Is Hugging Face safe with your data?
Hugging Face
Weak disclosure · high confidence
Hugging Face earns a D (45/100) because it leaves much about its data practices unstated.
#113
of 216 apps ranked
45
score · Productivity avg 56
-11
vs category average
Hugging Face publishes a short 2023 privacy policy and 2022 terms that name a full subprocessor list, a 90-day deletion window after account closure and an age-13 floor, but say nothing about whether user content trains models and describe security and international transfers only in general terms.
What Hugging Face's privacy policy and terms of service say about your data
Named subprocessors
The policy publishes a full list of eleven third-party subprocessors with the service each performs and the country where it processes data, including AWS, Stripe, MongoDB Atlas, Google Cloud, GitHub and OVHCloud.
Deletion has a clock
After an account is cancelled, Hugging Face commits to commercially reasonable efforts to delete the user's information and the content of their own repositories, public or private, within 90 days, though content contributed to other users' repositories and copies made by others are excluded.
Training use is unaddressed
Neither the privacy policy nor the terms say whether content posted to the Hub is used to train machine learning models, and no opt-out or opt-in mechanism is described.
Retention and security stay general
Information is kept "for as long as necessary to deliver the Services" with no stated period, security rests on "generally accepted industry standards" with no named control, and cross-border transfers cite only safeguards "consistent with standard applicable data protection laws".
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: data portability
Hugging Face privacy rating
Details
- Category
- Productivity
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2023-03-28
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other productivity apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.