FACE SORTER PRO ULTIMATE
End-User License Agreement & Terms of Service
Developed by Lemwil
Last Updated: April 27, 2026
Please read this End-User License Agreement and Terms of Service (collectively, this "Agreement") carefully before clicking "I Agree," purchasing, downloading, installing, or using Face Sorter Pro Ultimate (the "Software").
1. Interpretation and Definitions
Words with initial capital letters have the meanings defined below. These definitions apply whether used in singular or plural form.
"Agreement" — This End-User License Agreement and Terms of Service between You and the Company.
"Company" (referred to as "Lemwil," "We," "Us," or "Our") — Lemwil, contactable at info@lemwil.com.
"Software" — Face Sorter Pro Ultimate, including all updates, enhancements, and related documentation, licensed for the price of $19.99 USD (or such other amount as displayed at purchase).
"You" — The individual or entity accessing or using the Software.
"Device" — Any computer or device on which the Software is installed or used.
"Biometric Data" — Facial recognition encodings (numerical vectors of either 128 dimensions in CPU mode or 512 dimensions in GPU mode, depending on the processing engine the Software is configured to use) derived from photographs and used to identify individuals. These encodings are mathematical representations of facial geometry and cannot be used to reconstruct the original photograph. The Software may also store cropped face thumbnail images on disk for user-interface display and auto-learning purposes; these thumbnails are also Biometric Data for the purposes of this Agreement.
"Configuration File" — The file named config.json stored in the Software's Data Directory, which contains user settings, preferences, and Biometric Data (in the form of facial recognition encodings).
"Auto-Learn File" — The file named autolearn.json stored in the Data Directory, which contains additional Biometric Data automatically gathered during sort operations when the optional auto-learn feature is enabled by You.
"Data Directory" — The folder located at %LOCALAPPDATA%\FaceSorterPro (typically C:\Users\{username}\AppData\Local\FaceSorterPro) where the Software stores all user-generated data, including configuration files, biometric data, face-thumbnail images, crash logs, diagnostic logs, and undo logs.
2. Acknowledgment
By clicking "I Agree," purchasing, installing, or using the Software, You agree to be bound by this Agreement. If You do not agree, do not purchase, install, or use the Software.
You acknowledge and agree that the Software performs operations on Your image files, including potential moving or copying of files, which may carry a risk of data alteration or loss if not used carefully.
IMPORTANT: We strongly urge and recommend that You make complete backups of all Your data, image files, and any relevant storage locations before using the Software. Failure to back up Your data is at Your own risk, and Lemwil shall have no responsibility for any loss, corruption, or unintended modification of Your files resulting from use of the Software.
This Agreement is solely between You and Lemwil. The Software processes all images locally on Your Device — no data is uploaded to any server or third party.
3. License Grant
Lemwil grants You a revocable, non-exclusive, non-transferable, limited license to install and use the Software on Your Devices strictly for personal or internal business purposes, in accordance with this Agreement, upon payment of the applicable license fee ($19.99 USD or as otherwise stated).
4. License Restrictions
You agree not to:
- Copy, modify, distribute, sell, rent, lease, sublicense, or commercially exploit the Software.
- Reverse engineer, decompile, disassemble, or derive source code from the Software.
- Extract, copy, export, redistribute, or otherwise remove the proprietary Scout face-detection model (Lemwil Vision) bundled with the Software, or use that model in any application, pipeline, or research project outside of Face Sorter Pro. The Scout model is the exclusive intellectual property of Lemwil and is licensed only as an embedded component of the Software (see THIRD_PARTY_NOTICES.txt for full restrictions).
- Remove or alter any copyright, trademark, or proprietary notices.
- Use the Software for any illegal purpose or in violation of applicable laws.
- Use the Software to conduct unauthorized surveillance or monitoring of individuals.
- Process photographs of individuals without obtaining any consent required by applicable law.
5. Intellectual Property
The Software and all related intellectual property rights remain the exclusive property of Lemwil. No ownership is transferred to You. The Software incorporates open-source libraries and pretrained models (including dlib, face_recognition, OpenCV, MediaPipe BlazeFace, AuraFace, ONNX Runtime, Pillow, pi-heif, and rawpy) used under their respective licenses, plus the proprietary Scout / Lemwil Vision face-detection model owned exclusively by Lemwil. A complete list of components and licenses is provided in the THIRD_PARTY_NOTICES.txt file bundled with the Software.
6. Privacy, Data Processing, and Biometric Data
6.1 Local Processing Only
All processing — including face detection, encoding, sorting, and duplicate detection — occurs entirely on Your Device. The Software makes zero external network connections. No data of any kind (including Biometric Data, photographs, analytics, telemetry, or usage metrics) is transmitted to Lemwil, third-party servers, or any external service.
6.2 Biometric Data Collection and Storage
When You use the "Add People" feature, the Software generates Biometric Data in the form of facial recognition encodings derived from photographs You provide. Depending on the active processing mode, these encodings are either 128-dimensional numerical vectors (CPU mode, dlib engine) or 512-dimensional numerical vectors (GPU mode, AuraFace engine). They are mathematical representations of facial geometry and cannot be used to reconstruct the original photograph.
In addition to the numerical encodings, the Software stores small cropped JPEG thumbnails of each detected face on disk, in the face_thumbs/ subfolder of the Data Directory. These thumbnails are used by the Software's user interface (the People list and preview popups) and are derived from photographs You provide. If You enable the optional auto-learn feature, additional thumbnails of automatically-matched faces are stored in the auto_thumbs/ subfolder. Both folders are entirely local to Your Device and never transmitted externally.
Biometric Data persists between sessions so that registered faces are retained when the Software is closed and reopened.
6.3 What Is Stored in the Data Directory
The Configuration File (config.json) contains:
- Names You assign to registered individuals
- Facial recognition encodings associated with each named individual
- Source folder paths and scan preferences
- EULA acceptance status, compute device selection, and other application settings
The Auto-Learn File (autolearn.json), present only if You have enabled the auto-learn feature, contains:
- Additional facial recognition encodings automatically generated during sort operations
- References associating those encodings with previously-registered individuals
Face Thumbnails are stored as separate JPEG files in:
- face_thumbs/ — cropped face thumbnails for manually-registered individuals
- auto_thumbs/ — cropped face thumbnails for auto-learned faces (if auto-learn is enabled)
The Configuration File and Auto-Learn File do NOT contain:
- Original photographs or full-size copies of Your images
- Image metadata (EXIF data, GPS coordinates, timestamps, camera information)
- Any data from other applications on Your Device
Crash and Diagnostic Logs
The Software maintains the following local-only log files in the Data Directory:
- crash_log.txt — Technical error information generated locally to assist with troubleshooting.
- diagnostic_log.txt — A per-sort forensic trail used to investigate sort behavior on Your Device (worker counts, ONNX provider information, progress checkpoints, and a final summary).
- worker_init.log — Per-worker startup record listing which inference provider (CPU or CUDA) each worker process actually claimed, used to diagnose silent fallback issues.
None of these log files contain Biometric Data, photographs, or personal information beyond file paths and identifiers that may appear in error or status messages. None of these log files are ever transmitted externally. You may delete them at any time.
Temporary Session Data
During an active sorting session, the Software may create a temporary file named undo_log.json in the Data Directory. This file contains:
- Source and destination file paths for sorted photographs
- Sorting mode and timestamp information
This file is used solely to enable the "Undo Sort" feature. It persists between sessions so that a sort can be undone even after closing and reopening the Software. It is automatically deleted after a successful undo operation or when a new sort is started (with user confirmation).
The undo_log.json file does NOT contain:
- Biometric Data or face encodings
- Photograph contents, thumbnails, or image data
- Personal names (except as they may appear in folder path names You created)
6.4 User Control and Deletion of Biometric Data
You have full control over Your Biometric Data at all times:
- Individual Removal: Click the "x" button next to any person's name to permanently delete that individual's name, all associated facial recognition encodings, and the corresponding face thumbnails from the Data Directory.
- Full Deletion: Click the "Clear List" button to permanently delete all registered faces, all associated Biometric Data (encodings and thumbnails), and all auto-learned data from the Data Directory.
- Per-Person Auto-Learn Clear: Use the per-person "Clear Auto" control to remove only the auto-learned encodings and thumbnails for a specific individual, leaving the manually-registered data intact.
- Manual Deletion: Delete individual files (config.json, autolearn.json) or entire folders (face_thumbs/, auto_thumbs/) from the Data Directory to remove specific data. You may also delete the entire FaceSorterPro folder to remove all data including configuration, biometric data, thumbnails, crash logs, diagnostic logs, worker logs, and undo logs.
Upon deletion by any of the above methods, the Biometric Data is permanently and irrecoverably removed. Lemwil does not retain, back up, or have access to any copy of Your Biometric Data.
6.5 Data Storage Location
The Software stores all user-generated data in the Data Directory located at %LOCALAPPDATA%\FaceSorterPro (typically C:\Users\{username}\AppData\Local\FaceSorterPro). This is the standard Windows location for application data and ensures reliable operation across all installation methods, including the Microsoft Store. The Software does not store user data in the Windows Registry, cloud services, or any remote location. All persistent user data resides exclusively within the Data Directory on Your local Device.
6.6 No Analytics or Telemetry
The Software contains no analytics, telemetry, crash reporting, update checking, license validation, or any other form of external communication. This can be independently verified by monitoring network traffic while the Software is running.
6.7 Your Responsibilities
You are solely responsible for:
- Obtaining any required consent from individuals whose photographs are processed by the Software.
- Complying with all applicable biometric data privacy laws and regulations in Your jurisdiction (including but not limited to BIPA, GDPR, CCPA, and similar laws).
- Securing access to the Device on which the Software and Data Directory are stored.
- Deleting Biometric Data when it is no longer needed or upon request of the individuals whose data has been processed.
7. Acceptable Use
You agree to use the Software only for lawful purposes. You shall not use the Software to:
- Conduct unauthorized surveillance, stalking, or monitoring of any individual.
- Process images in violation of any individual's reasonable expectation of privacy.
- Violate any applicable local, state, national, or international law or regulation.
- Engage in any activity that infringes the rights of others, including intellectual property and privacy rights.
Lemwil reserves the right to terminate Your license if the Software is used in violation of this Section.
8. Facial Recognition Disclaimer
Facial recognition technology is not 100% accurate and may produce false positives or false negatives due to lighting, angles, image quality, or other factors. Results are provided for informational and sorting purposes only. Lemwil is not responsible for any misidentification, privacy issues, or decisions You make based on Software output. Always verify results manually before taking any action (e.g., deletion of originals).
The Software's sorting features, including "King of the Hill" mode, may move or reorganize files on Your Device. You are solely responsible for maintaining backups of Your data before enabling any mode that moves files.
While Lemwil is committed to protecting user privacy and designs the Software to minimize data retention, no software is guaranteed to be free of defects. In the unlikely event of a crash, unexpected termination, or software bug, temporary session files (such as undo_log.json) may persist in the Data Directory. You may manually delete any files in the Data Directory at any time. Lemwil cannot guarantee the absence of all software bugs but is committed to promptly addressing any reported privacy-related issues.
9. Third-Party Components
The Software uses the following third-party libraries and pretrained models for local processing only. No data is shared with these projects or their maintainers:
- dlib — Face detection and facial encoding (CPU mode); Boost Software License 1.0
- face_recognition — Python wrapper around dlib used in CPU mode; MIT License
- OpenCV — Image processing, rotation, and format handling; Apache License 2.0
- MediaPipe — BlazeFace face detection (GPU mode default); Apache License 2.0
- AuraFace — Face recognition / encoding (GPU mode default); Apache License 2.0
- ONNX Runtime — Inference engine for the GPU pipeline; MIT License (Microsoft Corporation)
- Pillow (PIL) — Image loading, resizing, and thumbnail generation; MIT-CMU License
- pi-heif — HEIC/HEIF image format support (iPhone photos); LGPL 3.0 (dynamically linked)
- rawpy — RAW camera file decoding (CR2, CR3, NEF, ARW, DNG, and other RAW formats); MIT License
A complete list of all bundled third-party components, including additional system libraries and runtime dependencies, is provided in the THIRD_PARTY_NOTICES.txt file bundled with the Software.
The Software also incorporates the proprietary Scout face-detection model (Lemwil Vision), owned exclusively by Lemwil and licensed only as an embedded component of the Software. See Section 4 and the THIRD_PARTY_NOTICES.txt file for the full proprietary license.
All open-source libraries run locally on Your Device. None transmit data externally when used by this Software. These libraries are subject to their own respective open-source licenses.
10. No Warranties
THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, LEMWIL DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY OF FACIAL MATCHING, ERROR-FREE OPERATION, VIRUS-FREE, OR UNINTERRUPTED USE.
Lemwil does not warrant that the Software will meet Your requirements, achieve intended results, or be compatible with all hardware/software. You assume all responsibility for backing up Your data prior to use, as the Software may interact with and potentially alter file locations or contents.
Some jurisdictions do not allow exclusion of implied warranties, so some limitations may not apply to You — but they apply to the fullest extent permitted by law.
11. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL LEMWIL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES (INCLUDING LOSS OF PROFITS, DATA, GOODWILL, BUSINESS INTERRUPTION, PERSONAL INJURY, PRIVACY VIOLATIONS, OR OTHER LOSSES) ARISING FROM OR RELATED TO USE (OR INABILITY TO USE) THE SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Lemwil's total aggregate liability to You under this Agreement shall not exceed the amount You actually paid for the Software license ($19.99 USD), or $100 USD if no payment was made or if the amount paid is less than $100.
This limitation applies regardless of legal theory (contract, tort, negligence, strict liability, etc.).
Some jurisdictions prohibit limiting liability for certain damages, so this may not apply fully to You — but it applies to the maximum extent enforceable.
12. Indemnification
You agree to indemnify, defend, and hold harmless Lemwil (and its officers, employees, agents) from any claims, damages, losses, liabilities, costs (including reasonable attorneys' fees) arising from:
- Your use of the Software;
- Violation of this Agreement or any law;
- Violation of third-party rights (e.g., privacy claims related to images You process);
- Failure to obtain required consent for biometric data processing;
- Any claim arising from Your failure to comply with applicable biometric data privacy laws.
13. Term and Termination
This Agreement remains effective until terminated. Lemwil may terminate it at any time for any reason (with or without notice). You may terminate by uninstalling and deleting the Software.
Upon termination, You must cease all use of the Software, delete all copies, and delete the Data Directory (%LOCALAPPDATA%\FaceSorterPro) containing any Biometric Data and Configuration Files.
14. Governing Law
This Agreement is governed by the laws of the State of Connecticut, United States, without regard to conflict of law principles. Any disputes shall be resolved exclusively in courts located in Danbury, Connecticut.
15. Changes to this Agreement
Lemwil may update this Agreement from time to time. Material changes will be notified (e.g., via in-app notice or email). Continued use of the Software after changes constitutes acceptance of the updated Agreement.
16. Entire Agreement
This Agreement constitutes the entire understanding between You and Lemwil regarding the Software and supersedes all prior agreements, representations, and understandings.
17. Severability
If any provision of this Agreement is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.
18. Contact Us
For questions about this Agreement, the Software, or data handling practices:
Email: info@lemwil.com
PRIVACY POLICY
Face Sorter Pro Ultimate
Developed by Lemwil
Effective Date: April 27, 2026
1. Introduction
Lemwil ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how Face Sorter Pro Ultimate (the "Software") handles your data, including biometric information derived from photographs.
Key Principle: Face Sorter Pro Ultimate is a 100% offline application. It makes zero external network connections. No data of any kind — including personal data, biometric data, photographs, analytics, or telemetry — is ever transmitted to Lemwil, third-party services, or any external server.
2. What Data the Software Processes
2.1 Biometric Data (Face Encodings and Face Thumbnails)
When you use the "Add People" feature, the Software analyzes photographs you provide and generates two categories of biometric data:
(a) Facial recognition encodings — numerical vectors that mathematically represent facial geometry. The dimensionality depends on the active processing mode: 128 dimensions in CPU mode (dlib engine) or 512 dimensions in GPU mode (AuraFace engine). These encodings cannot be used to reconstruct the original photograph or image of a person's face.
(b) Face thumbnails — small cropped JPEG images of each detected face, used by the Software's user interface (the People list, the preview popups, and the auto-learn review screens). Thumbnails are stored locally only and are derived from photographs you provide.
If you enable the optional auto-learn feature, the Software may generate additional encodings and thumbnails during sort operations and store them in a separate auto-learn pool.
2.2 User-Assigned Names
You assign a name (e.g., "Mom," "John") to each set of face encodings. These names are chosen entirely by you and are used only to label sorted output folders and the People list inside the Software.
2.3 Application Settings
The Software stores your configuration preferences, including source folder paths, scan settings, compute device selection, and EULA acceptance status.
2.4 What the Software Does NOT Collect
- Original photographs or full-size copies of your images
- Image metadata (EXIF data, GPS coordinates, timestamps, camera info)
- File contents beyond what is needed for face detection and thumbnail generation during processing
- Browsing history, keystrokes, or system information
- Analytics, usage statistics, or telemetry of any kind
- Any data from other applications on your device
3. How and Where Data Is Stored
All persistent data is stored locally on your device in the Data Directory:
Location — %LOCALAPPDATA%\FaceSorterPro
(typically C:\Users\{username}\AppData\Local\FaceSorterPro)
The Data Directory contains the following items:
Configuration File:
config.json — Face encodings, assigned names, source folder paths, and application settings.
Format: standard JSON text file (human-readable).
Auto-Learn File (only if auto-learn has been enabled):
autolearn.json — Additional face encodings the Software gathered automatically during sort operations, associated with previously-registered individuals.
Face Thumbnail Folders:
face_thumbs/ — Cropped JPEG thumbnails for manually-registered individuals (used by the People list UI).
auto_thumbs/ — Cropped JPEG thumbnails for auto-learned faces (only present if auto-learn is enabled).
Crash and Diagnostic Logs:
crash_log.txt — Technical error information for troubleshooting.
diagnostic_log.txt — Per-sort forensic trail (worker counts, ONNX provider info, progress checkpoints, summary).
worker_init.log — Per-worker startup record listing which inference provider each worker actually claimed.
None of these log files contain biometric data or photographs.
Undo Log:
undo_log.json — File paths used by the "Undo Sort" feature. This file is created during/after a sort and is automatically deleted after a successful undo or when a new sort is started.
The Software does not store data in the Windows Registry, cloud services, or any remote location. All user data resides exclusively within the Data Directory on your local device.
The undo_log.json file does NOT contain biometric data, photographs, or image contents.
4. Your Control Over Your Data
You have complete control over all data stored by the Software at all times:
4.1 Delete Individual People
Click the "x" button next to any person's name in the People list. This immediately and permanently removes that individual's name, all associated face encodings, and their thumbnail images from the Data Directory.
4.2 Delete All Biometric Data
Click the "Clear List" button to immediately and permanently wipe all registered people, all face encodings (including any auto-learned encodings), and all face thumbnails from the Data Directory. After clearing, the configuration file retains only your application settings (source folders, compute preferences).
4.3 Clear Auto-Learned Data Only
Use the per-person "Clear Auto" control to remove only the auto-learned encodings and thumbnails for a specific individual, leaving the manually-registered data intact.
4.4 Delete Everything
Delete the entire FaceSorterPro folder from %LOCALAPPDATA% (you can navigate there by typing %LOCALAPPDATA%\FaceSorterPro in the Windows file explorer address bar). This removes all configuration files, auto-learn files, face thumbnails, crash logs, diagnostic logs, worker logs, and undo logs permanently.
Alternatively, uninstalling the Software and deleting this folder constitutes complete removal of all user data.
Important: Lemwil does not have access to, and has never had access to, any copy of your data. Once you delete it, it is permanently and irrecoverably gone. We cannot recover it for you.
5. Network Activity and External Communications
The Software makes zero network connections. It does not access the internet for any purpose, including:
- No analytics or telemetry (e.g., no Google Analytics, Adobe, Mixpanel)
- No crash reporting or error logging to external services
- No license validation or phone-home calls
- No update checks or download capabilities
- No data transmission of any kind to Lemwil or third parties
This can be independently verified by monitoring network traffic while the Software is running. The application will produce zero outbound connections.
6. Third-Party Components
The Software uses the following third-party libraries and pretrained models for local processing only. No data is shared with these projects or their maintainers:
- dlib — Face detection and facial encoding (CPU mode); Boost Software License 1.0
- face_recognition — Python wrapper around dlib used in CPU mode; MIT License
- OpenCV — Image processing, rotation, and format handling; Apache License 2.0
- MediaPipe — BlazeFace face detection (GPU mode default); Apache License 2.0
- AuraFace — Face recognition / encoding (GPU mode default); Apache License 2.0
- ONNX Runtime — Inference engine for the GPU pipeline; MIT License (Microsoft)
- Pillow (PIL) — Image loading, resizing, and thumbnail generation; MIT-CMU License
- pi-heif — HEIC/HEIF image format support (iPhone photos); LGPL 3.0 (dynamically linked)
- rawpy — RAW camera file decoding (CR2, CR3, NEF, ARW, DNG, and other RAW formats); MIT License
All open-source libraries run locally on your device. None of them transmit data externally when used by this Software. A complete list of all bundled components, including additional system libraries and runtime dependencies, is provided in the THIRD_PARTY_NOTICES.txt file bundled with the Software.
The Software also incorporates the proprietary Scout face-detection model (Lemwil Vision), owned exclusively by Lemwil. The Scout model runs entirely locally on your device and never transmits any data externally.
7. Biometric Data Compliance
Because the Software processes facial geometry, the data it generates may be classified as biometric data under certain laws, including the Illinois Biometric Information Privacy Act (BIPA), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and similar regulations.
Your Responsibilities
As the operator of the Software, you are responsible for:
- Obtaining informed consent from individuals whose photographs you process, where required by applicable law.
- Complying with biometric data retention and deletion requirements in your jurisdiction.
- Restricting access to the device on which the Software and Data Directory are stored.
- Deleting biometric data when it is no longer needed or upon request of the data subjects.
Lemwil's Role
Lemwil acts solely as the provider of the Software tool. We do not process, access, store, receive, or have any visibility into your biometric data or photographs. All processing occurs exclusively on your device under your control.
Software Reliability and Privacy
Lemwil designs the Software with privacy as a core principle. All data processing occurs locally, and no information leaves your device. However, as with all software, Lemwil cannot guarantee the complete absence of bugs or defects. In the unlikely event that a software issue affects data handling, Lemwil is committed to addressing reported issues promptly. You are encouraged to report any privacy concerns to info@lemwil.com.
8. Data Security
Because all data remains on your local device and is never transmitted externally, data security is under your direct control. We recommend:
- Securing physical access to the device on which the Software is installed.
- Using operating system-level encryption (e.g., BitLocker) to protect the Data Directory.
- Deleting the configuration file, auto-learn file, and face-thumbnail folders from the Data Directory when face recognition data is no longer needed.
- Keeping your operating system and GPU drivers updated.
- Being aware that undo log files persist between sessions to enable the Undo Sort feature. These can be safely deleted manually from the Data Directory at any time.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notice or posted on our website. Continued use of the Software after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or how the Software handles your data, please contact us at:
Email: info@lemwil.com