At IDDIAS Ltd, we highly value your privacy and are dedicated to safeguarding all your personal data. This Privacy Policy is intended to provide you with insights into the data we collect, use, disclose, how we process it, when it's shared, and the rights and choices you have regarding your data. We kindly ask you to carefully read this policy to FULLY understand how we use and handle your data with respect. By using our Services, you agree to the terms outlined in this policy.
1. Data Collection
We collect the following types of information:
Personal Data: Name, email address, and other contact information.
Facial Data: Images and characteristics for search functionality.
2. Data Use
We use your data to provide, maintain, and improve the services of our App. This includes:
Facilitating face characteristic searches.
Communicating with users about updates and changes to the App.
3. Third-Party Disclosure
We may share your data with third-party service providers that assist us in operating the App and conducting our business. All third parties are required to comply with our data protection standards.
4. Data Security
We implement appropriate security measures to protect your data from unauthorized access, alteration, or disclosure.
5. User Rights
By accessing the App you consent that your picture will be included in the Data App and be part of the App. You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, please contact us at info@iddias.com.
We use and collect various types of data from you to provide and enhance our Services for various purposes to provide and improve the Service to you. This data falls into two main categories:
1. Data You Provide to Us
Account Creation Data
To create an account using facial recognition, we require your profile picture, email address, phone number, first and/or last name, date of birth, country, username, role or profession.
During account creation, you may also choose to share additional data with us, such as a biography, location.
Content Data
We receive content you create when you use our Services, including but not only profile photos, photos, videos, emojis, captions, comments, messages, or geolocation. Please note that other users can copy your content and share it through other services.
Communications with us
When you contact us for support, report a concern, request assistance, or exercise your rights, we collect data necessary to assist you. This may include the content of your messages, photos, government-issued identification copies, identifiers (e.g., phone numbers or email addresses), or other relevant data.
2. Data We Collect When You Use Our Services
As is common with internet-based services, we automatically receive data about you and your device when you use our Services:
Connection and Technical Data
We collect your IP address, account creation date, last login, terminal equipment, and port data.
Interaction Data
This includes details about yourself, your friends, friend invitations, reactions, comments on others' content, and friends you interact with the most.
Usage Data
Data about your actions on our platform, including posting times, content interactions, deletions, blocking, hiding, screenshotting, application crashes, and event logs. This usage data may include information such as your computer internet protocol address (e.g. IP address), your phone ID, browser, the pages of our Service you visited.
Device and Equipment Data
Details about your device, such as device type, operating system version, language preference, and installed applications.
We may also collect additional data if you choose to use specific features of our services, such as:
Cameras and Photos Library: Enabling access to your device's camera and photo library.
Geolocation Data: Sharing your location when posting content.
Address Book Data: Allowing access to your address book to find friends on [--].
Integrations with partners: When you connect partner applications to our services, we receive data for feature integration.
We do not collect certain categories of Personal data about yourself that are not linked to the Service (This includes, but not only, details related to your religious or philosophical beliefs, sexual orientation, political opinions, information about your health nor we collect any information regarding criminal convictions or offences.
We process your individual and personal data carefully and thoughtfully to provide and improve our Services. Here are the primary purposes for which we process your data:
Operation, Improvement, and Provision of Our Services
Creating and managing your account.
Providing access to and usage of our IDDIAS app.
Personalizing your experience on the IDDIAS app.
Processing product orders and deliveries.
Enforcing our terms and policies.
Safety and Security
Ensuring your safety and the security of our IDDIAS app.
Compliance with relevant laws and regulations and best practices.
Measurement and Analytics
Measuring the effectiveness and performance of our Services.
Providing recommendations for accounts and content.
Communications
Responding to your queries, claims, or disputes.
Conducting research and product testing.
Sending important service-related messages.
Research
Gathering real user feedback for research purposes.
Letting you participate in research if you choose to.
We only share your data when it is absolutely necessary to provide our Services or when required by applicable law or regulations to enable the IDDIAS App. Here are the categories of sharing:
Our Employees
Authorized our employees may access your data to provide support and maintain our services.
Other Users
Your content is available to your friends on the app.
Service Providers
We work with partners to provide technical and hosting support, notifications, user analytics, and more. We may share your data with them to deliver our Services.
Partner Integrations
When integrating features from partner applications, we may share data to enable these features.
Legal and Statutory Purposes
We may share data to comply with legal requests or protect user safety, prevent fraud, or address specific content concerns.
Change in Ownership
In the event of a merger, acquisition, or sale of assets, we may share, sell, or transfer data about you.
IDDIAS uses facial recognition technology as a core part of the service. When you create an account or use face search, we process your profile picture to generate biometric identifiers — mathematical representations (facial feature measurements and embeddings) of your face. We use trusted cloud providers (Amazon Web Services, region EU-London) to compute and store these identifiers securely.
What we use it for
Finding lookalikes: matching your face against other users' profile pictures to show resemblance results.
Face sign-in: verifying that the person signing in matches the account's profile picture.
Age assurance: estimating age from the profile picture to enforce our minimum age of 16.
Your control
Biometric identifiers are created only from pictures you choose to provide.
We do not sell biometric data and do not share it with third parties for their own purposes.
When you delete your account, your biometric identifiers and face-search entries are permanently deleted, and so are your profile pictures — unless your account is the subject of an abuse report, in which case copies of your pictures are kept as evidence (see Account Deletion below).
IDDIAS is not intended for children. You must be at least 16 years old to create an account. We use the date of birth you provide and automated age estimation on your profile picture to enforce this. If we become aware that an account belongs to a person under 16, we will remove it. If you believe a user is under 16, contact us at support@iddias.com.
You can permanently delete your IDDIAS account at any time:
Deletion removes your profile, photos, biometric identifiers and account data, with the following exceptions:
Accounts subject to an abuse report. If your account or content has been reported for abuse (for example harassment, threats, or any conduct endangering a child), or was blocked by our automated moderation, we keep the evidence: the reported or blocked content, copies of your profile pictures, and the identifying information needed to attribute it (name, email address, date of birth, location and account dates). We keep this for as long as necessary to protect our users, to establish, exercise or defend legal claims and to cooperate with law enforcement, and we may share it with the police or other competent authorities when required or permitted by law (GDPR Art. 17(3)(b) and (e)). Your biometric identifiers are still removed from face search.
Deleted-account record (all accounts). For every deleted account we keep a minimal, locked record — your name, email address, account ID, and the dates the account was created and deleted — for 12 months after deletion. It is used only to investigate abuse reported after an account was deleted and to respond to law-enforcement requests; it is accessible only to authorised IDDIAS safety staff and is deleted automatically after 12 months (legitimate interests, GDPR Art. 6(1)(f), and Art. 17(3)(e)).
Messages you sent to other users remain in their conversations.
Our goal is to retain your data for as long as needed to provide our Services to yourself and the other users, subject to legal requirements. Here are our general retention periods:
Account Creation Data: Pictures and images included are retained indefinitely as long as you have an active account.
Content Data: Retained indefinitely or until the content is deleted by you.
Communications with us: Retained for no longer than 24 months.
Connection and Technical Data: Retained for no longer than 12 months.
Interaction Data and pictures: Retained indefinitely or until interactions are suspended or deleted by you.
Usage Data: Retained for no longer than 12 months.
Device and Equipment Data: Retained for no longer than 12 months.
Abuse-report evidence: where content or an account is reported for abuse, the reported content, copies of the account's profile pictures and the identifying information needed to attribute it are retained for as long as necessary for legal claims and cooperation with law enforcement, even after account deletion (GDPR Art. 17(3)).
Deleted-account record (name, email address, account ID, creation and deletion dates): retained for 12 months after the account is deleted, then deleted automatically.
We process your data based on various legal grounds, including contractual necessity, legitimate interests, your consent the moment you access the IDDIAS App or compliance with legal obligations. Here, we detail the legal bases for processing, the associated processing activities, and your rights.
Contractual Necessity
We use data provided by you, automatically collected data, and data related to you from other sources where it is necessary to perform the contract you enter into (our Terms) when you register for, access, and use the IDDIAS app.
Legitimate Interests
We use your data where this is necessary to achieve legitimate interests - whether belonging to us, you, or a third party - provided these interests are not outweighed by your interests or fundamental rights and freedoms.
Consent
The moment you access the IDDIAS App you give us your free and informed consent to collect, process, access or use your data for the use and operation of the app, as well as to share it with third parties in accordance with this policy. You may revoke your consent at all times by suspending or closing your account.
Compliance with a Legal Obligation
We may use your data including your profile data and pictures stored where it is necessary to comply with a legal obligation. This includes situations where we have obligations to take measures to ensure the safety of our users or comply with a valid legal request such as an order from law enforcement agencies or courts.
You have rights and choices regarding your data. These rights may be subject to certain limitations and apply in various circumstances. You can:
Access your data
Confirm the data we process about you.
Request a copy of your data.
Delete your data
Delete your content posted on your profile.
Delete your full account will be retained where only your picture.
Rectify your data
Change or correct data when it's inaccurate.
Portability of your data
Receive your data in a machine-readable format for sharing with third parties.
Object to the processing of your data
Object to processing for certain purposes.
Restrict the processing of your data
Request restrictions under specific circumstances.
We have implemented security measures that are adequate to the risk of the data being processed in accordance with industry standards.
We may transfer your data-to-data controllers, data processors or third parties located in countries not providing for an adequate level of protection. Should we carry out such transfers, we will implement adequate safeguards, such as the use of the EU model clauses for the transfer of data.
We may use data processors that will act as per our instructions and in accordance with international best practices. These data processors may be located in countries not providing for an adequate level of protection.
If you have questions or concerns about this Privacy Policy or your data, please contact us at info@iddias.com. We are here to assist you with any inquiries or requests.
In the event you are dissatisfied with our response to your rights requests, you have the option to file a complaint with the Portuguese Data Protection Commission (our lead supervisory authority) or with your local supervisory authority.