AuthEye Privacy Policy

Effective Date: May 7, 2026

AuthEye processes all data entirely on your device. No photos, face data, or personal information is ever transmitted, stored, or shared with anyone.

1. Overview

AuthEye ("the App") is a privacy-first deepfake detection application developed by Mathew Prasanth. The App uses on-device machine learning to analyse photos and determine whether faces in an image are real or AI-generated. This Privacy Policy explains our data practices in full.

2. Data We Do Not Collect

AuthEye does not collect, store, transmit, or share any of the following:

Photos or images selected or captured by the user
Face data, facial geometry, facial embeddings, or biometric identifiers
Personal identification information
Device identifiers or advertising identifiers
Location data
Usage analytics or behavioural data
Crash reports sent to third parties

3. Face Data — Complete Statement

Because AuthEye analyses faces in photos, Apple requires us to provide a complete statement about face data. The following applies in full:

What face data does the App collect?

AuthEye does not collect any face data. Face detection is performed entirely on-device using Google ML Kit. The detected face region is used only to identify the area of the image to analyse. No face images, facial geometry, facial embeddings, biometric data, or any derivative of face data is extracted, stored, or transmitted.

Is face data retained?

No. Face data is not retained. All face detection and analysis occurs in device memory during a single analysis session. When the analysis completes, all in-memory data is released. No face data persists to device storage, iCloud, or any external system. Retention time is zero — face data exists only for the milliseconds required to complete analysis.

Is face data shared with third parties?

No. Face data is never shared with any third party. AuthEye does not send face data or any image data to any server, API, cloud service, or AI service. There are no third parties that receive face data from AuthEye.

Does the App use a third-party AI service?

No. AuthEye uses a custom-trained EfficientNet-Lite0 model that runs entirely on-device via TensorFlow Lite. No photos or face data are sent to any external AI service, cloud API, or third-party machine learning platform. All inference is local.

Google ML Kit

AuthEye uses Google ML Kit for on-device face detection. Google ML Kit processes data entirely on the device and does not transmit face data to Google servers. For more information, see Google ML Kit Terms of Service.

4. Image Processing

When a user selects or captures a photo:

The image is loaded into device memory
Google ML Kit detects face locations on-device
The custom TFLite model analyses each detected face on-device
Results are displayed to the user
The image and all intermediate data are released from memory
Nothing is written to disk, transmitted, or retained

5. Permissions Requested

AuthEye requests the following device permissions:

Camera — to capture photos for analysis. Used only when the user explicitly taps the Camera button.
Photo Library — to select existing photos for analysis. Used only when the user explicitly taps the Gallery button.

These permissions are used solely to provide the app's core functionality. Images are never saved, modified, or transmitted. All processing is on-device.

6. Third-Party Services

AuthEye does not use:

Third-party analytics services (e.g. Firebase Analytics, Mixpanel, Amplitude)
Third-party advertising or tracking SDKs
Third-party AI or machine learning APIs
Cloud storage services
Crash reporting services that transmit data externally

The only third-party component used is Google ML Kit for on-device face detection, which processes all data locally and does not transmit data to Google servers.

7. Data Security

Since AuthEye does not collect, store, or transmit any user data, there is no data at risk of breach or unauthorised access. All processing occurs in isolated device memory and is released immediately after use.

8. Children's Privacy

AuthEye does not collect any data from users of any age. The App is safe for use by all age groups. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

This Privacy Policy may be updated from time to time. Any changes will be posted on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions or concerns about this Privacy Policy, please contact:

Mathew Prasanth
📧 mathewprasanth9@gmail.com