Biometric data: voice, face and body

Effective September 2026 · MaterialLogix Studio™, a product of LibraSide Technologies, LLC

What counts as biometric data here

A personal voice profile is built from recordings of a specific person's voice so the product can generate speech in that voice. The data derived from those recordings can identify the person who spoke, so we treat it as biometric information, a voiceprint.

Personal Geometry is created when the product analyzes a photograph or video of a person to build a single-photo face map, a multi-view reference Pack, a tattoo-placement guide, or a skin-detail continuity review. What it derives are normalized face, hand, or body-pose landmarks needed for the operation you selected. Face and body geometry may be biometric or sensitive information under some laws, so we treat it that way, even though the product does not use it to identify or authenticate anyone.

We treat both under the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, the Washington biometric privacy law, the Colorado Privacy Act as amended for biometric identifiers, and equivalent laws elsewhere.

Three things are not biometric data here. The twelve house voices included with the product are not built from any customer's voice. Audio, photographs, and video you import for ordinary editing are not analyzed unless you start one of the flows above. The skin-detail continuity review uses an approximate skin-color rule and local contrast; it can be wrong, and it neither identifies a person nor infers a sensitive trait.

We do not build a face template that can identify anyone

This is the most important limit on this page, so it stands on its own. The product locates a face in order to measure and frame it. It does not compute a face template, faceprint, or embedding capable of recognizing a person, it does not compare one face against another, and it does not search any database of faces. Nothing in the product performs facial recognition, identification, authentication, or surveillance, and we do not build a system that could.

When we collect it, and when we do not

Each flow begins only when a person deliberately starts it and gives consent first. Neither is ever created in the background, and neither is created by default. Tattoo-placement mapping is off by default and requires its own separate purpose, its own consent, a named target asset, and confirmation that you hold the rights to both the source and the artwork.

Personal Geometry is local-only in this release. Creation and storage happen on your own device, and remote processing is not available for it. We do not receive the media, the landmarks, or the Pack.

Local voice profiles stay on the device that made them. We receive voice data only when someone deliberately submits a cloud voice job, and then only the packaged job needed to do the work requested.

Only the person in the picture can consent

For Personal Geometry the source must show only the adult account holder, and that person signs the release directly. Group sources, bystanders, and another person's media are unavailable in this release and are not analyzed. Someone who uploads a file cannot consent on behalf of anyone else. This is a limit on what the product will do, not only a promise about how it is used.

No biometric data for anyone under 18

We do not create, store, or process a voice profile or Personal Geometry for a person under 18 years old. This is a flat rule with no exception.

A parent or guardian cannot consent to either one for a child here, because we do not offer that capability at all. This is a decision about what the product does, not a consent question. Before anything is created, the person it describes confirms they are 18 or older.

If we learn that either was built from a person under 18, we destroy it and the material behind it, and we may suspend the account that created it.

The specific purpose

Voice data has one purpose: to create and operate the voice profile the person consented to, so that the account holder can generate speech with it inside the product.

Personal Geometry is limited to the single operation named in the signed receipt: the face map, reference Pack, tattoo placement, or skin-detail review, and its named local record.

Neither is used to identify anyone, to authenticate anyone, for surveillance, to infer a sensitive trait, to build a general recognition system, to train shared models, or for advertising.

How long we keep it, and how it is destroyed

This section is our written retention schedule and destruction guideline.

Voice profiles

• Destroyed when the person withdraws consent or the account holder deletes the profile, normally at once and in any case within 30 days.
• Destroyed when the account is closed, within 30 days of closure.
• Backstop. In every case, voice data is destroyed no later than 3 years after the last interaction with the account that holds it, whichever of these comes first.
• Cloud voice job media is deleted on the schedule disclosed with that job, which is shorter than the periods above.

Personal Geometry

• Unfinished capture material and temporary analysis data are deleted when the flow ends, and have a one-hour inactivity ceiling.
• A saved Pack is deleted on withdrawal, on Pack or project deletion, on completion of the purpose it was created for, or on closure of the account on that device.
• Ceiling. A Pack expires no later than twelve months after its last authorized use, unless the person it describes renews consent. The product enforces this. A consent receipt with no future expiry date, or with one beyond the twelve-month ceiling, is refused rather than saved.

Destruction covers the profile or Pack and the material it was derived from, in live systems and in backups as those backups age out on their normal cycle.

We keep the record of the consent itself for longer than the biometric data, because that record is the proof of what was agreed. It contains no voice, face, or body data.

What we cannot reach. Project data held on your own device can remain there after you sign out, until you delete it through the Pack controls or the application data controls. We cannot erase copies you exported or stored somewhere else.

We do not extend these periods for our own convenience. If a law requires us to keep something longer, for example to preserve evidence in a legal dispute, we keep only what that obligation covers and destroy it when the obligation ends.

We do not sell it

We do not sell, lease, trade, or otherwise profit from voice profiles, Personal Geometry, or the recordings, photographs, and video behind them. That prohibition is absolute and is not subject to a consent option. This data is excluded from the optional product research and the grouped commercial insights described in the Privacy policy.

We do not hand it to anyone else

We do not disclose or disseminate biometric data except in three cases: with the consent of the person it belongs to; to a service provider strictly to perform the processing requested, under contract and with no right to reuse it; or where a warrant, subpoena, or law compels it. If we are compelled to disclose, we will tell the affected account holder unless the law forbids it.

Personal Geometry involves no third party at all in this release, because it does not leave your device.

How it is protected

We store biometric data using at least the standard of care we apply to other confidential information, and never less than the reasonable standard the applicable biometric law requires. That means access-controlled storage, encryption in transit, scoped credentials, and separation from the optional diagnostics and research described in the Privacy policy. Local profiles and Packs are protected by the security of the device that holds them, which is one reason we keep them local by default.

Consent, and taking it back

Before anything is created, the person it describes receives written notice of what is being collected, the specific purpose, and how long it is kept, and gives a written release. We keep a record of the exact wording that was shown and the time it was accepted. The notice is versioned and fingerprinted, so a consent given today can be produced later exactly as it was given, word for word.

Consent can be withdrawn at any time from the account's Privacy area, or by writing to admin@materiallogix.com. Withdrawal stops further use immediately and starts the destruction described above. Withdrawing does not affect anything lawfully done before it.

When the voice is not yours

Personal Geometry does not permit this at all. The source must show only the account holder, and the product will not analyze anyone else.

For voice, if you create a profile from someone else's voice, that person is the one whose rights are engaged. They must be 18 or older, and you must obtain their informed written consent before recording. The Acceptable Use policy and the Terms of Service require it. The product asks you to confirm this, and that confirmation is your representation rather than a substitute for the person's own consent. Anyone whose voice is in a profile may write to us directly at the address above to withdraw consent, and we will act on it whether or not they hold an account with us.

Where these laws apply

If you are in Illinois, this page is the publicly available written retention schedule and destruction guideline required by section 15(a) of the Biometric Information Privacy Act. The notice required by section 15(b) is shown before collection, and the written release required by section 15(b) is what you sign there. We do not sell or profit from biometric identifiers, as section 15(c) requires. We do not disclose them except as section 15(d) permits, and we protect them under section 15(e) using at least the standard described above.

If you are in Texas or Washington, we obtain consent before capture, use the data only for the disclosed purpose, do not sell it, protect it with reasonable care, and destroy it within the periods above.

If you are in Colorado, or in another state whose privacy law treats biometric identifiers as sensitive data, including California, Connecticut, Delaware, Maryland, Minnesota, Montana, New Jersey, Oregon, Texas, and Virginia, we obtain your opt-in consent before processing, we maintain the written retention schedule above, and we honor your rights of access, correction, deletion, and portability. Under the California Consumer Privacy Act, biometric information is sensitive personal information. We use it only for the purpose named above, which is within the permitted uses, and we neither sell nor share it.

If you are in the United Kingdom or the European Economic Area, biometric data processed to identify a person is special category data under Article 9 of the UK and EU General Data Protection Regulation. We do not process biometric data for identification. Where you give explicit consent under Article 9(2)(a) for the purposes named above, you may withdraw it at any time, and we complete a data protection impact assessment before any new biometric processing begins. We do not build facial recognition databases by untargeted scraping of images, which the European Union Artificial Intelligence Act prohibits outright, and we do not infer emotion from a face at all, which that Act restricts.

Changes to this policy

If we change what we collect, what we use it for, or how long we keep it, we publish the revised policy here with a new effective date before the change takes effect. Where the change is material and the law requires it, we obtain fresh consent rather than relying on the consent you already gave. Consent you gave under an earlier version stays governed by the version you actually signed, and we keep that wording so it can be produced later.

Questions and complaints

Write to admin@materiallogix.com. You may also contact your state attorney general or your data protection authority. The controller of this information is LibraSide Technologies, LLC.