Consumer Health Data Privacy Policy
Last updated: October 14, 2026
Washington’s My Health My Data Act treats images of a face, and data derived from them, as consumer health data, even outside any health context. This policy explains how handles that data. It applies to Washington residents and to anyone whose data we process in Washington.
What we collect
- The selfies you upload.
- The face data derived from them: face measurements from our photo checks, and face embeddings used to check that your headshots resemble you.
- The headshots and edits we generate from your selfies.
Where it comes from
Directly from you, when you upload your selfies, and from our own server, which derives the face data from them.
Why we collect and use it
Only to provide the headshots you ordered: to check your photos, generate your headshots and check that they look like you, apply the edits you order and show them in your private gallery. Our Biometric Data Notice sets out each use and when we delete each item.
Who we share it with
- Processors that generate the images: fal.ai, which runs the image models of OpenAI and Google for us. We share your photos with them only with your separate consent, the fourth box you tick before uploading.
- Our hosting provider, which supplies the server where your files are stored.
- Authorities, only when the law requires it.
We have no affiliates that receive this data.
We never sell it
We never sell consumer health data, and we will never ask you to authorize a sale.
Your rights
- To confirm whether we collect, share or sell your consumer health data, and to get a copy of it.
- To get a list of every third party and affiliate we shared it with, with their contact details.
- To withdraw your consent.
- To have it deleted. fal.ai never stores your selfies, and the images it returns expire from its servers 1 hour after they are made.
How to use your rights
Email from the address you used with us. You can also delete all your photos yourself with the “Delete all my photos now” button in your gallery. We answer within 45 days. If we need more time, we tell you within those 45 days and take at most 45 more. Requests are free.
If we decline your request, you can appeal by replying to our answer. We decide appeals within 45 days and tell you why. If we deny your appeal, you can contact the Washington State Attorney General.