Privacy

Draft, pending legal review. Last updated 12 November 2026.

What is saved

• Your account: your email address and a hashed password.
• Your Dropbox connection, encrypted.
• Details of the photos in the folders you choose (not the photos themselves), and a temporary copy of each photo for 7 days.
• The faces found: small face images and face templates (numbers that describe a face). Face templates are biometric data, which is why we ask for your consent.
• The names you give people, and feedback you send.
• The country you live in (and the state, in the USA), to check that we can offer PeopleTag there.
• Whether you use PeopleTag on a phone, a tablet or a computer, per day - to know which screens to improve. Only that word is kept, not details about your browser or device.
• Your credit balance and its history (purchases, refunds, credits used per sync).
• To give the 1,000 free photos only once per Dropbox account: a code derived from your Dropbox account id with a secret key. It can't be turned back into the id, and it is kept for 3 years, also after you delete your account.

In your Dropbox, PeopleTag only adds name tags. It never deletes, moves or changes your files. Name tags are visible to everyone a folder is shared with - choose shared folders with that in mind.

Where, and who it's saved with

Only you can see your photos and faces. Every account is separate.

Faces are found and compared by open face recognition models that run on the servers listed below. Your photos and faces are never sent to an AI company or a chatbot, and are never used to train any AI model - ours or anyone else's.

• Contabo (Germany, EU): the server where everything above is saved.
• Scaleway (France, EU): finds the faces in large syncs. Nothing is kept there.
• Scaleway (France, EU): encrypted backups.
• one.com (Denmark, EU): sends the app's emails.
• Paddle (United Kingdom - adequate protection under EU rules): handles payments as the seller. Paddle collects your name, email, address and payment details under its own privacy policy. We receive only the order number, the pack and the amount, never your card details. The payment page loads Paddle's script, which can set cookies and send error reports; this happens only on that page.
• Telegram: error alerts to the operator, with your account number only.

How long it's kept

• Until you delete it or delete your account. Records of photos removed from Dropbox are deleted after 30 days.
• Which kind of device you used: 90 days.
• If you don't use your account for 2 years, we email you twice and then delete it, as if you had deleted it yourself. Logging in is enough to keep it.
• Backups are kept for 14 days, so deleted data can remain there until then.
• Your credit history is deleted with your account. Paddle keeps the payment records the law requires.
• Deleting your account deletes everything here and revokes this app's access to Dropbox. Your photos in Dropbox are not affected.
• The record of your consent - when you accepted the terms and agreed to face detection, which version, and from which IP address - is kept for 3 years after you delete your account, as proof of your consent. Deleting your account counts as withdrawing your consent to face detection.

People in your photos

They haven't signed up for PeopleTag. You can remove any face, or use Forget this person to delete all of a person's data.

If you live in Brazil

• Brazil's data protection law (LGPD) applies as well. We collect your data directly from you, from the EU; it isn't transferred to us by anyone in Brazil.
• Your rights: to know whether we process your data, to see it, to correct it, to have it anonymised, blocked or deleted, to take it with you, to know who we share it with, and to withdraw your consent. Most of this you can do yourself in the app; for the rest, email us.
• Our contact for data protection (encarregado): Umbhau, faces@umbhau.dk.
• You can also complain to the ANPD, Brazil's data protection authority (gov.br/anpd).

Contact

Email faces@umbhau.dk.