How I Land

Privacy

How I Land, web app. Policy version 7, .

In short: nothing is stored

What the camera is used for

On your first visit the app explains why it needs the camera; its button asks your browser for the front camera, and your browser asks you. MediaPipe Face Landmarker, an on-device model, reads each frame and returns the positions of points on your face (face geometry) and expression scores. From these the app works out a few movements: how far your chin is up or down, how much you smile, how far your lips are apart, and how high your brows sit and how open your eyes are compared with your own resting face. It compares these with the target for the word you chose and shows an outline and one instruction.

When you have held a look for its five seconds, a warm light rises behind you for a few seconds. For those seconds a second on-device model, MediaPipe Selfie Segmenter, reads the picture a few times a second and marks which parts of it are you (your head, hair and shoulders), so that the light is drawn only behind you.

The app measures visible movements against targets. It does not identify you, does not recognise or compare faces, and does not infer your emotions.

What exists, where, and for how long

Camera frames

Where
Device memory
Kept for
The time it takes to read one frame (about 1/30 s)
Destroyed
Overwritten by the next frame; never written to storage

Face geometry of each frame, the smoothed copy used to draw the outline, and the resting-face reference used for instructions

Where
Device memory
Kept for
While the camera is on
Destroyed
Erased when you leave the app, lock the phone or close the page

Which parts of the picture are you, for the light after a held look

Where
Device memory
Kept for
The few seconds of the light; each reading replaces the last
Destroyed
Erased when the light ends, and when you leave the app, lock the phone or close the page

The word and the culture region you chose

Where
Device memory
Kept for
While the page is open
Destroyed
When you close the page; the app opens on “approachable”, region not set

Nothing is written to your device’s storage. Versions of the app before 3.11 could keep your chosen word and region, and, if you switched it on, your progress with encrypted face snapshots; the app deletes all of that the next time you open it.

Like any website, your browser keeps a copy of the app’s own files (its code and its two models) so it starts quickly and works offline. These files are the same for everyone and contain nothing about you.

Your choices

Nothing leaves your device

The app is a set of static files. The models and their runtime are served from this site; the site’s security policy only lets the page connect to this site, and an offline helper (service worker) answers any request to another site itself. The runtime’s built-in usage reporting to Google is switched off at build time. No data about you is sold, shared, disclosed or transferred to anyone, because none reaches us. Once the outline sits on your face you can switch on airplane mode: the app keeps working.

Loading the app: like any website, the hosting provider that delivers these files receives the usual technical data with each file request (IP address, browser type, time) and may keep it in short-lived server logs for security and operation. These requests contain nothing from the camera. After the first visit the models and their runtime start from your device’s cache; the app’s own small files are fetched again each time you open it, so you always have the latest version (offline, the copy on your device is used).

Children

If you are under 16, use the app with a parent’s or guardian’s agreement.

Who runs this app

(not set). Contact: (not set).

Because nothing about you is stored, here or on your device, we hold nothing about you that we could give you, correct or delete.

Back to the app