Biometric Data Notice and Consent

Dear Bestie verifies that every member is a real, of-age woman. To do this, our verification partner, Didit, checks a government-issued photo ID and a live selfie, and compares the two using facial-recognition technology to confirm they are the same person. Because that comparison uses a scan of your facial geometry, it may involve "biometric identifiers" and "biometric information" as those terms are defined under laws including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and Washington law. This notice explains what we collect, why, how long it is kept, and how it is destroyed — and asks for your consent before any of it happens.

During verification, the following may be processed:

• A scan of the facial geometry contained in your live selfie;
• A scan of the facial geometry contained in the photo on your government ID;
• The comparison result confirming whether the two match.

Your biometric data is used for one narrow set of purposes only:

• To confirm you are a real person and are 18 or older;
• To confirm your identity and reduce impersonation, duplicate accounts, and fraud;
• To support the safety of our women's community.

We do not use your biometric data for advertising, we do not sell it, and we do not use it to build any profile beyond confirming your identity.

Biometric processing is performed by our verification partner, Didit, acting on our behalf. Didit's handling of this data is also governed by its own privacy policy at didit.me/privacy. Dear Bestie does not sell, lease, trade, or otherwise profit from your biometric data, and does not disclose it except: (a) to Didit to perform verification; (b) with your consent; or (c) as required by law or valid legal process.

Dear Bestie does not retain your government ID image or your selfie after verification is complete. Once verification finishes, Dear Bestie keeps only a pass/fail status and a hashed identifier linking your account to a completed verification — not the underlying images or facial scans.

Any biometric identifiers or biometric information handled during verification are permanently destroyed at the earliest of: (a) when the purpose for collecting them has been satisfied — i.e., upon completion of verification; (b) within one year of your last interaction with Dear Bestie; or (c) as otherwise required by applicable law. Didit retains and destroys the verification data it holds in accordance with its own published retention schedule and applicable law.

By tapping to begin verification and by checking the consent box presented to you, you provide your written release and consent for Dear Bestie and Didit to collect, process, and store your biometric data as described in this notice. Verification is required to use Dear Bestie; if you do not consent, you will not be able to complete verification or access the community.

You may request information about, or deletion of, the limited verification records Dear Bestie holds by emailing hello@dearbestie.app, subject to our fraud-prevention and legal-retention obligations. Depending on where you live, you may have additional rights described in our Privacy Policy.

Dear Bestie LLC, Attn: Privacy Officer, 777 Brickell Ave Suite 500, Miami, FL 33131
Email: hello@dearbestie.app