生物识别与健康数据同意书

本文件仅以English发布。

本文件中突出显示的部分尚未填写。

Smart Beauty Mobile Application

Effective Date: [Insert Date]

Last Updated: [Insert Date]

1. Purpose of This Form

This form informs you, the user of the Smart Beauty mobile app developed by Bluesense AI Inc., about how your biometric and health-related data will be collected, processed, stored, and shared. It also requests your specific, informed, and freely given consent for such data processing.

You must be at least 14 years old to use this app or have parental/guardian consent.

2. Types of Data Collected

The app may collect and process the following sensitive information:

Facial images and visual data for skin tone, type, and condition analysis
Biometric information such as facial geometry measurements for AI-based analysis
Health-related data as self-reported skin concerns (e.g., acne, dryness, oiliness)
Device metadata, such as camera resolution and lighting conditions

We do not collect physiological signals such as heart rate or blood pressure. We do not access your medical records. This app does not provide medical advice.

3. Purpose of Processing & Legal Basis

Your data is processed only for the following purposes:

To provide you with personalized skincare and product recommendations using AI-based skin analysis
To improve our algorithms through anonymized, aggregated research
To deliver skincare insights based solely on the information you provide

Legal basis for data processing includes:

Your explicit, informed, and freely given consent (BIPA, CPRA, GDPR Art. 9)
Legitimate interests in enhancing the quality of services
Compliance with applicable privacy regulations (e.g., NY SHIELD)

By checking the consent box and clicking "I Agree" within the app:

You confirm that you have read and understood this form
You grant explicit, informed, and voluntary consent for processing your biometric and health-related data
You understand what types of data are collected and for what purposes
You acknowledge your right to withdraw consent at any time

Your consent will be timestamped and logged.

5. Your Rights

You have the following rights under applicable laws:

Access to your personal data
Correction of inaccurate or incomplete data
Deletion (right to be forgotten)
Withdraw consent at any time via privacy@bluesense.ai
Opt-out of marketing communications

You may unsubscribe from emails using the “Unsubscribe” link included in each marketing email.

6. Data Retention and Deletion

In accordance with BIPA and other data privacy laws:

Facial images and biometric data will be deleted within 12 months of your last active use
Health-related entries are retained for a maximum of 3 years, then anonymized or deleted
Deletion requests will be honored within 30 days

All deletion actions are logged and performed securely.

Your data is only shared with third parties essential to app functionality, including:

Cloud service providers (e.g., AWS, Azure)
AI analytics platforms
Legal and compliance consultants

These third parties are bound by data processing agreements (DPAs) and confidentiality obligations.

If data is transferred outside your country (e.g., to the U.S.), safeguards include:

Standard Contractual Clauses (SCCs) under GDPR
NY SHIELD-compliant security agreements
CPRA-compliant service provider contracts

We do not sell your personal data or share it for profit.

8. Data Security Measures

To protect your biometric and health data, Bluesense AI implements:

Biometric data backups are encrypted, securely stored, and permanently destroyed immediately after deletion requests or expiration of retention periods.
Access controls and strict internal data policies
Regular security audits and risk assessments
Compliance with BIPA, NY SHIELD, and industry security standards

9. Governing Law & Dispute Resolution

This agreement is governed by the laws of the State of California.

In the event of a dispute:

Binding arbitration will be conducted through the American Arbitration Association (AAA)
The exclusive venue is San Francisco, California
You waive the right to participate in class actions. You have the right to opt-out of binding arbitration within 30 days of accepting these terms by notifying us at privacy@bluesense.ai

[ ] I confirm that I am at least 14 years old or have the legal consent of a parent or guardian.

[ ] I have read and understood this Biometric & Health Data Consent Form.

[ ] I voluntarily and expressly consent to the collection, use, and processing of my biometric and health-related data as described above.

[ ] I understand that I may withdraw my consent at any time.

Consent Timestamp: [Automatically captured by the app]

Contact

Bluesense AI Inc.

2508-1200 West Georgia Street, Vancouver, BC, Canada V6E 4R2

Email: privacy@bluesense.ai

Biometric & Health Data Consent Form