Whodis — Privacy Policy
This policy explains what Whodis does, what information it processes, who it is shared with, where it is stored, and how long it is kept. Whodis is a reverse-face image search tool. It does not identify people and does not return names, handles, or any personal-identity information — it returns links to public web pages where a visually similar face appears.
1. Who we are and scope
Whodis is operated by HIGGS MCHJ ("Higgs", "we", "us", "our"), a company registered in Uzbekistan. Higgs is the data controller for the information described in this policy.
This policy covers information processed through the Whodis App. It does not cover third-party websites that appear in your search results, or third-party services that operate under their own policies (see Section 7). By using Whodis, you agree to this policy.
You can reach us about privacy at support@onionix.xyz.
2. Summary at a glance
This summary is for convenience only; the numbered sections below are what govern.
- What it does: compares a face image you submit against publicly available web images and returns links only (grouped by website) to pages where a visually similar face appears.
- What it does not do: it does not identify individuals and does not return names, social handles, contact details, or any personal-identity information.
- On-device check first: before anything is uploaded, the App confirms on your device that a face is present. It never scans or uploads your photo library.
- What we collect: the cropped face image you submit, the resulting links, and a random on-device identifier. No name, email, phone, or account.
- Who it goes to: one independent third-party search service located in Belize, solely to run the search.
- Retention: the full-resolution image never leaves your device. On our side we keep only a small thumbnail and the result links for your own history, deletable at any time.
3. The nature of the Service and how it works
The Service performs a visual-similarity (reverse-face) search: a facial image you submit is compared against publicly available web images to return links to public web pages where a visually similar face appears. The Service does not identify individuals and does not return names, handles, or personal-identity information — results are web links only. We process the submitted image only to perform the search you initiate, on the basis of your explicit consent, which you give by submitting an image and tapping to search, and for no other purpose.
Results are presented as links grouped by their source (for example, by website or social network) together with a match-confidence score. Any personal information a linked page may itself display is published by that third-party website, not by Whodis; we neither generate nor supply it.
The similarity search itself is carried out by an independent third-party provider (Section 7.1). Per that provider's published Privacy Policy, its system does not create or store biometric templates for the unique identification of individuals and instead compares non-invertible visual descriptors of images.
4. Information we collect
4.1 Facial images and photographs you submit
When you take or choose a photo and run a search, the app crops the framed face and transmits only that cropped image to our servers, which forward it to our reverse-face-search provider. Before any image leaves your device, the app uses Apple's on-device Vision framework only to confirm a face is present; if no face is detected, no image is uploaded.
We do not access, scan, or upload your photo library. Only the single cropped face for the search you run is transmitted.
4.2 Search results (links) and search history
The result of a search is a set of links to public web pages, grouped by source, with match-confidence scores. If you are a paying user, we store these result links, together with a low-resolution thumbnail of the searched face, as your search history so you can review your own past searches. Your history is stored only for you and is not published or shared.
4.3 Technical and device data
To operate the App we use a random, app-generated identifier that is not tied to your name, email, phone number, or Apple ID. We do not require you to create an account. We may process a minimal amount of technical and diagnostic data necessary to run the Service reliably, secure it, and prevent abuse. We do not log your IP address for tracking or profiling purposes, and we do not build advertising or behavioral profiles.
5. How we use information
We use the information above only for the purposes in the table below. Each purpose is limited; we do not repurpose your data.
| What we use | Purpose |
|---|---|
| The cropped face image you submit | Perform the reverse-face search you request (transmit it to the search provider to obtain matching links). Not used for anything else. |
| Result links and thumbnail | Display your results and let you review your own search history. |
| Random device identifier and technical data | Operate and secure the Service, prevent abuse, and provide support. |
| Purchase / subscription status | Provide paid features and validate your entitlement (see Section 7.3). |
| Purchase and app-usage data ("consumption data") | Only if you request a refund through Apple: help Apple decide your request by sharing consumption data with Apple (see Section 7.4). |
We do not use facial images to build, sell, license, or contribute to any facial-recognition database, to train models, for advertising, or for profiling. The App returns no personal identity for any matched result.
6. We do not sell your data
We do not sell, rent, or trade your personal information, and we do not "share" it for cross-context behavioral advertising. We disclose information only to the limited service providers described in Section 7, only to operate the Service, and only for the purposes stated. We may also disclose information if required by law or valid legal process, or to protect the rights, safety, or security of our users, the public, or Higgs.
7. Third parties we work with
7.1 Reverse-face-search provider
To perform a search, we transmit the facial image you submit to an independent third-party reverse-face-search service located in Belize. That provider processes the image under its own published Privacy Policy and Terms of Use; per that policy, the original image is discarded immediately after face extraction, uploaded images are not indexed or added to its database, and thumbnails and cached results are deleted within 24 hours.
The provider processes data under its own policies and the laws of Belize. It acts as an independent service, not as an agent operating under our instruction, and it is not permitted by us to use your image for any purpose other than returning your search results. You can review its policies here:
7.2 Hosting and storage
We host our servers and store search history on our own private, access-controlled cloud infrastructure (S3-compatible object storage and a database). Data is encrypted in transit (HTTPS/TLS), thumbnails are served only through short-lived signed URLs, and stored data is associated only with your random device identifier.
7.3 Purchases and subscriptions
Purchases and subscriptions in Whodis are processed by Apple through the App Store. We do not receive or store your payment card number. We may use a subscription-management provider to validate your subscription status; where we do, it receives only your App Store transaction identifiers, not your payment details.
7.4 Refund requests (consumption data shared with Apple)
If you request a refund for a Whodis purchase through Apple, we — through the subscription-management provider named in Section 7.3 — may send Apple certain "consumption data" to help Apple evaluate your request. This data describes the purchase and how the app has been used, and may include: how long your installation has existed, whether the purchased coins or feature were used, an approximate measure of your in-app usage, the approximate total value of your purchases and refunds within Whodis, the platform, and our recommended resolution for the request. It does not include your name, email, payment-card number, or any facial image or search result.
Apple already holds your purchase record. This information is shared only in response to a refund request that you initiate, and solely so that Apple can decide it. By requesting a refund through this channel you consent to this sharing; if you do not want it shared, do not request a refund through Apple in the app.
8. International data transfers
The similarity search is performed by the third-party provider in Belize, so the cropped face image you submit is transferred there to carry out your search. Our own storage may be located outside your country of residence.
Belize is not the subject of a "adequacy" decision under the EU or UK GDPR. If you are located in the European Economic Area, the United Kingdom, or a similar jurisdiction, the transfer of your image to the provider in Belize is made because it is necessary to perform the specific search you request and on the basis of your explicit consent, which you give by submitting an image and tapping to search. If you do not want your image transferred on this basis, do not run a search.
9. Data retention
We do not retain the full-resolution image after a search completes. Search thumbnails and result links are retained as part of your history until you delete them; you can delete an individual search or your entire history from within the app at any time.
- On your device: the full-resolution original never leaves your device and is not retained by us.
- On our side: for paid searches we retain only a low-resolution thumbnail (approximately 256 pixels) of the searched face plus the result links, solely for your own history. Non-paying and failed searches retain no image on our side — the upload is deleted immediately after processing.
- At the provider: per the provider's published Privacy Policy, the original image is discarded immediately after face extraction, uploaded images are not indexed or added to any database, and thumbnails and cached results are deleted within 24 hours.
10. Deleting your data and your choices
Whodis does not use accounts, so there is no account to close. You control your data directly:
- Delete any individual search, or clear your entire search history, from within the App at any time. This removes the corresponding thumbnails and result links from our storage.
- Request deletion of data associated with your device by emailing support@onionix.xyz.
- To ask the search provider to remove or delist images of a person from its own index, use the removal process described in the provider's policies linked in Section 7.1.
Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, and to object to certain processing. To exercise them, contact us at the address above. We will respond as required by applicable law. Because we do not collect your name or contact details, we identify data by your device identifier; you may need to make the request from the device in question.
11. Security
We use administrative and technical safeguards appropriate to the sensitivity of the data, including encryption in transit, access controls, and short-lived signed URLs for stored thumbnails. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Consent and biometric-law notice (Illinois, Texas, Washington, and similar laws)
Whodis performs a visual-similarity search and does not identify individuals or return identity information. Nevertheless, some laws — including the Illinois Biometric Information Privacy Act (BIPA), Texas CUBI, and Washington's biometric law — define "biometric identifiers" broadly, and a scan of face geometry may fall within that definition in some interpretations regardless of whether a person is identified. Out of caution, we provide this notice.
- What is processed: the cropped face image you choose to submit, which is used only to run the reverse-face search you request.
- Purpose: solely to perform that search and return matching links. We do not use it to identify you or anyone else, for advertising, for profiling, or to train models.
- Consent: you provide your consent by submitting an image and tapping to search. If you do not consent, do not run a search.
- Disclosure: the image is disclosed only to the third-party provider to perform the search (Section 7.1). We do not sell, lease, trade, or otherwise profit from any facial data.
- Retention and destruction: we retain only the history thumbnail and result links, and we destroy them when you delete them, when the purpose for which the image was submitted has been satisfied, or within the period required by applicable law, whichever is earliest. On the provider's side, images are handled per its published policy (original discarded immediately after extraction; thumbnails and cached results deleted within 24 hours).
You should only submit images you have a lawful basis to submit. Whodis is intended for lawful uses such as checking your own online image footprint and verifying whether a profile photo appears elsewhere; it must not be used to harass, stalk, or harm any person, and must not be used for decisions about credit, employment, insurance, or tenant screening.
13. U.S. state privacy disclosures (CCPA/CPRA and similar)
This section applies to residents of California and other U.S. states with comparable laws. In the preceding 12 months, the categories of personal information we process are: images you submit (which may include biometric information in some interpretations) and identifiers (a random device identifier and technical data). We use this information for the business purposes described in Section 5 and disclose it only to the service providers in Section 7.
- We do not sell your personal information and do not share it for cross-context behavioral advertising.
- We do not use or disclose sensitive personal information for purposes other than providing the Service you request.
- Subject to your local law, you may have the right to know, access, delete, and correct your personal information, and to be free from discrimination for exercising these rights. To exercise them, contact us at support@onionix.xyz.
14. Children
Whodis is intended only for users who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. You must not submit or search for images of minors. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact support@onionix.xyz.
15. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where required, provide additional notice. Continued use of Whodis after an update means you accept the revised policy.
16. How to contact us
HIGGS MCHJ
Email: support@onionix.xyz
If any translated version of this policy conflicts with the English version, the English version governs.