Privacy Policy

Ecavo AB (company number 559373-6597, Sweden) is the data controller for FaceCards. Questions or requests: facecards@ecavo.se.

Account: when you sign in with Google we receive your email address, name, and profile picture.

Gameplay: the rounds you play: which cards you answered, whether you were right, and how long you took. This powers your scores, streaks, XP, and replay of missed cards.

Your content: decks, cards, and photos you create or upload, and any reports or feedback you send (which you can send without an account).

Payments: if you subscribe to Pro, Stripe processes your payment. We never see your card number; we only store your subscription status.

Usage analytics: we use PostHog, hosted in the EU, to understand how the app is used (for example which screens are visited and features used). We do not use advertising networks and we do not sell your data.

You can play without signing in. Your results are then stored only in your own browser. If you later create an account, that local history is merged into it.

To provide the service you signed up for (contract), to improve the app and keep it safe, including handling reports (legitimate interest), to process payments and keep required records (contract and legal obligation), and with your consent where we ask for it.

Service providers who run FaceCards for us: Supabase (database, storage, and sign-in), Vercel (hosting), Google (sign-in), PostHog (EU-hosted analytics), and Stripe (payments). They process data on our instructions. Some providers may process data outside the EEA; where that happens, safeguards such as EU standard contractual clauses apply.

Users can build decks with photos of people, and curated decks use openly licensed photos with attribution. Uploaders are responsible for having the right to use the photos they add. If a photo of you appears on FaceCards and you want it removed, use the in-app report function or email us. We act on justified requests.

For as long as you have an account. Deleting your account from your profile page permanently removes your decks, history, and profile. Payment records are kept as long as bookkeeping law requires. Backups and logs are kept for a limited time.

You can ask for access to, correction of, or deletion of your data, object to or restrict processing, and take your data with you. Most of this you can do directly in the app; for anything else, email facecards@ecavo.se. You can also complain to the Swedish data protection authority (IMY, imy.se).

We use cookies that are necessary to keep you signed in, and analytics as described above. We do not use advertising cookies.

If we change this policy in a meaningful way, we will let you know in the app. The latest version always lives at facecards.app/privacy.