Biometric Data Policy

Face signatures (only if you turn people grouping on). People grouping lets Memories gather photos of the same person. To do that, we create and store a face signature — a numeric representation of face geometry, not a picture — for faces detected in your family’s photos. The feature is off by default; no face signature exists for your family unless a member turns it on after reviewing a disclosure that links this policy.

What we never collect. We do not create voiceprints or any other voice-derived identifier — voice transcription runs with speaker identification disabled. We do not collect fingerprints, iris or retina scans, or hand geometry. We never build a face database across families or of the general public: signatures are kept separately for each family and can only ever be matched against that same family’s photos.

Plain face detection is not retention. Photo analysis may detect that a face is present (for example, to caption a photo). Detection alone stores no biometric identifier; only people grouping does, and only with your opt-in.

For exactly one purpose: grouping your family’s own photos by person, so your family can find moments with the people you love. Signatures are never sold, leased, traded, or shared; never used for advertising; never used to identify anyone outside your family; and never disclosed to third parties except the cloud infrastructure (Amazon Web Services) that stores them on our behalf, or where required by law.

A family’s photos show more than the person who uploaded them. When a member turns people grouping on, signatures are created for everyone whose face appears in that family’s photos, including relatives and guests who do not have a KeepSaiQ account, and including children.

We have no way to reach those people directly, so we do not pretend otherwise. Before the feature can be switched on, the member enabling it must affirm that they have permission from the adults who appear in their photos, and that they are the parent or guardian of any children who appear. That affirmation is a separate, explicit step, and we record which version of this disclosure was shown when it was made.

If you appear in another family’s photos and want any signature of you destroyed, write to hello@keepsaiq.com and we will delete it. You do not need a KeepSaiQ account to make that request.

Your family’s face signatures are permanently destroyed at the earliest of:

• You turn people grouping off. Withdrawal takes effect without any extra steps; the stored signatures are deleted.
• The photo they came from is deleted. When a deleted photo is permanently purged, its face signatures are deleted with it.
• Your family or account is deleted. The family’s entire face signature store is destroyed as part of the deletion.
• 3 years pass without any family activity. If nobody in the family adds, edits, or views anything for 3 years, the signatures are destroyed automatically — the purpose of collection is treated as satisfied. If your family becomes active again and people grouping is still on, grouping is rebuilt from your photos.

Destruction removes the stored signatures from our systems; residual copies in backups are purged on a rolling basis.

Face signatures are held inside our Amazon Web Services account in the United States, in a separate store per family, protected by the same safeguards as the rest of your family’s content: encryption in transit and at rest, and per-family access controls enforced on every request.

People grouping is opt-in and revocable at any time in the app under Settings → Privacy → Memories. Turning it off deletes your family’s stored signatures, and you can turn it back on later. Questions or requests: hello@keepsaiq.com.

If we change this policy — including the retention schedule above — we will update this page and the effective date, and for material changes we will tell you in the product.