Biometric Data Policy
Rated uses artificial intelligence to analyze your facial image and generate a score and self-discovery report. Because this process involves biometric data, we are required by law — including the Illinois Biometric Information Privacy Act (BIPA) and similar state laws — to provide you with a written policy explaining how we collect, use, store, and destroy biometric information.
1. What We Collect
When you submit a photo for scoring, we collect:
- Your facial image (photograph)
- Biometric measurements derived from that image, including facial geometry, proportions, and symmetry measurements used to generate your score
- Your derived score and self-discovery insights
Your raw facial images are not stored after processing is complete. Only the derived score and insights are retained in your Rated account.
2. How We Use It
We use your biometric data solely to generate your Rated score and self-discovery report. Specifically:
- Your facial image is transmitted to our AI partner, OpenAI, solely for analysis and score generation
- OpenAI processes the image under our data processing agreement and does not retain it for model training
- We do not sell your biometric data
- We do not use your biometric data to train AI models
- We do not share your biometric data with third parties for any purpose other than score generation
3. Consent
Before your first scan, we display a consent screen with the following disclosures. By tapping “I Agree & Continue,” you consent to:
- Collection of your facial image and the biometric measurements derived from it, including facial geometry and proportions
- Processing of your facial image by our AI partner, OpenAI, solely to generate your score
- Storage of your score and derived insights in your Rated account until you delete them
By continuing, you also confirm that the photo you submit is of you and does not depict anyone other than yourself.
Consent is recorded with a timestamp, your user ID, consent version, platform, and app version. These records are retained for the life of your account plus seven (7) years as required by law.
4. Re-Consent
We will ask for your consent again if:
- You have not previously consented (new account or consent record missing)
- Our biometric practices change materially and we release a new consent version
- You previously withdrew consent and attempt to use the scoring feature again
5. Retention & Destruction Schedule
When you delete your account or withdraw biometric consent, all stored scores, insights, and biometric-derived data are permanently deleted. Consent records are retained for the legally required period and then destroyed.
6. Your Rights & Withdrawal of Consent
You can withdraw your biometric consent and request deletion of your biometric data at any time by going to Settings › Biometric Data & Consent and tapping “Withdraw Consent & Delete Biometric Data.”
When you withdraw consent:
- All stored scores, insights, and biometric-derived data are permanently deleted
- Your account remains active — you are not blocked from non-scoring features
- The scoring feature is disabled until you re-consent
- Your withdrawal is logged with a timestamp
If you decline consent at the consent screen, you will be returned to the home screen. You will not be shown the consent screen again in the same session. Your account remains fully active for all non-scoring features.
7. Security
We use industry-standard security measures to protect biometric data in transit, including TLS encryption for all API calls to our AI processing partner. Raw facial images are never written to disk on our servers.
8. Contact
For questions about this policy or to exercise your rights, contact us at:
- Email: privacy@ratedapp.com
- Website: ratedapp.com/privacy-policy