PhoneData

Who we are

PhoneData is operated by Trinnhallen Brisley (Trinnhallen.brisley@gmail.com). This policy explains how we handle your personal data when you use the PhoneData web app.

What we collect

• Your email address (to sign you in and link your account)
• Photographs of your left and right palms captured through your phone camera
• Biometric embeddings — numerical codes derived from your palm images (not a photo of your face or identity document)
• Session data — timestamps, registration vs verification, and technical events (e.g. sign-in, consent)
• A session cookie so you stay signed in

Why we use it

We use this data to register your palms, run palmprint matching in the background, and improve the PhoneData service. Match scores are not shown to you in the participant app.

Legal basis

Palm biometrics are sensitive personal data. We process them only after you explicitly consent on the consent screen before the camera is used. You can withdraw consent at any time (see below).

How we store your data

• Images and biometric data are stored under a pseudonym (e.g. pd_a1b2c3d4), not your name
• Your email is kept in a separate admin-only directory so we can support your account
• Data is stored on secure servers with HTTPS in production

How long we keep it

We keep your data while your account is active and you have not asked us to delete it. If you request deletion, we remove your palm images, biometric data, and account records within a reasonable time (typically within 30 days), except where we must keep something for legal obligations.

Who can see your data

Only authorised PhoneData administrators can see the link between your email and pseudonym, your palm images, and matching results. We do not sell your data.

Your rights

You can:

• Ask what we hold about you
• Request deletion of your palm data and account
• Withdraw consent — we will stop processing and delete your data on request
• Complain to your data protection authority (e.g. the UK ICO if you are in the UK)

To exercise these rights, email Trinnhallen.brisley@gmail.com from the address you used to sign up.

Cookies

We use one essential cookie (pd_session) to keep you signed in. It is not used for advertising. In production it is only sent over HTTPS.

International transfers

If our servers are hosted outside your country, your data may be processed there. We use hosting providers with appropriate security measures.

Changes

We may update this policy. The “last updated” date at the top will change. Continued use after an update means you accept the revised policy where the law allows.

Contact

Questions or deletion requests: Trinnhallen.brisley@gmail.com