Last updated 12 September 2018
THIS STATEMENT SHALL BE APPLIED IN EXEPTIONAL CASES AS EXPLICETELY SPECIFIED IN THE APP.
From time to time upon Your consent only we may collect, store, create a dataset, transfer or process Your personal information (Your facial images) in any other manner communicated to You directly:
- We will collect only the minimum amount of Your images required to achieve the specified purpose.
- We will do our utmost to collect, process, store and transfer Your images in an effective and responsible manner.
- We may sell dataset based on Your images upon Your explicit consent to third parties to be used for research purposes.
- In keeping with the key privacy protection principle “the right to be forgotten”, Banuba will maintain Your personal data only as long as necessary. Should we receive a request that You wish Your images and the respective dataset to be deleted from the record, we will do so.
- Please DO NOT GIVE YOUR CONSENT if You do not wish Your images to be collected, stored or sold to 3rd parties recipients.
HOW BANUBA COLLECTS YOUR IMAGES
When You open the App We may ask for Your explicit consent to collect and transfer Your facial image to 3rd party recipient for research purposes. By clicking AGREE, You will provide Us with three facial images. We will then introduce beautification changes into the provided images of You using our facial recognition technologies and make a dataset of Your initial image and modified image.
WHAT WE DO WITH YOUR DATA
The dataset shall be stored on Banuba’s data servers until We transfer the dataset to 3rd party recipient for the purpose specified when we collected the explicit consent from You. As soon as the dataset is transferred to 3rd party recipient, that dataset shall be erased from our servers and will not be restored. The retention period on our data servers shall not exceed 3 months after You grant a consent to Us. The dataset shall be erased by 3rd party recipient upon its research goal accomplishment.
As we do not verify Your identity, it is Your responsibility to warrant that it is Your user content You are uploading and no third party’s content is collected and processed in the App.
2. Information collected
Our Apps are intended to create a unique augmented reality user experience using facial recognition technologies and machine learning tools. To make our Apps work well for You, We offer tools that apply filters and video effects fitting the contours of Your face, modifying the size and shape of facial features and following facial movements in videos. In order to enable these services, We have to distinguish patterns of shape and form that compose a digital image of a still or moving face. For this purpose, We may ask You to provide us and upload to the App Your face image (picture or video) captured by the camera of Your mobile device before You start using relevant tools of our App.
We do not collect, process or store the face image. It is kept at the App to let You put available masks and filters on top of other Your User Content (as defined in the Terms and Conditions) when accessing any available augmented reality functionality in the Apps.
We will ask for Your separate permissions to use Your camera and microphone, as well as for sending push notifications to You. If You change Your mind, re-permissions are provided. You will be able to revoke them any time afterwards by changing settings on Your Device or by e-mailing your request to firstname.lastname@example.org. However, please note that rejecting or switching off these permissions might negatively affect the use of our Apps or even effect its full functionality.
We use TrueDepth API technologies (ARKit, with automatic estimation of the real-world directional lighting environment) to create AR effects within the App. We do not share information with third parties, do not store or process in any other way the data which we accessed and used via TrueDepth API. For more information about TrueDepth API technologies you may visit https://support.apple.com/en-us/HT208108.
We are absolutely committed to Your privacy, so we guarantee that we will use Your personal information only in purposes as described below and collect only that information which is necessary for such purposes.
2.1 Information We Collect
2.1.1 We do not collect any information which identify or allows to identify You, unless You voluntarily provide Us with such data (in particular, when communicating with Our support team, leaving feedback re Your experience with the Apps). In particular, We do not collect Your name, e-mail, telephone number, any persistent online identifiers (like, advertising ID).
2.1.2 As the App functionality is fully based on face detection, in order to use the App We shall need the App to process Your images taken by the Device camera. However, all the images taken or videos filmed by the camera shall be processed solely on Your Device and shall not be sent to Our servers, i.e. We shall have no access to such images (We shall not collect, share or store them).
2.1.3 The App face detection algorithms used within processing of Your images are not able to identify a specific person and, therefore, generally cannot be considered as collecting biometric information. However, in case the applicable law stipulates that images captured by the camera or face geometry generated by the App are considered as biometric identifiers, biometric information or similar legal category, hereby You express Your informed written consent on their processing as described in this Policy.
2.1.4 In case We start collecting data enabling identification of You or users of Your Devices, We shall first ask for Your express consent for such collection and further processing.
2.2 Information Collected by Third-Party Providers
2.2.1 For the purposes of attribution and tracking the performance of Our advertising campaigns and applications, including their effectiveness, usage, installations and downloads, We may engage advertising and analytics third party providers (hereinafter – Providers), currently the following Providers are being engaged:
|Provider||Provider’s Data policy|
To see the list of open source licenses used please follow the link: https://banuba.com/oss-app
2.2.2 The Providers may collect the following personal information about users of the Devices: IP address, device ID, advertising IDs assigned by Our Providers, browsing behavior and location data. Such information shall be collected directly by Providers and subsequently shall be shared with Us. The Providers may combine such information with other personal information they have in their procession and may use it for targeted advertising, i.e. for showing the most relevant ads to You across Internet network.
2.2.3 Personal data mentioned in Clause 2.2.2 shall be collected solely upon receipt of Your explicit consent, which is given by clicking an “AGREE” button available in the App.
2.2.4 It is at your discretion to choose if You are willing to grant a consent. You still may use the App if You choose not to.
2.2.5 Besides statistics data collected by the Providers, the data on how You are using the App will be accessible. These data will not be personalized or linked to device You are using. These data are needed to enable proper operation of the App, in particular to identify and fix the problems You are facing when using the App.
2.2.6 To enable operation of the App a specific identifier to the statistics and usage data may be generated by some Providers. This identifier is specific for each App (i.e. it is not the same across multiple applications, like advertising ID). This identifier permits Us solely to identify that events of using the App belong to the same user, however does not let it possible to identify that user.
2.2.7 Other data about Your Devices that do not permit direct association with You or other individuals, such as the operating system, settings, language, wireless network, mobile network information, software and hardware attributes may be also collected by our Providers.
2.2.8 We do not directly collect personally identifiable information about Your online activities over time and across third-party websites or online services, but such information is collected by Our Providers which may share it with Us. Our Providers generally do not respond to Do Not Track (DNT) signals or other mechanisms that provide You with the ability to exercise choice regarding the collection of such information. Nevertheless, if You want Us not to use, or to stop using, such Providers in relation to You, please do not give, or withdraw, Your consent mentioned in Clause 2.2.3 by simply turning off the switcher in the Settings menu of the App.
3. Basis for processing
3.1 Processing of Your data, mentioned in Clause 2.1.2., is required for the provision of Services to You.
3.2 Processing of Your personal data, mentioned in Clause 2.2.2., is based on Your consent to such processing, which is given by clicking an “AGREE” button available in the App. By giving Your consent to processing of Your personal data for advertising and analytics purposes You agree to:
- collection of personal data mentioned in Clause 2.2.2;
- collection of information about Your online activities as described in Clause 2.2.7;
- processing of Your personal data for the purposes mentioned in Clause 4.2;
- automated decision making in accordance with Clause 4.5;
- sharing of Your personal data with advertising and analytics third party providers (Clause 5.1).
3.3 You can withdraw Your consent to processing of Your personal data (where We are relying on consent to process Your personal data) at any time by simply turning off the switcher in the Settings menu in the App. If You deleted the App and, as a result, cannot withdraw You consent via the Settings menu in the App, You may withdraw Your consent by contacting Us via email@example.com.
4.Purposes of processing
- delivering the Services to You (including, maintaining and monitoring the proper operation of the App, fixing any problems in its operation, dealing with Your enquiries, complaints and requests);
- ensuring and protecting the safety and security of the App, protecting Our Intellectual Property Rights and other rights;
- conducting statistical and analytical surveys and researches, in particular for improving the Services and Your user experience.
4.2 Personal data mentioned in Clause 2.2.2. shall be processed by Our Providers for the purposes of:
- attribution and tracking the performance of Our advertising campaigns and applications, including their effectiveness, usage, installations and downloads;
- targeted advertising, i.e. for showing the most relevant ads to You across Internet network.
4.3 In case You voluntarily provide Us with any additional personal data, We shall process these data solely for the purposes for which they were provided to Us and for no longer they are needed to fulfil such purposes.
4.5 In case You give Your consent mentioned in Clause 3.2, the information collected via the App shall be used for automated decision making, as Our Providers perform their advertising and analytics services based on automated analysis of Your browsing behavior. As a consequence of automated decision making:
- You will receive advertisements throughout the Internet which the system considers the most relevant to You, and
- We shall set certain preferences within Your usage of the App (e.g. apply different prices).
In case You don’t want to be subject to automated decision making please do not give Your consent mentioned in Clause 3.2.
4.6 You can always limit collection of Your data used for targeting by managing Your mobile devices:
On Your iPhone, iPad, or iPod touch:
- Go to Settings > Privacy > Advertising.
- Turn on Limit Ad Tracking.
On Your Android:
- Open your device's Settings app > Google, or open the Google Settings app (differs depending on your device).
- Under “Services,” select Ads.
- Turn on “Opt out of Ads Personalization” by moving the switch to the right until it turns blue.
Note: If you clear your cache, you'll lose your opt-out setting.
Once you've turned off personalization, Google will no longer use your info to personalize your ads. Ads can still be targeted with info like your general location or the content of the website you’re visiting.
4.7 We will ask for Your separate permissions to use Your camera and microphone, as well as for sending push notifications to You. If You change Your mind re permissions granted, You will be able to revoke them at any time afterwards by changing settings on Your Device. However, please note that rejecting or switching off these permissions shall negatively affect the use of the App: the App shall lose its full functionality.
5. Sharing of data
5.1 As We do not collect, store or process Your personal data in any other manner, We do not share Your personal information with other parties. However, information collected by our Providers as described in Clause 2.2 when this is needed for the purposes of processing may become available for the following categories of recipients:
- the companies being in the same corporate group with Us;
- data storage, networking and security providers;
- advertising and analytics third party providers (upon Your consent only).
5.2 We may also share some non-personal information with Our Providers when this is needed the purposes outlined in Clause 4.2.
5.3 We may also share Your data when it is required by law and/or any regulatory authority. In such circumstances, We will expressly inform the recipient of the confidential nature of the data shared.
5.4 Our third-party providers and other recipients with whom We share Your data or which directly collect such data via integration with the App may be located in non-EEA countries, where data protection and privacy regulations may be different from Your home country and offer even lower level of protection. You acknowledge and give Your consent to such transfer and processing of Your data out of EEA to the countries where data protection and privacy regulations may be different from Your home country and offer even lower level of protection. To safeguard Your interests when transferring Your personal data out of EEA, We will conclude with all out-of-EEA recipients standard data protection clauses adopted by the European Commission or Our supervisory authority.
5.5 All the third parties with which We may share Your data only get the minimum amount of data that are reasonably required in order for them to provide their service to Us and therefore to You. The use of the shared information by such third parties is strictly limited to the purposes of processing outlined in Section 4 and is not permitted for any other purpose. All third parties with which We share Your data are required to protect such data in accordance with all relevant laws and regulations and in a manner similar to the way We protect the same.
5.6 We will not share Your data with third parties which are considered as not being able to provide its clients and potential client with the required level of protection.
6. Your rights
6.1 With respect to Your personal data We process (if any) You have the right:
- to obtain from Us the information regarding Our processing of Your personal data;
- to obtain from Us without undue delay the rectification of inaccurate personal data concerning You;
- to obtain from Us the erasure of Your personal data (Your ‘right to be forgotten’);
- to restrict Our processing of Your personal data, when it is permitted under applicable law;
- to obtain from Us Your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller without any obstacle on Our side;
- to withdraw Your consent to Our processing of Your personal data (where We are relying on consent to process Your personal data) by following the procedure described in Clause 3.3;
- to lodge a complaint against Us with a supervisory authority for GDPR purposes.
7. Period of processing
7.1 We shall store Your personal data (in case having any) for no longer they are needed for the purposes for which You provided them to Us, unless You give Us Your explicit consent to process them for a longer period of time.
7.2 With respect to non-personal data We are not limited by any particular retention period.
9. Questions and complaints
9.2 If You consider that Our collection, usage, disclosure and/or storage of Your personal information violate any applicable data protection laws We are bound by, please refer Your complaints to firstname.lastname@example.org. We will consider them within reasonable time and provide You with an answer.