Biometric Data Retention and Destruction Policy

Last updated: 02.11.2026

This Policy explains how Genza Inc. (“GENZA”, “we”) collects, uses, retains and destroys biometric identifiers and biometric information. It applies only where a verification feature creates or compares a scan of face geometry or another biometric identifier, and is intended to meet the requirements of the Illinois Biometric Information Privacy Act, Texas Business and Commerce Code § 503.001 and similar laws.

1. What we collect and why

When you choose to complete photo or selfie verification, you take a selfie in the App. Our verification service provider, Veriff OÜ (Tallinn, Estonia), acting on our behalf, performs a passive liveness check to confirm that a live person is in front of the camera and returns the result and a liveness score; we then compare the selfie with your profile photos. This may involve creating a scan of your face geometry. We use this data only to verify that you are a real person and that your profile photos are yours, to confirm that you meet our age requirement, and to prevent fraud.

What we collect and share. We collect: the selfie image, the liveness score, the comparison result and the date, time and session identifier of the check. We share this data only with the provider named above, which processes it on our instructions in the European Union, and we do not share it with anyone else except as stated in Section 3.

Before any biometric data is collected, we tell you in writing that it will be collected, the specific purpose and how long it will be kept, and we ask for your consent (a written release, which you may give electronically). You give your consent on a separate screen in the app before the camera is switched on. Verification is voluntary; if you decline, the verification feature and features that depend on it (for example, the “verified” badge) are unavailable, and you may ask our support team for an alternative, manual verification. You may withdraw your consent at any time by writing to support@genza.io; withdrawal does not affect processing that took place before it.

3. No sale or other disclosure

We do not sell, lease, trade or otherwise profit from your biometric data. We disclose it only to our verification provider acting on our behalf, or where disclosure is required by law or by a valid warrant or subpoena.

4. Retention schedule and destruction

Biometric data is permanently destroyed when the verification purpose for which it was collected has been satisfied.
The selfie image is destroyed within [30] days after the verification decision; the liveness score, the comparison result and the session identifier (without images) are kept while your account exists to show that you are verified. In any event all biometric data is destroyed no later than 3 years after your last interaction with GENZA, or within any shorter period required by applicable law.
If you delete your account or withdraw your consent, we destroy it without undue delay.
The provider does not keep the selfie after the check is completed [confirm Veriff retention setting]. A record of your consent (the text you agreed to, its version, the date and time) is not biometric data; we keep it for 5 years after your last interaction with GENZA to show that consent was given.

5. Security

We store, transmit and protect biometric data using a reasonable standard of care and in a manner that is the same as or more protective than the manner in which we protect other confidential and sensitive information. Access is limited to named personnel on a need-to-know basis. If biometric data is affected by a security incident, we handle it under Section 10.4 of the Privacy Policy and notify you and the competent authorities where the law requires.

6. Contact