A recognition reference, with context
The enrollment record contains numerical face samples, the name assigned to the identity, capture dates, pose information when available, and capture-quality scores. It also records which recognition model produced the samples. It is not a saved collection of camera photographs.
These references are sensitive biometric data even though they are numbers. A model change can make an old reference incompatible; the Face page then asks for recapture.
The file and its key live in different places
Enrollment is encrypted in ~/Library/Application Support/lunlo/face-identities.enc. macOS Keychain holds the encryption key and a separate encrypted copy of the saved Mac password. Copying the application alone does not copy this complete setup.
The enrollment file uses the same local encryption key as the saved password. Manually deleting that key can leave existing enrollment unreadable, which is why removal belongs in the app's controls.
Unlocking the local session is a separate step
Unlock session authorizes access to the local vault through macOS user authentication, using Touch ID or the Mac password. Signing in to a Lunlo account does not replace that authorization.
A locked session keeps the Face page from exposing its enrollment controls. Locking the session or signing out of Lunlo does not delete the stored file. Read the removal guide when deletion is your goal.
Disable, recapture or delete an identity
In the Face tab, an identity's switch excludes it from matching while keeping its enrollment. Recapture replaces that identity's samples after the new enrollment is saved. The trash control opens a confirmation with Delete.
These actions have different purposes: temporarily stop matching an identity, update its reference, or remove it from the saved enrollment. Check for an error before assuming a change persisted.
Local recognition still has an online access check
The account service receives sign-in and membership requests, not the face samples or saved Mac password. Account tokens use separate Keychain storage. There is no implemented account-based restoration of your face enrollment onto another Mac.
Read why internet access is required and the privacy notes for the separate roles of local data, accounts and billing.