What stays on the device
The skin micro-texture measurement — the signal that catches smoothing an AI model misses — runs in the browser. Pixels used for it never leave the device.
What is sent, and for how long
- The photo is sent once for classification and removed from the processing cache after analysis.
- No face embeddings or biometric templates are created for matching or stored.
- Scan history with thumbnails exists only if the user turns it on, and expires after 30 days.
Why this matters for regulated teams
Under GDPR Art. 9, biometric data used to identify a person is a special category. TrueFace does not identify anyone; it reports manipulation signals. Your legal team should still assess your own use case.
Method details: technical whitepaper.