Why the 'free' app wants your fingerprints

A popular facial recognition app is asking users to scan their faces to unlock features — and it's not just a selfie. The app collects biometric data, including facial geometry, to build a unique identifier for each user.

The catch? That data isn't just stored locally. It's sent to a cloud server, where it's linked to your account, your location history, and your purchase patterns. The app's privacy policy is buried in a 40-page document most people never read.

What makes this worse is the opt-out. You can't use the app without granting biometric access. There's no alternative login. No way to use it "just for fun." You scan or you don't use it.

The company behind it, a startup that raised $12 million last year, says the data is "anonymized." But anonymized facial geometry can still be matched to a person using other databases. Several independent researchers have already shown this is possible.

Regulators are starting to ask questions. The FTC has opened a preliminary inquiry into whether the company is complying with existing biometric privacy laws. But there's no federal law that specifically bans this kind of data collection yet.

The app's founder told us the data is "useful for personalization." But personalization doesn't require a permanent biometric fingerprint stored on a server you don't control.

Why this matters for us: Our faces are already being scanned by police drones and store cameras. Now a startup wants to turn our biometrics into a product — and we don't even get to say no.