MYTYPE — PRIVACY POLICY Version privacy-v1.3-2026-09-13. Effective 2026-08-06. Operator: MyType (mytype.fyi). Contact: hello@mytype.fyi.
1. WHAT WE DO NOT COLLECT. Every face shown in this product is synthetic and depicts no real person. The core service — the grids you tap and the results you receive — collects no photographs and creates no facial-recognition template, face-geometry scan, or biometric identifier of any kind. The ONE exception is the optional "reveal" feature, which you may choose to use: if and only if you affirmatively opt in on its dedicated consent screen, you may capture photographs of YOUR OWN face with your device's front-facing camera, and we create a scan of your face geometry from them to compute your own placement and result. This is entirely optional, is offered only in eligible regions, requires your explicit written consent each time, is used only for the self-analysis you requested, is never used to train any model, and the photographs are discarded on completion (not stored on our servers). You may never upload a photograph of anyone other than yourself. See our Biometric Data Retention & Destruction Policy for the specifics. We do not collect device location: we never ask for or use your device's GPS, Wi-Fi, or Bluetooth positioning, and the service does not request location permission from your browser or phone. We also do not collect contacts or financial information.
2. WHAT WE COLLECT. - Account: email address, display name, an over-18 flag (not your birthdate), campus or pool assignment, and an internal account id. - Behavioral: your grid responses (which synthetic faces you tapped, in which displayed set), timestamps, response latency, and session data. - Derived: your preference model and its outputs. - Social: group memberships and aggregate interactions with your results. - Technical: IP address; approximate location looked up from that IP address — country, region, city, postal code, timezone, and the approximate coordinates of that area — used to enforce our geographic restriction and to understand where our users are; the network operator your address belongs to; browser/device class, browser language, and the site that referred you. The location above is inferred from your IP address and is often inaccurate, particularly on mobile networks, where it identifies your carrier's equipment rather than you. It is not GPS and is not device location. - Free text: a self-described "type" if you choose to enter one. - Biometric (ONLY if you opt into the "reveal" feature): a scan of your own face geometry, created in-session from front-facing camera photos of yourself. The photographs are processed and then discarded on completion (not stored on our servers); the scan is used only to produce your requested placement and result and is never used to train any model. If you choose "save my result," we retain only the derived numbers and a numeric face-descriptor vector — never a photograph — until you delete it. This feature is optional, region-restricted, and requires your explicit written consent each time.
3. HOW WE USE IT. To run the product (serve grids, fit your model, show results), to enforce eligibility and geography, to send sign-in links and service email, to send SMS only under separate consent, and — only if you gave the separate research consent — for research and publication as described in the Terms (Section 6).
4. WHAT IS PUBLIC. Your results start private. If you explicitly publish your link-only page, others with its unguessable link can see your display name (which may be a pseudonym) and derived preference results shown as synthetic faces and aggregate statistics. Joining a group also exposes your display name and results within that group; group-level aggregates appear once a group crosses its minimum size (20 people). Faces you tap are never shown as individual choices. Anything shared or screenshotted cannot be recalled after deletion.
5. WHO WE SHARE WITH. Infrastructure providers only: hosting (Railway), email (Resend), and, if SMS ships, an SMS provider; no analytics resellers; no data sales. De-identified research data may be shared with academic collaborators under the Terms. We disclose if required by law.
6. RETENTION. Comparison data is retained indefinitely for research under your consent; identifiable account data is deleted on request (30 days). Terms and consent records are retained as legal records.
7. SECURITY. Encryption in transit; access controls; append-only event storage. No absolute guarantee is possible.
8. YOUR RIGHTS. Deletion is available in-product. Know/delete/correct/opt-out requests: hello@mytype.fyi — one flow for all US state privacy laws.
9. CHILDREN. The service is 18+ only. We do not knowingly collect data from minors and delete any such account on discovery.
10. CHANGES. We will post changes here with a new version string and date; material changes are notified in-product.