Biometric Data Policy

1. What this policy covers

“Biometric data” here means a biometric identifier such as a scan of face geometry, and information based on it that we use to identify or animate an avatar. It does not include a photograph on its own, but it includes the facial geometry we derive from a photograph to build an avatar.

2. What we collect and why

• When you create an avatar, we and our service providers extract facial geometry from the image you upload.
• We use it only to build and animate your avatar, to generate your videos, and to run safety checks such as detecting prohibited content.
• Some safety checks (for example celebrity matching and age estimation) compute a facial feature in memory and discard it immediately without storing it.

3. Consent

We collect and process biometric data only after you give informed consent at avatar creation. The consent statement discloses that facial geometry may be a biometric identifier, and that it is processed and disclosed to our service providers for the purposes above. You are not required to create an avatar, and you may decline. We record the time you gave your consent and keep every version of this policy on file.

4. Disclosure to service providers

To generate avatars, we disclose your image and derived facial geometry to our avatar model host (Replicate) and model providers, who process it under data processing agreements solely to return your Output and do not use it to train models. See our Subprocessors list. We do not otherwise disclose biometric data except as required by law or with your consent.

5. No sale of biometric data

We do not sell, lease, trade, or otherwise profit from your biometric data.

6. Retention and destruction

• Biometric data used only in memory for a safety check is discarded immediately and is not stored.
• Images and derived facial geometry sent to model providers to build your avatar are deleted on the shortest necessary schedule under our data processing agreements.
• Any biometric data we store is retained only as long as needed for the purpose it was collected, and in any event no later than when the initial purpose is satisfied or within three years of your last interaction with us, whichever occurs first, consistent with BIPA. It is then permanently destroyed.

7. Storage and protection

We store and transmit biometric data using the reasonable standard of care for our industry, and in a manner at least as protective as we use for other confidential and sensitive information, including encryption in transit and access controls.

8. Your choices

You may withdraw consent and request deletion of your avatar and stored biometric data by contacting us at official@tapvid.ai or with the Report Issue button in the TapVid app. Withdrawing consent stops future processing but does not affect processing already carried out.

9. State-specific notice

Residents of certain US states (for example Illinois, Texas, and Washington) have specific protections for biometric data. This policy is intended to provide the notice those laws require; where a mandatory provision applies to you, it governs.

10. Contact

Questions about biometric data can be sent to official@tapvid.ai. This page is offered for transparency and is not legal advice.