Privacy

Short version: your webcam frames, face and hand detection, and face-touch history stay on your computer. The app contacts our services to manage trials and licenses, fetch update notices, and report coarse usage totals. If you buy, we receive your email address and payment identifiers from Paddle so we can deliver and support your license. If you choose to send feedback, we receive the message and optional details you submit. The details are below.

Your camera and your habit data

• The webcam feed is read through the local OS APIs and processed on your computer. Frames are never uploaded, stored, or sent anywhere.
• The face- and hand-detection models (Apple Vision on Mac, or MediaPipe) run on-device. They do not contact any server.
• Touch events are appended as one JSON line per event to ~/.no_touch_face/events.jsonl on macOS or the equivalent on Windows. Read it, edit it, delete it freely. It never leaves your machine.

The trial and license check

On first launch the app generates a random install ID and sends it to our license server to start your free trial. After that, the app periodically asks the same server whether your trial or license is still valid. This request carries the install ID (and your license key, once you have one) — no name, no email, no hardware fingerprint, nothing derived from the camera.

• The license server stores: the install ID, trial dates, license status, and — after a purchase — your license key, email address, and Paddle's customer and transaction IDs.
• The install ID is random. On its own it identifies a copy of the app, not a person.
• The server runs on Vercel with a Neon Postgres database; like nearly every web service, the hosting layer keeps standard short-lived request logs (IP addresses, timestamps).

If you buy a license

• Checkout is handled by Paddle, our merchant of record. Your card or payment details go to Paddle and never touch our servers.
• Paddle tells us your email address and transaction ID. We use the email to send your license key (delivered via Resend) and we keep it so we can look your key up if you lose it.
• Receipts, invoices, and payment records come from Paddle under Paddle's own terms.

Usage analytics

Each time it opens, the app makes one request to our license server that doubles as a usage ping. It carries the same random install ID used for licensing, the app version, your OS, and yesterday's usage as two coarse time ranges (app-open time and active time, reported as 0, under an hour, 1–4h, 4–8h, or 8h+). That is the complete list. We use it to count active installs and see which versions are in use. It never includes camera data, face-touch counts, timestamps of your activity, or anything typed into the app.

Update notices

The app fetches a small announcement feed from our server to show release notices and product news. This request does not include webcam frames or face-touch history.

Feedback you choose to send

The in-app feedback form sends your selected feedback type, message, optional reply email, and a random submission reference to our support inbox via Resend. If you check the option to include app details, it also sends your app version and operating system. Camera images, recordings, activity history, license keys, and install IDs are not attached. Closing the form keeps an unsent draft in memory until you quit the app; it is not saved to disk by the feedback form.

To limit spam, our database stores a secret-keyed hash of the request's IP address and an hourly attempt count. Entries older than a day are removed as new feedback arrives. Feedback content is held in our support mailbox and email provider, not the app database. You can contact us to request deletion of your feedback; include your reply email or enough information to identify the message.

This website

• We use Plausible Analytics, which is privacy-respecting (no cookies, no personal data, no IP storage). We use it to learn which landing pages convert.
• If you submit your email for the 30-day no-touch challenge, we store your email and which segment page you signed up from, and we email you the challenge. You can unsubscribe at any time.
• We do not sell your email. Service providers receive it for the purposes described on this page.

Affiliate referrals

We use FirstPromoter to credit partners who refer customers. Its website script records referral visits and uses cookies to remember the referring partner. When you complete checkout, we share your checkout email and Paddle customer ID with FirstPromoter. Paddle also sends transaction and refund notifications so commissions can be calculated and reversed. Camera images and face-touch history are not part of this tracking.

Optional install attribution

If you click a download CTA, the site stores a cookie noting which landing page you came from. The desktop app does not currently read this cookie; it exists for future opt-in install attribution. If/when that ships, it will be opt-in, clearly disclosed at first run, and easy to disable.

Deleting your data

• Habit data: delete ~/.no_touch_face/events.jsonl whenever you like. We never had a copy.
• License record and email: write to us and we will delete the row. Deleting it deactivates your license key.
• Challenge emails: every email has an unsubscribe link.

Contact

Questions: support@notouchface.com.