Privacy Policy

1. Information We Collect

We collect the following types of information when you use our Service:

Personal Information

• Full name
• Email address
• Date of birth
• Account password (encrypted)

Biometric Data

• Fingerprint images (all 10 fingers)
• Enhanced/processed fingerprint images
• Image quality metrics and validation scores

Device Information

• Device type and model
• Browser type and version
• Camera specifications
• IP address

2. How We Use Your Information

Your information is used for the following purposes:

• Account Management: To create, maintain, and secure your account
• Fingerprint Processing: To capture, enhance, and store your fingerprint images
• Analysis Services: To facilitate review by certified specialists
• Service Improvement: To improve our fingerprint capture algorithms and user experience
• Communication: To send you important updates about your account and analysis results
• Security: To detect and prevent fraud, abuse, and unauthorized access

3. Biometric Data Protection

We recognize that fingerprint data is highly sensitive biometric information. We implement the following protections:

• Access Control: Only authorized specialists can access your fingerprint data for analysis
• Data Isolation: Your biometric data is stored separately from your personal information
• Retention Limits: Fingerprint data is retained only as long as your account is active
• Secure Deletion: Upon account deletion, all fingerprint data is permanently and irreversibly removed

4. Data Sharing

We do not sell your personal or biometric data. We may share your information only in the following circumstances:

• Certified Specialists: Fingerprint data is shared with our network of certified analysts for review
• Service Providers: Trusted third parties who assist in operating our Service (e.g., cloud hosting)
• Legal Requirements: When required by law, court order, or government regulation
• Safety: To protect the rights, safety, or property of our users or the public

5. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of your personal and fingerprint data
• Correction: Update or correct inaccurate personal information
• Deletion: Delete your account and all associated data at any time
• Withdrawal: Withdraw consent for fingerprint data processing
• Portability: Request your data in a portable format
• Objection: Object to certain types of data processing

To exercise any of these rights, please contact us at support@serenefuturebrains.com or use the account settings in the app.

6. Data Security

We implement comprehensive security measures including:

• HTTPS encryption for all data transmission
• Secure password hashing (bcrypt)
• Regular security audits and vulnerability assessments
• Access logging and monitoring
• Employee training on data protection
• Incident response procedures

7. Cookies and Tracking

We use essential cookies to maintain your session and authentication status. We do not use tracking cookies or third-party analytics that collect personal information. Your fingerprint capture activity is not tracked for advertising purposes.

8. International Data Transfers

Your data may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for any international data transfers, including compliance with GDPR requirements for transfers outside the European Economic Area.

9. Data Retention

We retain your data for as long as your account is active. After account deletion:

• Fingerprint images: Immediately and permanently deleted
• Personal information: Deleted within 30 days
• Anonymized usage statistics: May be retained for service improvement

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and, where appropriate, sending you an email notification. We encourage you to review this policy periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

12. Regulatory Compliance

This Privacy Policy is designed to comply with:

• General Data Protection Regulation (GDPR) - European Union
• California Consumer Privacy Act (CCPA) - California, USA
• Illinois Biometric Information Privacy Act (BIPA) - Illinois, USA
• Other applicable data protection laws