What we store, in plain terms.

While NullFake is in early access, we only keep what you type into the waitlist form: your email (required), your name if you add it, and your one market-research answer (your main concern, or your company and role). It's used for a single purpose — to email you when protection opens. No biometric data is collected at this stage.

They're converted into embeddings — mathematical signatures made of numbers, not viewable photos or playable audio. The original image or recording is used only to compute that signature; it isn't kept as media in your profile. A signature can be matched against a suspected fake, but it can't be “opened” to reproduce your original photo or voice.

Correct — not as your protection profile. Matching runs on the embeddings above. In an active takedown case, we work from the URL or hash of the offending content and the minimum needed to verify and act — we don't build a library of your images.

Encrypted in transit and at rest, with tightly restricted access. A consent registry is only as trustworthy as its security, so we deliberately store signatures instead of raw media — a breach would expose far less. We're early, and we'll publish our full security posture as we scale.

Any time. Email hello@nullfake.online and we'll remove your waitlist entry — and, at launch, your Vault — no questions asked.

We don't sell your data, and we never hand it to the AI labs — we do the opposite, telling them not to use you. Companies checking the registry get a yes/no consent signal and a record id, never your underlying biometric data.

Honestly, no one can — open-source models run on anyone's laptop, beyond anyone's reach. What we give you is what you lack today: proof you refused, the standing to act on it, and the fastest route to removal when a fake appears.

On registration we put your non-consent on record with AI labs and platforms — dated and logged. It isn't magic, but it turns any later misuse into a knowing, documented violation, which is real leverage if you ever need to act.

We confirm it's you, then send a legally-grounded takedown to the host — within the 24-hour (India IT Rules) or 48-hour (US TAKE IT DOWN Act) windows — and hand you an evidence pack for police or a lawyer.

For individuals, your first year is free — no credit card or UPI to join. The first 10,000 members keep that free year. After the first year it's ₹299/year, and you can cancel anytime.

Revenue comes from the AI industry that verifies against the registry — never from the people it protects. Keeping individuals free is how the registry becomes complete enough to matter.

This is where the law is strongest and we move fastest. Anything involving a minor is treated as CSAM — routed straight to the proper authorities and never stored by us.

A consent signal (a match result and an allow/block decision) plus a record id for your audit trail — never a person's underlying face or voice data. See For Companies.