Biometric Data Policy

Effective November 14, 2026

This policy describes how IDoSnap.com ("IDoSnap.com") handles biometric data for the optional "Find photos of me" feature. It is our public retention schedule and destruction policy, and it applies in addition to the Privacy Policy.

1. What we collect

Automatic facial matching is optional, available only on some plans and only where legally allowed (see Facial matching, privacy, and state laws). If a guest agrees to it at an Event where it is offered, we keep a reference photo they choose (a selfie or another photo of themselves), encrypted, and the list of that Event's photos they appear in. We do not keep face templates. A template (a list of numbers describing a face) is computed only in memory while photos are being compared and is discarded right after. Separately, for every Event our servers count the faces in its photos and check whether eyes look closed, to help pick the best photos. This happens in memory, identifies no one, and keeps nothing about any face except the number of faces and whether eyes looked closed. Manual People tags, which guests add by hand, are not biometric data and are covered by the Privacy Policy.

2. When it happens

Facial matching is off for every Event unless its owner turns it on, and only where IDoSnap.com has approved the way it works for that Event's location. The owner can pause it or turn it off for good; IDoSnap.com can suspend it.
Nothing is collected about a guest until that guest ticks a separate, unticked box agreeing to it. Hosts cannot consent for guests. Children are matched only with a parent's or legal guardian's consent and any verification the law requires.
Where consent is required, only people who agreed are matched. Some photos with other people in them may not be matched for that reason.
Matching stops when the Event's upload window closes. It never runs across Events: agreeing at one Event does not enroll you at another.

3. Why

Only to show a consenting guest the photos of that Event they appear in, and, if they choose, to let the Event's hosts or other guests find those photos. Uncertain matches are shown only to the guest to confirm. Reference photos are never used for any other purpose, any other Event, or to identify anyone else.

4. No sale or disclosure

We do not sell, lease, trade or otherwise profit from biometric data, and we do not disclose it to anyone, including the hosts. The matching runs on our own servers, not through a third-party face recognition service. We would disclose biometric data only if the guest asked us to or if required by law, a warrant or a subpoena.

5. Retention and destruction schedule

We delete a guest's reference photo at the earliest of:

when the guest withdraws (Me & People → "Stop facial matching") or asks us to;
when the owner permanently disables facial matching for the Event, or deletes the Event;
when the Event's upload window closes.

Withdrawing also removes that guest's automatic matches at once. Photos tagged by hand are separate and stay unless the guest removes those tags. Deleted reference photos can remain in our access-restricted backups until those backups expire (at most 14 days); they are never restored for use. In every case this is well before the initial purpose has been satisfied plus one year.

6. How we protect it

Biometric data is stored and transmitted using the same or more protective measures we use for other confidential information: HTTPS connections, restricted server and database access, and storage only on our servers in the United States.