Biometric Data Processing Authorization

1. Data processed

Numeric representations (vectors) of the faces detected in photo thumbnails, the crop of each face, and the groups of similar faces. Original files are not analyzed.

2. Sole purpose

To group the photos in which the same person appears within my albums and let me find and organize them. Loomdy will not use this data to identify people outside the service, for advertising, to build profiles or to train artificial-intelligence models, and will not sell or transfer it to third parties.

3. Optional

I have been told that, because this is sensitive data, I am not required to authorize its processing, and that saying no does not stop me from using Loomdy.

4. Scope

Suggested face groups are visible to each album's members. The names and relationships I assign are private to my account. In an album with several owners, faces are analyzed only if every owner has given this authorization.

5. Other people and minors

I confirm that I have the permission of the people who appear in the photos I upload or, if they are children or teenagers, that I am their legal guardian or have the guardian's permission, and that the processing serves their best interest. I understand that anyone who appears in my photos can ask Loomdy to delete their face data.

6. Where it is processed

On Loomdy's infrastructure hosted on Amazon Web Services in the United States, a country the Colombian Superintendence of Industry and Commerce recognizes as having an adequate level of protection. No outside artificial-intelligence provider receives my photos.

7. Retention and destruction

Face data is kept while the authorization is in force, the photo exists and my account is active. It is deleted within 30 days at most in any of these cases, unless there is a legal duty to keep it:

• I revoke the authorization (turning face recognition off counts as revoking it);
• I delete the photo, the album or my account;
• 3 years pass without activity on my account.

8. My rights

Under article 8 of Law 1581 of 2012, I can:

• access, update, correct and delete my data;
• request proof of this authorization;
• be informed about its use;
• revoke it at any time;
• file complaints with the Superintendence of Industry and Commerce.

If I live outside Colombia, I also have the rights my country's law gives me, including a complaint to its data protection authority. I can exercise my rights in the app (Profile → Privacy & data) or by emailing legal@loomdy.com.

9. Data Processing Policy

I know Loomdy's Personal Data Processing Policy, published at https://www.loomdy.com/privacy-policy The date and time of acceptance, the channel and the app version are recorded as proof of this authorization.