This policy is for residents of Washington State and others covered by the Washington My Health My Data Act and similar laws. Under these laws, "consumer health data" includes biometric data. Human Pass's only consumer health data is the biometric data used in a face check when you verify your ID. Everything else is in our main privacy policy.
What we collect
When you verify your ID with a document scan, our identity-verification provider (Didit) collects a short selfie video and compares your face with the photo on your ID. That is biometric data. Details: our biometric data policy.
Why
Only to confirm that you're the person on the ID and a real person present at the time, so one person can have only one Human Pass.
Where it comes from
From you: the selfie video you take during the check, and the photo on the ID you show.
Who it's shared with
Only Didit, which processes it on our behalf as our service provider, under a contract limiting its use to this check. Human Pass itself never receives it. We never sell consumer health data.
Consent
We collect it only with your consent, asked on a separate screen before each check. You can say no and, where offered, verify with a digital licence from your phone's wallet instead.
How long it's kept
Deleted as soon as the check is finished (at the latest, 30 days).
Your rights
You can ask us whether we've collected or shared your consumer health data and with whom, withdraw your consent, and ask us to delete it, by emailing [PRIVACY EMAIL]. If we refuse a request, you can appeal by replying to our answer; if you're not satisfied with the appeal, you can contact the Washington State Attorney General.
Contact
[COMPANY], [ADDRESS] · [PRIVACY EMAIL]