Your face stays on your laptop. Here’s everything else.

Effective 6 October 2026

Who we are

FaceLock and facelock.io are run by HONCO PRIVATE LIMITED, a company registered in India (“we”, “us”). We decide how the data below is used. Contact us about anything in this policy at [email protected].

The FaceLock app

FaceLock does its work on your laptop. The following data is created and used only on your device and is never sent to us or anyone else:

• Camera images. Frames are analysed in memory to recognise your face and are never written to disk. The one exception is the optional intruder photo: if you turn it on, a frame is saved, encrypted, after two failed unlock attempts, together with the time and the method that was tried.
• Your face template: a numerical description of your face made at enrolment, stored encrypted with your vault key.
• Your PIN, stored only as an Argon2id hash.
• Your vault key, kept in your operating system’s keychain, and your recovery key, which is shown to you once and not stored by us anywhere.
• Your settings and the list of apps, files, folders and photos you lock.

The app contains no analytics, advertising or crash-reporting code. Its face-recognition models are bundled inside it, so recognising your face needs no network connection.

Trials and licences

To start your free trial, activate a licence, and refresh it from time to time while you’re online, the app contacts facelock.io. It sends:

• your licence key (once you have one);
• a device ID: a salted, one-way hash of your operating system’s machine identifier, so one trial and one licence map to one laptop without us learning the identifier itself;
• your laptop’s computer name (its hostname, as set in your system settings) and its operating system, so you can tell your laptops apart when you move a licence;
• the technical details any internet request carries, such as your IP address.

Our server returns a signed licence that the app checks offline. On our side we store the licence key, the device ID, laptop name and operating system, the plan, the issue and expiry dates, and the dates of any moves. For a trial we store the device ID, laptop name, operating system and trial dates, so each laptop gets one trial. We use this only to provide and enforce trials and licences, including the limit on moving a licence between laptops, and to prevent abuse.

Buying a licence

When you buy or renew, you give us your name, email address and mobile number. The payment gateway requires the mobile number, so we pass it to Easebuzz with the payment and keep it with the order. We use these details to issue your licence, email you a receipt with your key, and keep the records Indian tax and company law requires. We also store the order: licence key, amount, date, payment status and the payment references.

Payment is handled by our payment partner, Easebuzz. You enter your card, UPI or bank details on their payment page, not ours, so we never see or store them. Easebuzz processes your data under its own privacy policy and the rules that apply to payment companies in India.

We won’t send you marketing email unless you ask for it.

This website

• No cookies, no analytics, no tracking pixels. The site doesn’t use local storage to track you either.
• No third-party content. Fonts, images and scripts are served from facelock.io itself.
• Server logs. Like any web server, ours records requests (IP address, time, page requested, browser user agent, and the referring page if your browser sends one). We use these logs only to keep the site running and secure, and we delete them after a short period.
• Cloudflare carries traffic between you and our server. It processes the same request data to deliver the site and protect it from attacks.
• “Email me the link” opens your own email app with a pre-written message. Nothing is sent to us.
• The buy and renew forms send what you type only to our own server at facelock.io, which passes the payment to Easebuzz as described above. Your licence key may appear in the address of the confirmation page, so treat that page like the key itself.

Emailing us

If you write to [email protected], we keep the conversation so we can help you and refer back to it later.

Who else sees data

We share personal data only with the service providers that make FaceLock work, and only as much as they need:

• Easebuzz, for payments;
• Cloudflare, for delivering this website and the licence service;
• our hosting and email providers, who store data on our behalf.

We will disclose data if Indian law or a valid legal order requires it. We never sell personal data or share it for advertising. These providers, and our servers, may process data outside your country; where they do, we rely on their contractual and legal safeguards.

How long we keep it

• Licence and device records: while the licence is active, and for up to two years after it expires, so a renewal or a move can pick up where it left off. You can ask us to delete them sooner.
• Trial records: kept so that each laptop gets one trial. You can ask us to delete yours.
• Order and billing records: for as long as Indian tax and company law requires, typically eight years.
• Server logs: a short period for security and troubleshooting, then deleted.
• Emails: as long as needed to help you, then deleted.

Data on your laptop stays until you delete it or uninstall FaceLock. Locked files stay encrypted until you unlock them.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, and, where they apply to you, laws such as the EU and UK GDPR, you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct or update it;
• delete it, unless we have to keep it by law (billing records, for example);
• stop a particular use of it, or withdraw consent you gave;
• nominate someone to act for you, as the DPDP Act allows.

Email [email protected] from the address you bought with, or include your licence key, so we can confirm it’s you. We aim to respond within 30 days. If you aren’t satisfied, you can complain to the Data Protection Board of India or to your local data protection authority.

We use your data because you asked for a trial, a licence or a purchase (to perform that contract), because the law requires certain records, and, for security logs, because keeping the service safe is a legitimate interest.

Children

FaceLock isn’t aimed at children. Purchases must be made by an adult (18 or over), and we don’t knowingly collect data from children.

Changes

If we change this policy, we’ll update this page and the effective date above. If a change affects what the app sends, we’ll describe it here before the app version that makes the change ships.