Biometric Data Notice
biometric-BR-1.2
DRAFT: lawyers in Brazil, the US and Mexico will write the final text before launch.
Why
To confirm that every parent is a real person whose face matches their government ID, so strangers can’t join groups.
Who does the check
Our identity verification partner, Didit (Didit Identity, Inc., USA, and its company in Barcelona, Spain), acting on our behalf under a data processing agreement. Didit processes your data in the European Union and may also process it in the United States.
What happens
On Didit’s secure page you take a photo of your ID and a live selfie. Didit checks that the ID is real, that the selfie is a live person, and that the faces match. The app never receives the images.
How long
When the check ends, we tell Didit to erase the images, face data and ID details right away, and Didit keeps no face template. If that fails, Didit deletes them automatically within 30 days. We keep only “verified, date, method, provider”.
Never
Your biometric data is never sold, shared with other families, or used for any other purpose.
Your choice
This is optional and you can withdraw it in Family › My agreements. Without it you can browse games but not join groups.
Brazil: this follows the LGPD (Lei 13.709/2018), including art. 14 on children’s data and art. 11 on sensitive data, and the ECA Digital (Lei 15.211/2025). You can contact our data protection officer (encarregado) at [DPO EMAIL].