Privacy Policy

Effective date: July 2026 — faces-h open-source project

What faces-h does

faces-h is a local Windows desktop application that organises your personal photo library using on-device face recognition. All processing happens inside your computer. No data — photos, face embeddings, names, or anything else — leaves your machine.

Data we do not collect

• Photos or thumbnails
• Face recognition data or embeddings
• Names or identity information you enter
• File paths or folder structure
• Usage analytics or telemetry
• Crash reports
• Device identifiers or IP addresses

Network access

faces-h makes two outbound network requests — both optional:

• Face recognition model download — on first launch, the InsightFace buffalo_l model (~300 MB) is downloaded from a public model repository. After that, no further downloads occur.
• Network share scanning — if you add a UNC path (\\server\share), the app reads photo files from that share using your existing Windows credentials. No data is sent to any third-party server.

The app never contacts any analytics, advertising, or tracking service.

Local storage

All data created by faces-h (face embeddings, cluster assignments, names you enter) is stored in a SQLite database at %APPDATA%\faces-h\ on your computer. You can delete this folder at any time to remove all app data.

Code signing

The Windows installer is code-signed. The certificate is provided by SignPath Foundation under their free OSS programme. SignPath receives only the compiled installer binary for signing; they do not receive any user data.

Open source

faces-h is fully open source under the MIT licence. You can audit every line of code at github.com/justminime/faces-h.

Contact

Questions about this policy? Open an issue on GitHub.