Effective date: 2026-10-26. Android package: com.heritageface.scanner.
Who operates the app
Fablewood Studio operates AI Ethnicity: Face Scanner (the App). For privacy questions or a data request, contact quicklysearch.bot@gmail.com.
The App creates fictional heritage stories and artistic AI images for entertainment. Its ethnicity percentages, appearance descriptions and partner profiles are generated content, not verified facts about you, DNA results or medical findings.
Photos, information you enter and generated results
When you select a photo and continue with AI analysis, the App sends a compressed copy through our processing server to an AI provider. It also sends the first name and birthplace you provide, an age group and the selected onboarding answers. AI requests use an age group rather than your exact birth date. You can skip the name and birthplace questions. A photo is required for the core face-analysis feature.
Name analysis sends the first name and surname you choose, optional birthplace and relevant generated heritage information. Partner stories and historical portraits also use information from the generated report, including its fictional ethnicity, appearance and gender descriptions. Portrait generation uses text prompts; the current portrait requests do not include your original selfie.
Results and selected photos are saved in the App's private storage so you can return to them. The history normally keeps up to 20 reports. Generated heritage is sent for further processing when you request related AI features; it is not confined to local storage in those cases.
Services that process data
- Our proxy runs on Vercel. It forwards AI requests. Our own quota database on Neon records installation identifiers, IP addresses, request dates, routes and counters to limit abuse and costs. That quota database is not used to store selfies or report content.
- OpenAI processes photo analysis and text requests, and can generate portraits as a fallback. Anthropic is a fallback route for photo analysis when available.
- fal.ai processes portrait text through a Google image model and hosts generated image files for download.
- Mixpanel processes usage events and pseudonymous profiles in its EU project. Events describe navigation, selected options, feature use, success/failure, timing and subscription status. They use a persistent identifier. Our analytics events do not attach your selfie or the name/birthplace text you entered. IP-based approximate location and standard app/device properties may be added by the SDK/service. These records are pseudonymous, not anonymous.
- Adapty and Google Play process subscription status, product and transaction information, purchase history and identifiers used to validate or restore access. The Mixpanel identifier is passed to Adapty as an integration identifier. Automatic server-to-server forwarding from Adapty to Mixpanel is currently inactive; the App sends its own events to Mixpanel directly. We do not receive your full payment-card details. Advertising-ID collection is explicitly disabled in our Adapty configuration; other app, installation and service identifiers remain in use.
- Firebase Crashlytics, Installations and Sessions process crash/nonfatal information, app/device metadata, session information and installation identifiers to diagnose stability problems. The App does not explicitly attach your photo or profile text to crash reports. Firebase Analytics is not included.
Analytics and diagnostics start when the App starts, before the separate AI-photo consent. That AI consent controls photo processing; it is not a switch for all SDK collection. The App does not display ads or include Facebook's SDK.
Retention
App-private reports and photos remain until replaced by the history limit, removed through Reset All Data, or removed with the App. Temporary files can remain until reset, system cache cleanup or uninstall. Originals in your photo library and copies you export are separate.
Our proxy code forwards AI content without intentionally writing it to a permanent content store. This does not mean providers erase all inputs and outputs immediately. Their API processing, safety logs, generated-media hosting, legal exceptions and account settings have their own retention rules. OpenAI and Anthropic publish API retention information; fal hosts generated files under its media-retention terms. We do not promise Zero Data Retention.
Quota records are periodically pruned for abuse prevention. The current cleanup does not establish a guaranteed seven-day maximum. Hosting/security logs and backups can have separate retention. Mixpanel and Adapty records remain subject to their service settings and deletion processes. Firebase publishes retention for Crashlytics diagnostics and identifiers.
Reset, uninstall and deletion requests
Reset All Data removes the local profile, reports, private photo/portrait files, prepared share PDFs and AI-photo consent. It does not cancel a subscription, erase provider-side analytics or purchase records, reset the installation identifier or its abuse/trial counters, or delete files already saved to your gallery or another app.
Uninstalling removes the App's private local data through Android. It does not cancel Google Play billing or delete remote service records. You manage subscriptions through Google Play.
You may request information, correction or deletion by emailing the address above. Because many records use pseudonymous service or installation identifiers rather than an email account, we may need limited information to locate and verify the relevant records. Do not send passwords, card details or an unsolicited selfie. Some records may need to be retained for security, transaction, legal or dispute-handling reasons. A local reset is not a remote deletion request.
Permissions, security and transfers
The App uses Android's photo picker and system camera so you choose which photo to provide. It does not request broad camera or photo-library access for those actions. Saving images on older Android versions can require storage permission. The App does not request precise GPS location.
Connections to our server and service endpoints use HTTPS. Access to service systems is restricted. No storage or transmission method can guarantee absolute security. Data may be processed outside your country by the providers and their subprocessors; using a Mixpanel EU project does not mean all AI, billing and diagnostic processing takes place in the EU.
If you export a report or image, the recipient you choose handles its copy under its own practices. Resetting the App cannot recall that copy.
Children, rights and updates
The App is not designed for children under 13. Do not submit another person's image or information without the necessary permission. Applicable rights, including access, correction, deletion or objection to processing, depend on your location; contact us to make a request.
We will update this policy when our practices change. The published policy will show its effective date.
Provider information
OpenAI API data controls · Anthropic commercial retention · fal API terms · fal privacy · Mixpanel privacy · Adapty privacy · Firebase privacy · Google privacy