Biometric data notice

This notice supplements the Privacy notice and explains how we handle facial images used to identify you for AI headshot generation.

What counts as biometric data here

When you upload selfies so we can generate photos that look like you, those images can be special category biometric personal data under UK GDPR.

Purpose

We process this data solely to generate, quality-check and deliver your headshots (and any agreed redo). We do not sell it, and we do not use it to train general AI models.

Consent

• We only process biometric data after you give separate, explicit consent on the consent screen.
• Consent is not bundled into the Terms checkbox and is never pre-selected.
• You can withdraw consent at any time from your account. Withdrawal does not affect processing already completed lawfully, but we will delete remaining selfies and results as soon as practicable and will not start new generation.

Retention

Selfies: 7 days (or earlier on deletion / withdrawal). Generated photos: 30 days (or earlier on request).

Your choices

If you do not want biometric processing, do not upload selfies and do not use the service. Without consent we cannot create lookalike headshots for you.