Privacy Policy
Last updated: 20 August 2026
ID Photo ("the Service") is operated by Hugo Software and runs at idphoto.bnj.app. This policy explains exactly what happens to your data. The short version: your photo never leaves your device.
1. Your photo is never uploaded
When you choose a photo, it is opened by your browser and processed on your own device. Face measurement and background segmentation run as WebAssembly models that your browser downloads from our server and executes locally.
- Your photo is not transmitted to us or to anyone else.
- It is not stored on any server, and it is not used to train anything.
- Our backend has no endpoint that accepts an image. There is nowhere for a photo to go.
- Downloads (single photo, print sheet, report) are generated in your browser and saved by your browser.
If you close the tab, the photo is gone from memory. Nothing about it is kept.
2. What we do store
Only what is needed to run a paid subscription:
| Data | Why |
|---|---|
Licence code (BNJ-XXXXXXXX) |
Identifies your subscription without an account |
| Stripe customer ID, subscription status, plan, price ID, period end | To know whether the subscription is active |
| Timestamps and the app scope the licence covers | Bookkeeping across our apps |
We deliberately do not store your email address. There is no account, no password and no sign-up. Your licence code is the only identifier, and you can move it to another device by typing it in.
3. Payments
Payments are processed by Stripe. Card details are entered on Stripe's own checkout page and are never seen, handled or stored by us. Stripe processes your payment data as an independent controller under its own privacy policy (stripe.com/privacy).
4. Storage in your browser
We use localStorage for three things: your licence code, your language choice and your light/dark preference. No advertising cookies, no third-party trackers.
5. Analytics
We use Umami, self-hosted on our own server, to count page views. It is cookieless, collects no personal data and never sees your photo or your licence code.
6. Third parties
Stripe (payments, paying users only) and our own Umami instance. That is the complete list. No advertising SDKs, no data brokers, no analytics resellers.
7. Your rights
Because we hold no personal profile, there is little to access or delete. You can:
- Cancel any time through the Stripe customer portal.
- Remove your local data by clearing your browser storage for this site.
- Ask us to delete your licence record by emailing the address below. Note that this ends access to any active subscription.
Under the GDPR/KVKK you may also request access, rectification, restriction or portability of the limited data above.
8. Children
The Service is not directed at children under 13 and we do not knowingly collect data from them.
9. Changes
If this policy changes we update the date at the top of this page.
10. Contact
Hugo Software — [email protected]