own privacy policy.
• Resend delivers optional reminder emails you opt into.
• Wikipedia supplies public photographs and facts about famous people.
• fal.ai processes approved public-domain portraits for Living Portraits, as described above.
• Google provides optional sign-in.
• Google Analytics 4 and Mixpanel receive usage events such as page categories, quiz milestones and collection interactions. Analytics are on by default and you can turn them off at any time in Privacy Settings. A pseudonymous account identifier may link activity across sessions; we do not send email, contact names, notes, typed answers or payment credentials.

We use essential browser storage to keep you signed in and remember your preferences. Change analytics and replay independently using Privacy Settings in the footer or your profile. Your previous choices, including opt-outs, are remembered on this device; dismissing the small notice does not permit tracking. Playing never requires a privacy decision.

Analytics and session replay are on by default. You can turn either off at any time in Privacy Settings, and your choice is remembered. Global Privacy Control and Do Not Track signals keep both off. Advertising consent remains denied.

Session replay has its own separate setting. Mixpanel may record public text, famous-face photographs, page layout, clicks and scrolling, including sign-in, account and supported NameFace checkout pages. Input fields, forms, embedded payment frames and explicitly private elements are blocked. My People and administrator pages are excluded. Passwords, emails, typed answers, private names and contact photos are not intended for capture. Console and network-content recording are disabled. Withdrawing replay consent stops new recordings; it does not automatically erase previously received data.

Provider retention and deletion settings are managed separately. Contact hello@nameface.ai to request deletion of previously collected analytics or recordings. Retention durations will be published after the project settings are confirmed.

We keep your account and learning data while your account is active. You may delete individual My People contacts at any time. You can delete your account and all associated personal data yourself from your progress page (Delete account), or by contacting us at hello@nameface.ai. Deletion is permanent and removes your contacts, photos, learning progress, and subscription record. When data is no longer needed, we delete or anonymize it.

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal data, to object to processing, and to withdraw consent. To exercise any of these rights, email hello@nameface.ai. We respond within one month.

NameFace is operated from the United States, and your information is processed there. If you use the service from outside the United States, you understand that your information will be transferred to and processed in the United States.

NameFace is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

We use encryption in transit, private storage for uploaded photos, row-level access controls so users can only reach their own data, and server-side verification for scoring and billing. No method of transmission or storage is perfectly secure, but we work to protect your information.

If we change this policy, we will update the effective date above and, for material changes, notify you in the app or by email.