Biometric Data Policy

1. About this Policy

This Biometric Data Policy explains how Uverest handles the facial and body data we process to provide virtual try-on. It supplements, and should be read together with, our Privacy Policy (in particular the "Biometric & Body-Related Data" section) and our Terms & Conditions (in particular the "Virtual Try-On, Biometric & Body Data" section). If there is any conflict specific to biometric data, this Policy controls. The Services are offered to, and intended for, residents of the United States.

2. What we collect

To show clothes on you, we create a scan of your face and body from the photo(s) you provide. Specifically, we collect and generate:

• A scan of your facial and body geometry derived from the image(s) you upload or capture;
• Technical representations derived from that scan, such as fit and measurement data used to render your try-on; and
• The virtual try-on images we generate for you.

We refer to all of the above together as your "Body Data."

3. Possible classification as biometric data

Depending on your jurisdiction, your Body Data may be classified as "biometric information" or a "biometric identifier" under laws such as the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), the Washington My Health My Data Act, and similar state laws. Where those laws apply, we comply with them — including by obtaining your consent, limiting our use, not selling your data, and following the retention and destruction schedule in this Policy.

4. Your consent

Providing Body Data is voluntary and entirely your choice. We collect it only after you give your informed written consent, and only after that consent — never before.

• Consent screen. Before your first try-on, and before we capture or process any image, we show you a dedicated consent screen that explains, in plain language, what we collect, what it is used for, how long we keep it, who we share it with, and that we never sell it. You provide consent by tapping "I Agree." If you do not agree, we do not collect your Body Data and you can still use the rest of Uverest.
• Voluntary provision. By voluntarily choosing to use virtual try-on and providing your image(s) after consenting, you acknowledge and provide your informed written consent to our collection, use, storage, and processing of your Body Data as described in this Policy.
• Withdrawing consent. You may withdraw your consent at any time by deleting your Body Data in the app or by emailing service@mtlab.ai. If you withdraw consent, we stop processing and delete your Body Data as described in Sections 8 and 9. Withdrawal does not affect processing we carried out before you withdrew.

5. What we use it for

We use your Body Data for one purpose only: to generate, display, and improve your virtual try-on and fit previews. We do not use it to identify you, for surveillance, for security screening, or for advertising, and we do not create biometric identifiers ("faceprints") for identification.

6. Who we share it with

To build your try-on, we send your photo(s) and derived data to trusted AI partners who generate the image for us. We share Body Data only with the following, each acting solely as our processor under written contract:

• AI image providers — currently Google LLC and OpenAI, L.L.C. — which generate your try-on image;
• Amazon Web Services, Inc. (US) — for hosting and storage; and
• Our content delivery network (CDN) provider(s) — for temporary edge delivery of images to your device.

These partners may use your Body Data only to perform the try-on or hosting on our behalf. They may not keep it beyond what is necessary, may not use it to train their own models, and may not sell it or use it for their own purposes. We do not otherwise disclose your Body Data, except as required by law or with your separate consent.

7. We never sell it

We do not and will not sell, lease, trade, or otherwise profit from your Body Data. Ever.

8. How long we keep it (retention)

We keep your Body Data only as long as needed to provide virtual try-on — in practice, for just as long as you are using Uverest. We permanently destroy it when the purpose for collecting it has been satisfied, or within three (3) years of your last interaction with Uverest, whichever comes first. In addition:

• Try-on images saved privately to your Try-On Gallery are retained for up to 60 days, then deleted.
• Try-on images you publish to the public feed are retained until you delete them or remove them from the feed.
• On request, we delete your Body Data at any time — the moment you ask.

9. How we destroy it

When a destruction trigger in Section 8 is met, we permanently and irreversibly delete your Body Data from our production systems. Residual encrypted backups at our cloud provider roll off within our standard backup cycles (typically within 30 days). Our processors delete their copies in accordance with our deletion instructions and their own cache and backup cycles. Deletion is designed so that the data cannot be recovered or reconstructed.

10. Your controls

You are always in control of your Body Data:

• Delete any try-on image (public or private) directly in your Try-On Gallery.
• Delete your Body Data at any time in the app, or by emailing service@mtlab.ai.
• Withdraw consent at any time (see Section 4). We will confirm when deletion is complete.

11. Minors

Virtual try-on and Body Data processing require you to be 18 years of age or older, or to have the consent of a parent or legal guardian who reviews and accepts this Policy on your behalf. We may require verification of age or guardian consent.

12. How we protect it

We store and transmit Body Data using a reasonable standard of care for our industry, and in a manner at least as protective as we use for other confidential and sensitive information we hold. This includes encryption in transit, access controls, and monitoring. No system is completely secure; if you believe your account has been compromised, contact service@mtlab.ai.

13. Disputes

Any dispute relating to this Policy or to our handling of your Body Data is governed by the "Governing Law, Arbitration & Dispute Resolution" section of our Terms & Conditions, which requires individual arbitration and includes a class-action waiver, subject to your right to opt out of arbitration within 30 days.

14. Changes to this Policy

If we materially change how we handle Body Data, we will update this Policy, revise the "Effective Date" above, and — where required by law — obtain your renewed consent before the change takes effect.

15. Contact

Questions about this Policy or your Body Data? Email us at service@mtlab.ai.