Privacy

Short version: the desktop app processes your webcam entirely on your computer. Nothing about your camera, your face, your hands, or your habits is uploaded anywhere, ever. There is no account. The only things that cross the network are a random install ID for the trial and license check, and — if you buy — the email address Paddle gives us so we can send your license key.

Your camera and your habit data

• The webcam feed is read through the local OS APIs and processed on your computer. Frames are never uploaded, stored, or sent anywhere.
• The face- and hand-detection models (MediaPipe) run on-device. They do not contact any server.
• Touch events are appended as one JSON line per event to ~/.no_touch_face/events.jsonl on macOS or the equivalent on Windows. Read it, edit it, delete it freely. It never leaves your machine.

The trial and license check

On first launch the app generates a random install ID and sends it to our license server to start your free trial. After that, the app periodically asks the same server whether your trial or license is still valid. This request carries the install ID (and your license key, once you have one) — no name, no email, no hardware fingerprint, nothing derived from the camera.

• The license server stores: the install ID, trial dates, license status, and — after a purchase — your license key, email address, and Paddle's customer and transaction IDs.
• The install ID is random. On its own it identifies a copy of the app, not a person.
• The server runs on Vercel with a Neon Postgres database; like nearly every web service, the hosting layer keeps standard short-lived request logs (IP addresses, timestamps).

If you buy a license

• Checkout is handled by Paddle, our merchant of record. Your card or payment details go to Paddle and never touch our servers.
• Paddle tells us your email address and transaction ID. We use the email to send your license key (delivered via Resend) and we keep it so we can look your key up if you lose it.
• Receipts, invoices, and payment records come from Paddle under Paddle's own terms.

Usage analytics

The desktop app currently sends no usage analytics. If we ever add anonymous usage statistics, we will describe exactly what is collected on this page and in the app before it ships — and it will never include camera data.

This website

• We use Plausible Analytics, which is privacy-respecting (no cookies, no personal data, no IP storage). We use it to learn which landing pages convert.
• If you submit your email for the 30-day no-touch challenge, we store your email and which segment page you signed up from, and we email you the challenge. You can unsubscribe at any time.
• We do not sell, share, or syndicate your email.

Optional install attribution

If you click a download CTA, the site stores a cookie noting which landing page you came from. The desktop app does not currently read this cookie; it exists for future opt-in install attribution. If/when that ships, it will be opt-in, clearly disclosed at first run, and easy to disable.

Deleting your data

• Habit data: delete ~/.no_touch_face/events.jsonl whenever you like. We never had a copy.
• License record and email: write to us and we will delete the row. Deleting it deactivates your license key.
• Challenge emails: every email has an unsubscribe link.

Contact

Questions: support@notouchface.com.