Facebop privacy policy

Camera and expression processing

The front camera captures your four reference poses, calibrates expression matching and controls the game. Processing runs on your device using Apple ARKit face tracking on compatible devices, including devices with a TrueDepth camera, or the app's Apple Vision camera path.

The ARKit path reads 28 facial-expression coefficients describing jaw opening; mouth smiles, pucker, funnel, sideways movement, pressing, stretching and upper/lower lip movement; eye blinks, widening and squinting; inner/outer eyebrow raising and eyebrow lowering; cheek puffing; and tongue extension. The coefficient names are: jawOpen, mouthSmileLeft, mouthSmileRight, mouthPucker, mouthFunnel, mouthLeft, mouthRight, eyeBlinkLeft, eyeBlinkRight, eyeWideLeft, eyeWideRight, browInnerUp, browDownLeft, browDownRight, cheekPuff, mouthPressLeft, mouthPressRight, mouthStretchLeft, mouthStretchRight, mouthUpperUpLeft, mouthUpperUpRight, mouthLowerDownLeft, mouthLowerDownRight, browOuterUpLeft, browOuterUpRight, eyeSquintLeft, eyeSquintRight and tongueOut.

The app also reads the face's position relative to the camera, tracking status, ambient lighting, camera images and frame timestamps. These help check that one face is centered, at a usable distance and trackable. The app does not read or save raw depth maps, the ARKit face mesh, eye transforms or look-at vectors in this game path. ARKit's internal sensor processing is managed by iOS.

The Vision path uses mouth, eye and eyebrow landmarks to calculate six expression features: mouth width, mouth opening, left/right eye height and left/right eyebrow-to-eye distance. It also uses face bounds/orientation and image sharpness/quality checks. These are local expression controls, not identification against a database of people.

Measurements are used to calibrate a neutral expression and four distinct, repeatable poses; match your live expression to gameplay cues; provide feedback; score timing and HOLD performance; and pause or recover when tracking is lost. Raw expression vectors, calibration samples and fitted pose templates stay in native process memory for calibration and play, including reuse across rounds. They are not written to the game's session files or uploaded to the publisher, Game Center or an analytics service. Starting a new pose set resets the main calibration state; releasing the native game view releases its in-memory state. This is not a promise of immediate secure memory erasure.

Temporary reference photographs, derived numeric gameplay records, replays and result exports are separate from those raw measurements/templates and are described below. The app does not automatically upload camera frames or these personal-media files to the publisher or a face-processing server. Copies you deliberately save, share or send to support are addressed in sections 04 and 08.

The app does not use face measurements or photographs for identity recognition, model training, advertising, attractiveness ratings or sale. There is no public photo feed or appearance voting.

Optional Game Center leaderboard

You can play the campaign without an app account or Game Center sign-in. You may choose to view Game Center leaderboards from the main menu. Submitting your eligible Overall Score requires clearing Level 1 on Easy, consent and Game Center authentication. The app explains the information used before you continue, and Apple handles sign-in.

If you join, the app submits your earned Overall Score and scoring-version context to Apple Game Center, associated with your Game Center player identity. Later earned scores can sync automatically while you remain signed in and have consented. The app retrieves leaderboard entries and displays Game Center nicknames and avatars, ranks and Overall Scores. Other Game Center players can see your nickname, avatar, rank and score on the global leaderboard. Downloaded profile avatars are separate from your calibration photographs.

Pose photographs, camera footage, raw facial measurements, fitted templates, local numeric recognition logs and replay files are not submitted to Game Center. XP, trophies and full local campaign details are not submitted as leaderboard data. Your Overall Score represents gameplay performance, not appearance.

The app stores a Game Center player identifier and score-sync state locally to associate the campaign with the correct account and avoid duplicate submissions. Apple operates Game Center and handles its information under Game Center & Privacy. Manage or sign out of Game Center in device Settings. Signing out stops new app score submissions while signed out; it does not delete scores already held by Apple. Deleting the app does not delete your Game Center account or existing scores.

Local progress and temporary files

Settings, consent choices, campaign progress, best scores, XP, unlocks, rewards and Game Center synchronization state are stored locally in app preferences and local storage. These persistent records are distinct from temporary face/session files. Resetting game settings is not a deletion control for your poses or campaign progress.

Reference photographs. The app writes four reference JPEG photographs in its iOS temporary directory, tmp/hoc-face-switch. They appear in calibration and as gameplay pose cards, and may supply a result-photo export or appear in a screen replay. Neutral calibration does not create a fifth reference photograph. A successful retake writes a replacement JPEG and attempts to remove the old one; starting a new pose set attempts to remove the previous reference files. Those removals are best effort and can fail.

Derived numeric records. At each completed round, the app attempts to write a temporary JSON record, even when video replay is Off. It includes capture/receipt timestamps; a recognized pose number or no recognized pose; best and second-best match confidence; tracking, accepted and neutral flags; hit cue/pose, timing offset, grade, points and failure reason; replay events; and chart, level, difficulty, scoring-version, outcome, adaptation and latency/calibration information. These are decisions derived from expression processing. They contain no raw facial coefficient vectors, fitted templates or image pixels. Their purpose is gameplay reconstruction, scoring and timing diagnostics.

Replay files. Completed MP4 replays use the same native temporary directory. At completed-round settlement, cleanup keeps the current numeric record and the last successfully encoded video. A newer successful recording replaces the older video. An older video can remain if a later recording is disabled or fails; turning replay Off stops new video recordings rather than erasing an existing video or disabling numeric round records.

Native-session cleanup. When the native game view is released, the app attempts to remove its tracked temporary reference photographs and round files. If process termination prevents cleanup, the first Face Switch native game view created in a new app process attempts to remove abandoned files from that native temporary directory. Pausing, backgrounding, choosing another song or reusing poses does not itself erase the reference photographs or calibration state. There is no fixed hourly or daily deletion timer.

Result-photo cache. Result-photo exports are generated under Library/Caches/hot-or-chopped/sessions. Outputs tracked by the current screen are scheduled for deletion when a new round starts or that screen unmounts. Interrupted processing or file-removal failures can leave cache artifacts. The current implementation does not have a fixed expiration period or startup sweep for all result-photo cache files; untracked artifacts may remain until iOS removes them or the app is deleted.

Cleanup is best effort. Operating-system restrictions, interrupted operations and file-removal failures can delay or prevent a particular removal. Temporary storage is not a permanent archive, and cleanup is not a guarantee of immediate secure erasure. Upgrading the app is not a deletion control: older local app data, cached media or metadata from earlier versions can remain, and current-session cleanup does not guarantee that all such data has been purged.

Backups and app removal. iOS normally excludes temporary and Caches directories from iCloud and computer-device backups. The app does not set an additional explicit backup-exclusion flag on these face/session files and has no CloudKit/iCloud-container uploader for them. Persistent preference/storage data may be included in device backups. Data left by earlier versions can have different storage and backup eligibility. Actual backup contents depend on iOS, dependencies and backup settings; the app does not guarantee that all app data or user-created copies are excluded.

Deleting the app removes its local app container; offloading can preserve app data. Neither temporary-file cleanup nor app deletion removes existing backups, Photos copies, shared copies, support email attachments or Apple-held Game Center records. Manage those separate copies through the relevant service or device controls.

Optional recording, saving and sharing

Save gameplay replay is On by default in the updated app. Before the first recording, the app explains what is captured and requires confirmation. You can turn replay Off before continuing or later in Game Settings. Confirmed Off choices are preserved when settings load; earlier versions may have different defaults. Reset Game Settings restores replay On and preserves prior privacy/recording acknowledgements. It does not require a new first-recording acknowledgement if you already supplied it. iOS may separately request screen-recording permission.

A replay records the game screen and game audio locally, including visible pose cards. The live-camera panel is included only when Include live camera in replay is enabled; that setting defaults On. Turning it Off does not remove the reference photographs already visible as gameplay cards. The same front camera supplies expression matching and the optional replay panel. The microphone stays Off. The former separate photo-verdict/reaction-camera routes do not create a new recording in the current game flow.

Recording does not automatically publish a video or save it to Photos. Choose Save to add a supported result photograph or replay to Photos after permission, or Share to open the iOS share sheet. An export can visibly contain your face and gameplay score. The destination you select receives that copy and handles it under its own terms and privacy policy.

You control copies saved to Photos or shared elsewhere. Photos copies may synchronize through iCloud Photos according to your settings. Selected sharing services or recipients can store or transmit their copies. The app cannot delete those copies by removing its temporary files. Review a photo or video before saving or sharing it.

Permissions and choices

Camera access is requested for setting up and playing with your own poses. The former public cast demo is not available in this release. Change camera and Photos permissions in iOS Settings. The active game requests permission to add exports to Photos; it does not need to read your photo library for face-controlled play. Changing permission does not delete items already saved.

You can turn gameplay replay Off and decline the optional leaderboard. Hiding the live-camera preview does not stop expression tracking; excluding the live-camera replay panel does not remove pose-card photographs. Prefer expression tracking is a provider preference, not a guaranteed way to disable ARKit/TrueDepth: compatible devices may still use ARKit when it is Off. To avoid camera-based play, deny camera permission in iOS Settings; face-controlled play requires camera access.

Capturing new poses replaces the active pose set as explained above. Reset Game Settings restores controls and timing, including replay On; it preserves progress, poses and saved privacy/recording acknowledgements. The current game does not offer a dedicated Delete Replay or Delete Temporary Files control. See data and deletion for the controls that are available and their limits.

Advertising, analytics and other services

Facebop includes Google Mobile Ads (AdMob) 12.14.0 and Google User Messaging Platform (UMP) 3.1.0. These services can process network information such as IP-derived approximate location, device or app identifiers, advertising data, product interactions and diagnostics. Non-personalized ads do not mean that no data is collected. There is no publisher-operated remote analytics, face-processing or face-storage service. The publisher does not sell photo data or use it to train models.

The bundled Google Mobile Ads privacy manifest declares Coarse Location, Device ID, Advertising Data and Product Interaction as linked to identity, and Crash Data, Performance Data and Other Diagnostic Data as unlinked. Its declared purposes include third-party advertising, developer advertising and analytics; Device ID also has a declared tracking capability. UMP declares unlinked Coarse Location, Product Interaction and Performance Data for app functionality. These declarations describe SDK practices and capabilities, not a network audit proving every field is sent on every request. The app does not supply camera images, facial measurements, pose photographs, replays or gameplay scores to the advertising SDK.

The app does not automatically request UMP or ads while the advertising age choice is unknown or under 16. Players who choose 16 or older are eligible for the advertising flow, including players aged 16–17. No date of birth is requested. For eligible players, a successful UMP refresh is required on each launch, and ads may load only when Google reports that ads can be requested and Apple entitlement checks confirm that Remove Ads is not owned. Consent-refresh failures block advertising. The Remove Ads panel includes Ad privacy choices and the advertising age-choice control. Available privacy choices depend on Google’s service and region. The age choice is not verified age or parental consent.

Before the advertising SDK starts, publisher personalization and publisher first-party ID are disabled; requests use non-personalized ads and a maximum G creative rating. The app does not directly request App Tracking Transparency permission. These settings are not a claim that Google receives no identifiers or diagnostics, that all SDK data is unlinked, or that every delivered ad is suitable for every player.

Automatic interstitial ads are scheduled at round boundaries after three distinct completed rounds, then after three more completed rounds with at least 120 seconds between impressions. An unavailable ad is skipped. Ads do not interrupt active gameplay. Production ad units are configured in build 205; this policy does not claim that live ad delivery has been demonstrated.

The configured Remove Ads product, com.hotchopped.app.removeads, is a one-time, non-consumable Apple purchase with a United States price of US$3.99. Buying is enabled in build 205 for eligible players. Apple’s purchase sheet shows the current regional price before confirmation. The implementation checks verified Apple ownership to suppress automatic ads and offers Restore Purchases through Apple. Remove Ads gives no gameplay advantage. This description does not announce a live sale or claim that the purchase flow has completed release testing. Apple handles payment; the app does not receive full payment-card details. Use the same Apple Account to restore a purchase. A refund or revocation can end its entitlement.

Google handles SDK information under its privacy policy and SDK data-disclosure guidance. Advertising, privacy messaging, measurement and related diagnostics are separate from local face matching. Changing an available privacy choice or deleting the app does not erase records already held by Google or Apple. Provider records follow their applicable retention policies and rights processes; the publisher does not set a single retention period for independently controlled records. To stop future app requests, stop using or remove the app.

The app keeps local numeric performance/timing diagnostics, separate from face-image or raw-vector storage. Local intro-performance history keeps the latest 60 numeric windows; iOS performance signposts describe timing, rendering and device conditions. There is no publisher upload service for these diagnostics in the current implementation. Apple may process App Store, TestFlight, device diagnostics and Game Center information under Apple's policies and your settings.

Google advertising and privacy services, Apple services, Photos/iCloud, device backups, email providers and destinations you choose for sharing are separate from local face matching. They control their own storage, synchronization and retention. The app does not select their physical storage country or region, and there is no single third-party storage location applicable to every player's choices. Opening the public privacy/support website also uses your browser and the website's separate privacy policy; no face payload is attached to the app's privacy-policy link.

Age and consent

The app is not directed to children under 13. Players must confirm that they are 13 or older and use their own face or a person who agrees to take part. The App Store age rating is separate from this in-app consent requirement.

Contact and updates

For privacy questions or requests, contact Justice James Peace at viral4offical@gmail.com. Support emails and attachments are processed by our email provider to respond, troubleshoot, prevent abuse and meet legal obligations. They are retained while reasonably needed, then deleted or de-identified. You may request access, correction or deletion at the same address. Please avoid sending private pose photographs or recordings unless you deliberately choose to include them.

The publisher has no remote access through the app to retrieve raw face templates or local recordings from your device. A support attachment you deliberately send creates a separate email copy; deleting a local app file does not delete it. The publisher cannot erase copies held independently in your Photos, backups, Game Center or selected sharing services through app-session cleanup.

We update this policy and its effective date when these practices change.