Biometric Data Consent
Last updated 21 July 2026
Template — pending legal review. Not final legal text.
This document is placeholder content used during development. It does not constitute legal advice and has not been reviewed by counsel.
This Biometric Data Consent ("Consent") explains what facial biometric data Syva collects, why, how long we keep it, and how you can withdraw your permission. It supplements our Privacy Policy.
We collect biometric data only after you provide explicit, affirmative consent through an in-product action — before any collection takes place. You are never required to consent, and you may withdraw at any time.
1.What this consent covers
This Consent covers the facial images you submit and the biometric identifiers and information derived from them — including facial landmarks, geometric measurements, ratios, and the facial templates used to compute your analysis.
2.What we collect
To provide the service, we collect and generate:
- Facial images — the photos you upload for analysis.
- Facial geometry — landmark coordinates, distances, angles, and ratios derived from those images.
- Biometric templates — the mathematical representations used to produce scores and metrics.
3.Why we collect it
We collect and process this data solely to:
- Produce your facial analysis, scores, metrics, and report.
- Generate simulations and improvement recommendations you request.
- Track changes across reassessments so you can measure progress.
We do not use it for advertising, and we do not sell it.
4.No model training by default
We do not use your facial images or biometric data to train, develop, or improve models by default. Any such use would require a separate, explicit opt-in that is distinct from this Consent, and you could withdraw that opt-in at any time.
5.Storage and security
Biometric data is encrypted in transit and at rest, stored with access controls, and handled only by systems and personnel that need it to operate the service. We apply safeguards proportionate to the sensitivity of this data.
6.Retention schedule
We retain your biometric data only as long as needed to provide the service:
- While your account is active, so your reports and progress history remain available to you.
- After your account becomes inactive or is closed, biometric data is scheduled for deletion within a defined retention window (targeted at no later than 12 months), unless a longer period is required by law.
- You may request deletion at any time, which takes effect regardless of the schedule above.
7.Destruction of data
When biometric data reaches the end of its retention period, or when you request deletion or withdraw this Consent, we permanently delete or de-identify the underlying images, facial geometry, and biometric templates using reasonable technical measures.
8.No sale or unauthorized disclosure
We do not sell, lease, trade, or otherwise profit from your biometric data. We disclose it only to processors bound by contract to protect it, or where disclosure is required by law.
9.Your right to withdraw consent
You may withdraw this Consent at any time from your account settings or by contacting us. Withdrawal stops further collection of biometric data and triggers deletion of existing biometric data associated with your account. Because the analysis depends on this data, withdrawing consent will end your ability to use the core features of the service.
10.Legal frameworks
Where applicable, this Consent is intended to support compliance with biometric and privacy laws, including the Illinois Biometric Information Privacy Act (BIPA), the GDPR provisions on special-category data, and the CCPA / CPRA rules on sensitive personal information. Your rights under those laws are described further in our Privacy Policy.
11.How to exercise your rights
To withdraw consent, request deletion, or ask a question about your biometric data, contact privacy@syva.beauty or use the controls in your account settings.