Privacy Policy for Human Liveness Verification
ImHuman App is a human likeness attestation application, offered to you by Privasea AB, without the need for us to handle or store personal data. You will create a mint unique NFT in the ImHuman App by taking a photo of yourself. Our system will convert any raw images and information to encrypted data, these vectors are securely encrypted, using Your personal key.
Your data is encrypted and stored locally on your device. We can under no circumstances decrypt the encrypted information.
You are not providing us with any personal information such as your name, phone number or address. Also, we cannot access the photo you take of yourself.
Google Workspace APIs are not utilized to develop, enhance, or train any generalized artificial intelligence (AI) or machine learning (ML) models.
Reach out to us if you have any questions regarding privacy:
Yin Jiao, support@privasea.tech, +46 729707573
Pumpgatan 1, 41755, Gothenburg, Sweden
Privasea AB, is a Swedish company, company No.559361-0941. You may contact the Swedish Authority for Privacy Protection (IMY) as set out here: https://www.imy.se/en/about-us/contact-us/
Privacy Policy for In-App Feedback Collection
Effective Date: 18 October 2024
We at Privasea AI ("we", "us") are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and process personal data of users ("Users") of our Proof of Humanity (PoH) product ImHuman (the "Service"). It also outlines your rights regarding your personal data.
As the provider of this Service and website, we are responsible for processing your personal data as a "data controller," as defined under the General Data Protection Regulation 2016/679 (GDPR). For any questions regarding your personal data or this policy, you can reach us at support@privasea.tech or by mail at Pumpgatan 1, 41755 Gothenburg, Sweden, Attention: Privacy.
Please note that the Service is not intended for individuals under the age of 18. If you are under 18, do not create an account or provide personal data through the Service.
1. Personal Data We Process, Why We Process It, and Legal Grounds for Processing
We process your personal data for the following purposes and on the following legal bases:
Applicable to All Users:
- To Analyze Issues: We use your submitted screenshots/videos to understand the problem you're experiencing with the app.some text
- Legal Basis: Consent. You will be explicitly asked for your consent before uploading any screenshots or videos. You may withdraw your consent at any time.
- To Contact You: We collect your contact details (e.g., email or phone number) to offer assistance or follow-up on your feedback.some text
- Legal Basis: Legitimate Interest. We have a legitimate interest in providing you with support to resolve any issues you may have with the Service. We have conducted a balancing test to ensure that this interest does not override your privacy rights.
- To Troubleshoot Device Compatibility: We process your device information (e.g., phone model, operating system) to resolve compatibility or performance issues.some text
- Legal Basis: Legitimate Interest. This processing helps improve the functionality of our Service for all users.
2. How We Gather Your Personal Data
We collect your personal data in the following ways:
- Information You Provide Directly: Most of the data we process comes directly from you when you fill out feedback forms or use our Service. Please ensure that any screenshots or videos you upload do not contain sensitive personal information, such as your face, identifiable locations, or other personal data. It is your responsibility to edit or remove such sensitive information before submission.
- Information We Collect Automatically: When you submit feedback, we may also collect:some text
- Issue Screenshots/Videos: To help us understand the problem, you may be asked to upload screenshots or videos.
- Contact Details: We collect your email or phone number to respond to your feedback.
- Device Information: We collect details such as phone model and operating system to help troubleshoot and improve the app’s performance.
3. Data Security
We are committed to protecting your personal data and have implemented appropriate technical and organizational measures to secure it from unauthorized access, alteration, or disclosure. These measures include, but are not limited to:
- Data encryption both in transit and at rest.
- Access controls and role-based permissions to limit access to personal data.
- Regular security audits and monitoring.
4. Data Sharing
We do not share your personal data or feedback information with third parties, except where required by law or to provide technical support related to your issue. Any third-party service providers we engage will only process your data under our instructions and in compliance with GDPR.
International Data Transfers:
We store and process personal data using Amazon Web Services (AWS), which may involve transferring data to servers located in the United States. The U.S. is a jurisdiction that may not have an adequacy decision from the European Commission regarding data protection laws. To ensure that your personal data is protected during such transfers, we rely on Standard Contractual Clauses (SCCs), which are approved by the European Commission, and other relevant safeguards to ensure that your data is processed with the same level of protection as within the European Economic Area (EEA).
AWS also implements robust security measures and adheres to GDPR-compliant practices to safeguard your data, including encryption and strict access controls.
5. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected. The retention period depends on the type of information and the reason for processing it. For example:
- Contact information related to feedback may be kept for up to six months after the issue is resolved.
- Device information may be retained for analytical purposes for up to one year.
You may request the deletion of your personal data through the Service at any time. However, after account termination, some data may be retained for up to one month for technical reasons. We may also retain certain data to protect our legal rights or comply with legal obligations.
6. Your Rights
You have the following rights regarding your personal data:
- Right to Access: You may request a copy of your personal data and information about how it is processed. The first request is free of charge; subsequent requests may incur a small fee.
- Right to Data Portability: You have the right to request the transfer of your personal data to another data controller, where technically feasible, and where the data has been processed based on your consent or a contract.
- Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data if it is no longer necessary for the purpose for which it was collected, or if you withdraw consent for processing. Please note that we may need to retain some information due to legal obligations or to protect our legal interests.
- Right to Withdraw Consent: If we process your data based on consent, you can withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
- Right to Complain: You may lodge a complaint with the relevant supervisory authority if you believe we have not complied with data protection laws.
To exercise your rights, please contact us at support@privasea.tech.
7. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities within 72 hours of becoming aware of the breach.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data collection and use practices. Significant changes will be communicated through email, within the Service, or on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
By continuing to use the Service after updates, you acknowledge and agree to the modified Privacy Policy.