Biometric Data Retention and Destruction Policy

What this covers

This policy applies to biometric identifiers and biometric information (together, "biometric data") that Radar Social LLC collects through Radar's optional selfie verification. It is our public written policy under the Illinois Biometric Information Privacy Act (740 ILCS 14/15(a)), Colorado's biometric rules (C.R.S. § 6-1-1314), Texas, Washington and similar laws, and it applies to every member wherever they live. It works together with our Privacy Policy.

What we collect

• Selfie video: a few seconds of video taken in the app during the check. It is streamed to Amazon Web Services for the liveness check and is never stored by us.
• Selfie image: one still image of your face that the check returns.
• Face template: face geometry made from your selfie, held for us by Amazon Web Services, and the comparisons made between it and your profile photos.

We keep the result of each check (verified, sent for review, or not verified), the scores, the time and the provider's reference number. These records aren't biometric data. We don't collect fingerprints, voiceprints, iris scans or identity documents.

Why we use it

Only to confirm that you're a live person, that you match your main profile photo, and that photos you add later are you, so members can trust the verified badge. We never use biometric data for advertising, to identify you anywhere else, to match you against other people, or for any other purpose. We compare only photos that show exactly one face, so other people in your photos are never scanned.

Consent

Before any capture, the app shows a separate screen that explains what we collect, why, who processes it, how long we keep it and how to withdraw. You consent, as your written release, by tapping "I agree and consent to the collection, storage and use of my biometric data as described". We record the version of that text, the time you agreed and the app version. If you tap "Not now", nothing is captured. Verifying is optional; some features, such as going live on Radar, plans and messages, may require it.

Who receives it

Amazon Web Services processes biometric data for us as our service provider, only on our instructions and under contract. We never sell, lease, trade or otherwise profit from biometric data, and we don't disclose it to anyone else unless you ask us to, or the law or a valid warrant or subpoena requires it.

Retention and destruction schedule

We permanently destroy biometric data at the earliest of the times below, and never later than when its purpose has been met or 12 months after your last interaction with us.

Automated jobs enforce this schedule every day. A legal hold or valid legal process can delay destruction only as far as the law allows.

Withdrawing consent and deletion requests

You can withdraw your consent at any time in the app: tap your photo, then Remove my verification. We delete your face template and any selfie image at once and remove your badge. You can also email support@onradarsocial.com with the subject "Biometric data". We answer requests within 45 days, and you can appeal a decision as described in our Privacy Policy.

Security and incidents

We protect biometric data with at least the care we use for our most sensitive information: encryption in transit and at rest, access limited to the staff who review checks, every staff view of a selfie image logged, and no biometric data in our database backups or logs. If a security incident affects biometric data, we follow our incident response plan and notify affected members and regulators as the law requires.

Annual review

At least once a year we review whether we still need each kind of biometric data for the purpose above. Anything no longer needed is deleted within 45 days of that review.