Biometric Data Policy
Required by Illinois BIPA and Texas CUBI · Effective Aug 30, 2026
THE SHORT VERSION
✓ Written consent before anything is computed from your face
✓ Templates destroyed within 7 days, or when you withdraw consent
✓ Never sold, never leased, never traded — no exceptions
1. What we compute, and what we do not
A face template is a set of numbers derived from the selfie you take. We use it once, to match you against the photographs of one event, and we cannot reconstruct your face from it.
We do not identify you by name from your face, and we do not use it for security, attendance or surveillance.
2. Written consent comes first
Before the camera opens you are shown what will be collected, why, how long it is kept and who processes it, and you accept it explicitly. We record who consented, when, from which address and to which version of this policy.
No consent, no template. There is no way to run a Face Search without it.
3. Retention and destruction schedule
This is the permanent schedule BIPA requires us to publish.
Selfie used for a search
Destroyed within 7 days.
Face template from that selfie
Destroyed within 7 days.
Saved face (only if you opt in)
Kept until you delete it or withdraw consent, and destroyed immediately when you do.
Event face index
Deleted with the event's photographs, at most 12 months after the match.
4. No sale, no lease, no trade
We do not sell, lease, trade or otherwise profit from your biometric data, and we never will. It is not shared with the club, with advertisers or with anyone else.
The only third party that touches it is Amazon Web Services, which performs the match under contract and may not use it for anything else.
5. Your rights, and how to use them
Ask what we hold, get a copy, correct it, delete it, or withdraw consent — from your account, or by writing to privacy@picsports.io. Withdrawing consent deletes every template we hold for you.
Illinois residents: BIPA gives you a private right of action. Texas: CUBI is enforced by the Attorney General. Washington: My Health My Data applies to this data. California: it is sensitive personal information under CPRA.
6. Contact
PicSports Inc. · New York, NY · privacy@picsports.io. We answer biometric requests within 45 days.