Biometric Notice & Consent

This Biometric Notice and Consent (“Notice”) explains how Uare.ai, Inc. (“Uare.ai,” “we,” “us,” or “our”) collects, uses, stores, and destroys biometric information when you use our website at https://www.uare.ai/, our mobile applications, and related services (the “Services”). It supplements our Privacy Policy and is incorporated into our Terms of Service. Capitalized terms not defined here have the meaning given in those documents.

We provide this Notice to comply with applicable biometric privacy laws — including the Illinois Biometric Information Privacy Act (“BIPA”) and similar laws in other U.S. states — and to give you a clear, plain-language explanation of how your biometric information is handled.

1. What we mean by biometric information

For the purposes of this Notice, “biometric information” and “biometric identifiers” include:

• Voiceprints — mathematical representations of the unique characteristics of your voice, derived from audio samples you submit.
• Facial geometry data — measurements derived from photos or videos of your face used to model your likeness.
• Any other biometric identifier or biometric information regulated by applicable law that we collect or generate from samples you provide.

Biometric information does not include the underlying photos, videos, or audio recordings themselves; those are governed by our Privacy Policy as part of your User Content.

2. Why we collect biometric information

We collect and process biometric information solely for the purpose of providing the Services to you, including to:

• Build, train, and personalize your Individual AI so it can speak, respond, and appear in a way that reflects you;
• Generate synthetic voice and likeness outputs that you authorize your Individual AI to produce;
• Verify that the person enrolling biometric information is the same person depicted (proof-of-person safeguards);
• Detect and prevent unauthorized impersonation, deepfakes, and fraud; and
• Maintain the security and integrity of the Services.

We do not use your biometric information to train foundational or shared AI models, and we do not sell, lease, trade, or otherwise profit from it.

3. How we obtain your consent

Before we collect, capture, or otherwise obtain your biometric information, we will:

• Inform you, in writing, that biometric information is being collected or stored;
• Inform you, in writing, of the specific purpose and length of term for which the information is being collected, stored, and used; and
• Obtain your written, informed, opt-in consent — typically through an in-product checkbox, signature, or equivalent affirmative action.

You may withdraw your consent at any time by following the steps in Section 7.

4. How long we retain biometric information

We retain biometric information only as long as necessary to provide the Services to you. Specifically, we will permanently destroy your biometric information when the first of the following occurs:

• The initial purpose for collecting or obtaining the biometric information has been satisfied — for example, when you delete the associated voice configuration, avatar, or Individual AI; or
• Within three (3) years of your last interaction with the Services, as required by BIPA.

We may retain certain limited records as required by law (for example, to defend legal claims or comply with regulatory obligations), but those records will not include biometric identifiers usable to re-identify you.

5. How we store and protect biometric information

We store biometric information using reasonable organizational, technical, and administrative safeguards designed to protect it from unauthorized access, disclosure, alteration, or destruction. These safeguards are at least as protective as the safeguards we use for other confidential and sensitive information of a similar type, and include, at minimum:

• Encryption in transit and at rest;
• Access controls limiting access to authorized personnel;
• Containerized, per-user storage architecture;
• Audit logging of access to biometric data; and
• Periodic security reviews and incident response procedures.

No security program is perfect; while we work to protect your information, we cannot guarantee absolute security.

6. Disclosure to third parties

We do not sell, lease, trade, or otherwise profit from your biometric information. We will not disclose, redisclose, or otherwise disseminate your biometric information to any third party unless one of the following applies:

• You give us your separate, written, informed consent;
• The disclosure completes a financial transaction you have requested or authorized;
• The disclosure is required by federal, state, or local law or regulation; or
• The disclosure is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.

We may share biometric information with service providers who process it on our behalf and only for the purposes described in this Notice. Those providers are contractually bound to protect biometric information at least as strictly as we do and may not use it for their own purposes.

7. Your choices and how to withdraw consent

You can review, update, or delete the voice configurations, avatars, and Individual AI components that depend on your biometric information at any time through your account settings. Deleting an Individual AI deletes the associated biometric information from our active systems within a commercially reasonable period.

To withdraw consent for further collection or use of your biometric information, or to request deletion outside of the in-product flow, contact us at privacy@uare.ai. Withdrawing consent will end our use of your biometric information going forward; it will not affect the lawfulness of processing carried out before your withdrawal.

8. Children

The Services are not directed to users under 18, and we do not knowingly collect biometric information from children under 18. If you believe a minor has provided biometric information to us without appropriate consent, please contact us at privacy@uare.ai so we can investigate and, if appropriate, delete the information.

9. Changes to this Notice

We may update this Notice from time to time. If we make material changes, we will update the date of last revision at the top of this page and provide notice through the Services or by email where required by law. Continued use of the Services after the effective date of any update constitutes acknowledgment of the updated Notice.

10. Contact

Questions about this Notice or about how we handle biometric information? Contact us at privacy@uare.ai, or write to:

Uare.ai, Inc.
2625 Middlefield Rd
Palo Alto, CA 94306
Attn: Legal

11. Written consent

By checking the consent box, signing the in-product consent flow, or otherwise affirmatively indicating your agreement, you acknowledge that you have read this Notice and provide your written, informed, opt-in consent for Uare.ai to collect, capture, store, use, and destroy your biometric information as described above for the purposes set forth in Section 2, for the period set forth in Section 4. You understand you may withdraw this consent at any time as described in Section 7.