This policy provides specific information about how Selfish Software Ltd. ("we") processes biometric data when you use our facial recognition feature. This policy is part of our main Terms of Service and Privacy Policy.

1. HOW OUR FACIAL RECOGNITION WORKS

Our Service operates in two distinct stages:

Stage 1: Index Creation (by Event Host's instruction): When an Event Host uploads photos, our system, using Amazon Rekognition, scans every photo to detect faces. For each face, it creates a secure, numerical representation of its unique geometry (a "faceprint" or "biometric identifier"). These identifiers are stored in a secure index specific to that event.

Stage 2: Guest Matching (by Guest's consent): When you, as a Guest, upload a selfie, we create a temporary faceprint from your selfie. This temporary faceprint is then compared against the stored index from Stage 1 to find matching photos.

2. COLLECTION AND USE OF BIOMETRIC DATA

Biometric Index Data (from event photos): The creation and storage of this index is done on behalf of the Event Host. Its sole purpose is to enable the photo matching service for that specific event.

Guest Selfie Data: Your selfie and the temporary faceprint created from it are used one time only to perform the search against the event's index.

Limited Use: Your biometric data is not used to identify you to anyone else, for marketing, for training AI models, or for any other purpose outside of providing this specific Service.

3. CONSENT AND WRITTEN RELEASE

By checking the consent box and affirmatively clicking the button to upload your selfie, you acknowledge that you have read this policy and you are providing your explicit, informed consent and a written release for Selfish to collect and process your biometric data from your selfie for the sole, time-limited purpose described in Stage 2 above.

You understand that your consent is voluntary and you can refuse to provide it, though this will mean you cannot use the photo-matching feature. The Event Host is separately responsible for having the legal right to have the Biometric Index created from their event photos.

4. DATA RETENTION AND DESTRUCTION PROTOCOL

Our commitment is to minimize the retention of your sensitive biometric data.

Guest Selfie and Temporary Faceprint: IMMEDIATELY and PERMANENTLY DESTROYED after the one-time search for your photos is complete. We do not store, archive, or back up your selfie data.

Biometric Index Data (from event photos): This index is stored securely for the duration of the event's active period (up to one year) and is permanently destroyed when the Event Host deletes the event or at the end of the retention period.

5. DISCLOSURE & SECURITY

We do not sell, lease, trade, or otherwise profit from your biometric data. This data is disclosed only to our sub-processor, Amazon Web Services, for the technical purpose of creating the index and running the facial recognition search. All processing occurs within a secure, encrypted environment.

Selfish Software Ltd. - AI & Biometric Data Policy