Face Data Notice

1. Find Me (find your own photos)

• Only runs if you choose it and agree. Face matching is for adults: we use the age range your Apple account shares, or the birth month you give us, and if you are under 18 it stays off. We don't knowingly collect personal information from children under 13; parents can ask us to delete a minor's account through Support.
• Your phone takes a short burst of selfies and turns them into a temporary mathematical face template. It does the same for the faces in that one album's photos, compares them, and shows you the photos that look like you.
• All of that happens on your phone. The templates — yours and everyone else's — are never sent to Loud Globe and are erased from memory when the scan ends. Your selfies are not uploaded.
• What is saved: the photos you confirm as "me". That list is stored with your account, and people who can see the album can see that you are in it. You can remove yourself from any photo at any time in the app.
• We record that you agreed, when, and to which wording — not anything about your face.
• Find Me works the same way in your phone's web browser on loudglobe.com: the matching runs inside the browser on your phone, and the templates are never sent to Loud Globe.

1b. Face vault (find your photos with one tap)

• Optional, only with your consent, 18 or older, and always tied to your account.
• You scan your face once (in the app or in your phone's browser). A few selfies from that scan are saved privately to your account so your vault works on any phone you sign in on. Only you can see them.
• The face template made from them stays on your phone (in the app, or in your browser's storage) and is never sent to Loud Globe; a new phone rebuilds it from your selfies.
• Delete your face vault at any time in the app (Settings → Face vault); its selfies are deleted with it, and with your account.

2. The people count (keeps Explore to real events)

• The phone of an album's host or collaborator counts how many different people appear in the album. It is on by default and can be switched off at any time in the app: Settings → People count.
• It works with temporary face templates that stay on that phone. The only thing sent to Loud Globe is a number, for example "62 people". The phone erases the templates once they have gone unused for 30 days.
• Switching it off means that phone counts nothing and erases what it had; albums without a count may not appear in Explore.

3. What our servers do hold

• The event photos themselves, uploaded by hosts, photographers and guests.
• For each photo, where the faces are (rectangles) and a small cropped picture of each face, cut from the uploaded photo by the uploader's phone, plus a face code for each cropped face — a list of numbers the uploader's phone works out so a search is instant. A face code is stored only next to its photo: never with a name, an account or a profile, and it can't be turned back into a picture. Crops and codes sit in private storage; they are only handed out, through links that expire within minutes, to someone signed in who is allowed to see that photo (or a guest searching a public album), and only for albums where face matching is on.
• Face vault photos: the photos from your face vault scan, kept in private storage tied to your account. They are never shown to anyone. The face template made from them stays on your phone.
• The "me" confirmations described above, and the consent records.
• If you verify your identity with a selfie: that one photo. Your phone only checks that it contains a face; it is not matched or compared with anything.

4. How long things are kept

5. What we never do

• We never sell, rent, trade or otherwise profit from face data, and never use it for advertising.
• We never use it to train face-recognition or AI models unless you tick the separate, optional "Help improve face matching" box (section 5b).
• We never build a searchable database of faces, and never try to identify strangers.
• We don't share face data with anyone. Photos are stored with our hosting providers solely to run the service.

5b. Help improve face matching (optional)

When you make your face vault you can tick "Help improve face matching." It is off unless you tick it, and matching works the same either way.

• What we use: the face photos from your vault scan. Nothing from your other photos or albums.
• What for: teaching our own matching model to recognize faces turned sideways, in low light, with glasses or makeup.
• Who sees them: only the people building the model. They stay in private storage and are never shown to anyone.
• Never: sold, shared, or used for ads. Not used for people in Illinois, Texas, Washington or Portland, Oregon, or where we can't tell where you are.
• Turning it off: use the switch below or email us. We also stop using your scan 3 years after you opted in unless you tick again. We stop using your scan and remove our copies from the training machine within 30 days. A model that was already trained can't unlearn, but your scan is never used again.

6. Where the face features are off

Find Me and the people count are not available for events located in Illinois, Texas and Portland, Oregon (no face codes are made or handed out for them), and Find Me is not available to anyone under 18. We may switch the features off in other places as laws change.

Face matching is also off for albums without a location and for all-ages albums (everyone in an album must be 18 or older).

7. For hosts and photographers

When you upload event photos you confirm that the people in them were told photos would be taken and shared, and that guests may use face matching to find their own pictures (see our Terms). Wording you can put on a ticket page, an invitation or a sign at the door:

"Photos from this event will be shared in a Loud Globe album. Guests can use an optional face-matching tool on their own phone to find the photos they are in. Don't want to be included? Tell the photographer, or ask for removal at loudglobe.com/face-data."

8. Your choices

• Don't want Find Me? Don't tick the box. Don't want the people count? Switch it off in Settings. Nothing else in the app depends on either.
• Changed your mind? Remove your "me" confirmations in the app, or delete your account.
• In someone else's photos and don't want to be? Use the form below — you don't need an account. We'll hide or remove the photos (their face positions and cropped pictures go with them) and confirm when it's done.
• You can ask what we hold about you, ask us to delete it, or complain about how this was handled: theloudglobe@gmail.com. If we say no, you can ask us to review that decision by replying to the same address.

Ask to be removed

Residents of Washington, Nevada, Colorado, Connecticut and Texas

Some states treat pictures of faces, and data taken from them, as sensitive or "consumer health" data. Whatever your state: the categories we hold are listed in section 3, the only purpose is to let people find and manage their own event photos, we collect it only from uploads and from your own use of the app, we do not sell it, and we share it with no one except the hosting providers that store photos for us. You can withdraw consent, get a copy, or have it deleted by writing to the address above; we will answer within 45 days.