Sensitive information

Biometric Notice

Effective August 21, 2026

1. Information a camera product may process

Depending on the experience, CookCredit may process a submitted recording and derive signals such as hand, face, or body landmarks; movement and geometry; timing and rhythm; presence or liveness signals; identity-match information; or measurements and scores generated from those signals. The capture screen must identify the information relevant to that experience.

2. Why we process it

We process camera-derived information for the purposes stated at collection, such as measuring a submitted skill session, explaining feedback, confirming that a real session occurred, protecting assessment integrity, supporting a requested verification, or improving a product when you have been given the applicable choice.

We do not use camera-derived information to make unrelated decisions about a person without a new notice and any consent required by law.

3. Notice and consent

When applicable law requires a written release or affirmative consent, CookCredit will present a separate notice before collection. It should explain what is collected, the specific purpose, whether a recording is uploaded, who may receive it, the applicable retention period, and whether any model-improvement use is optional. Visiting the company homepage is not consent.

4. No sale or profit from biometric information

CookCredit does not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information. We may use service providers to process information for CookCredit under contractual restrictions, disclose information when legally required, or make a disclosure that you specifically direct or authorize.

5. Retention and destruction schedule

CookCredit's baseline policy is to permanently destroy biometric identifiers and biometric information when the initial purpose for collection has been satisfied or within three years of the person's last interaction with the applicable service, whichever occurs first, unless a shorter period is stated or required. The point-of-collection notice may set a shorter schedule for raw recordings or a particular product.

Deletion is designed to cover active storage and to age information out of backups under the applicable backup lifecycle. Records that document consent, deletion, security, or legal compliance may be retained without the underlying biometric identifier when permitted by law.

6. Security

We use safeguards appropriate to sensitive information, including encrypted transmission, access controls, scoped service access, logging, and restricted sharing. No security measure eliminates every risk.

7. Your choices

You may decline a camera experience before capture, withdraw consent going forward where processing depends on consent, or request access or deletion subject to applicable law. A withdrawal cannot reverse processing already completed lawfully, but it stops future consent-based processing after the request is verified.

If a camera or physical movement presents an access barrier, you may request a reasonable alternative by using the contact information below.

8. Age and regional availability

Camera experiences that collect regulated biometric information are intended for adults unless a product provides a separately governed process for a minor with legally sufficient authorization. CookCredit may limit or disable a capture in a location until the required notice, consent, and operational safeguards are available there.

9. Contact

For a biometric-information request, deletion request, consent withdrawal, or accommodation, email connectwithus@cookcredit.com. Include the product you used and the email or account identifier associated with the session so we can verify and locate the request.

This company-level notice does not replace a product's point-of-collection notice or written release. If the product notice is more specific, follow the product notice for that capture.