Privacy · Utility Bureau

Your photo is processed in your browser and is never uploaded, stored or seen by us. There is no account and no server-side code.

What runs where

Face detection, background segmentation, cropping, checks and file generation run on your device using MediaPipe models downloaded to your browser. The image data stays in memory on your device.
Downloads are generated locally and saved by your browser. We do not receive them.
Re-downloads work by re-picking the original photo on your device, because we keep no copy.

The only hosts the site talks to at runtime are:

cdn.jsdelivr.net and storage.googleapis.com serve the MediaPipe runtime and model files. The requests carry no image data.
api.lemonsqueezy.com receives your licence key (and nothing else) when you activate or when the site silently re-checks it.
*.lemonsqueezy.com hosts the checkout. Lemon Squeezy is the merchant of record and handles payment details under its own privacy policy; we see your email and order only through its dashboard.
plausible.io is used only if analytics is turned on in the site configuration (it is off by default). Plausible is cookie-free and collects no personal data.

You can verify all of this yourself: see how to check in DevTools.

Your licence key, its product and expiry, and the document it is bound to, in localStorage.
Your chosen currency label.
The app shell and model files in the browser cache, so the tool works offline.

Clearing site data removes all of it. Names typed into the person strip are kept in memory only and vanish when you leave the page.

Utility Bureau is operated by Utility Bureau Pty Ltd, ABN 00 000 000 000, Perth, Western Australia. Questions: hello@utilitybureau.org.