Privacy Policy for Classface

Last updated: September 12, 2026

1. Introduction

Classface ("we", "our", or "the App") is a classroom attendance and roll-call tool. This Privacy Policy explains what information Classface collects, how it is used, and the choices you have. By using Classface, you agree to the practices described in this policy.

Classface is designed to help teachers and administrators manage class rosters and record attendance. The App processes student profile photos and class photos locally on the device. We built Classface with privacy as a core principle: all data you create or import remains on your device.

2. Information We Collect

Classface collects and stores the following information, all of which is stored locally on your device:

Class and roster data — class names, course section identifiers, and student names and IDs that you enter or import.
Student profile photos — images you provide for each student.
Roll-call photos — class/group photos you take or import to record attendance.
Face data — derived from the photos above, as described in Section 3.

Classface does not collect, transmit, or store any of this information on remote servers.

3. Face Data

Classface uses face data solely to identify individuals within class photos for the purpose of taking attendance. This section describes our face-data practices in full.

3.1 Face Data We Collect

When you provide a student profile photo or a roll-call photo, Classface performs face detection and recognition entirely on the device. Specifically, the App collects:

Face bounding boxes — the location of each detected face within a photo (detected using Apple's on-device Vision framework).
Face embeddings — a 512-dimensional numerical vector generated from each detected face by an on-device AuraFace face-recognition model. An embedding is a mathematical representation of a face used to compare faces for matching; it is not a photograph.
Recognition results — the association between a detected face and a student in the roster, stored as a student identifier.

3.2 How We Use Face Data

Face data is used for a single purpose: to match faces in roll-call photos to student profile photos so the App can determine who is present. This matching happens locally, using cosine-similarity comparison of face embeddings, and you may also manually identify a face at any time.

We do not use face data for advertising, profiling, authentication, or any purpose other than attendance within the App.

3.3 Face Data Storage

All face data — face bounding boxes, face embeddings, and recognition results — is stored locally on your device in the App's private storage area (the App's local SwiftData database). The source photos themselves are stored locally in the App's Documents directory. No face data is uploaded to, stored on, or backed up to any server we operate.

3.5 Face Data Retention

Face data is retained only as long as you keep the associated records (the student, course section, roll-call session, or photo). There is no automatic expiry period; retention is entirely under your control. When you delete a record, its associated face data is deleted as described in Section 3.6.

3.6 Face Data Deletion

You can delete face data at any time by deleting the associated student, course section, roll-call session, or photo within the App. When you do so, the App removes both the database record (including any face bounding boxes, embeddings, and recognition results) and the corresponding photo file from the device. The App also automatically removes orphaned photo files that are no longer referenced by any record.

To delete all data, delete all classes, students, and sessions in the App, or uninstall the App.

4. Data Storage and Security

All Classface data is stored locally on your device. We do not operate servers that receive or store your data. Because data never leaves your device, the security of your data is governed by the security of your device (for example, your device passcode, Face ID/Touch ID lock, and iOS data protection).

5. Third-Party Services and Disclosure

Classface does not integrate third-party analytics, advertising, cloud storage, or tracking services. The App's face detection and recognition run entirely on-device using Apple's built-in frameworks and a bundled on-device machine-learning model. We do not disclose any personal information, including face data, to third parties, except where required by law.

6. Data Retention and Deletion (General)

In addition to the face-data retention and deletion terms in Section 3, all other data (class/roster data and photos) is likewise stored only locally and retained only until you delete it. Uninstalling the App removes the App and its locally stored data from your device.

7. Children's Privacy

Classface is a tool intended for use by teachers and administrators. Student information managed in the App is provided by the educator or administrator and is stored only on their device. We do not knowingly collect personal information from children directly.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

[email protected]