Privacy Policy

This Privacy Policy explains how Ingenue Rights Co. (“Ingenue,” “we,” “us”) collects, uses, shares, and protects your information when you use the Ingenue iOS app and website (together, the “Service”). Ingenue is a marketplace where verified people (“scanners”) license their facial likeness, and where businesses and individuals (“buyers”) license those scans.

The Service is available worldwide to people 18 and older, except residents of Illinois. By using the Service, you agree to this Policy.

Information we collect

Account & contact information

Your name, email address, and account settings.

Biometric and face-scan data

When you create a scan, the app captures a 3D model of your face using your device's TrueDepth camera — including facial geometry (mesh), a texture map, and expression blendshapes. This is biometric information, and we treat it accordingly. Your scan is the asset you choose to list and license; we store it so it can be delivered to buyers you approve, under the terms you set. See our Biometric Data Policy for how we obtain consent and how long we retain and then destroy this data.

Identity verification data

To prove you are a real person and that the scan is of you, we use a third-party identity-verification provider (Persona) to check a government-issued ID and perform a liveness selfie. The biometric liveness check is performed by Persona; that verification biometric is not retained on Ingenue's own servers. We receive a verification result and limited identity attributes (such as name and confirmation of age and region).

Listing, transaction & payment information

Your listings (price, permitted and excluded uses), purchase and sales history, and payout details. Payments are processed by a third-party payment processor; we do not store full card or bank numbers.

Device & usage information

Standard log and device data (IP address, device type, app version, and interactions with the Service) used to operate, secure, and improve it.

How we use your information

• To provide the Service: create and store scans, run listings, and complete licenses and payments.
• To verify identity and age, and to keep impostors and fraud off the platform.
• To deliver licensed scans to buyers you approve, under your chosen terms.
• To process payouts, fees, taxes, and chargebacks.
• To communicate with you about your account, listings, and the beta.
• To comply with legal obligations and enforce our Terms.

How we share your information

We do not sell your personal information. We share it only as follows:

• With buyers you approve. When you license a scan, the buyer receives the scan asset for the uses you permitted, governed by the license terms.
• With service providers. Identity verification (Persona), our payment processor, and cloud hosting and database providers (including Vercel and Supabase) who process data on our behalf under contract.
• For legal and safety reasons. To comply with law, respond to lawful requests, or protect the rights, safety, and property of users and the public.
• In a business transfer. If Ingenue is involved in a merger, acquisition, or sale of assets, subject to this Policy.

Your choices and rights

• You can pull a listing at any time. Active licenses run for their agreed term; nothing new is sold after you revoke.
• You can request access to, correction of, or deletion of your personal information, including your stored scans.
• Depending on where you live, you may have additional rights under laws such as Canada's PIPEDA, the EU and UK GDPR, and the California Consumer Privacy Act. Where we process biometric data, our lawful basis is your explicit consent. Because of the specific requirements of the Illinois Biometric Information Privacy Act, the Service is not available to residents of Illinois.

To exercise any of these rights, email hello@ingenue.ai.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service, resolve disputes, and meet legal obligations. When you delete your account or a scan, we delete or de-identify the associated data, except where we must retain records of completed licenses or as required by law.

Security

We use technical and organizational safeguards to protect your information. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Children

The Service is for adults 18 and older. We do not knowingly collect information from minors.

Where your data is processed

The Service is available worldwide. Ingenue is based in Canada and our service providers operate primarily in the United States and Canada, so your information may be transferred to, stored in, and processed in those countries and elsewhere. Where required, we rely on appropriate safeguards for international transfers.

Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you.

Contact us

Questions about this Policy or your data? Email hello@ingenue.ai. Ingenue Rights Co. is a Canadian corporation; our mailing address is available on request.