Legal

Biometric Consent

Version 1.0

You are about to verify that you are a real person by taking a short live selfie. Because that involves biometric data, the law requires us to ask you first, and to be specific about what we are asking for. This page is that ask.

Tujuane is operated by Truth Wireless Limited.

What we are asking permission to do

When you continue, the app will:

1. Ask for permission to use your camera.
2. Show you a simple instruction, such as blinking or turning your head.
3. Capture a short burst of still frames while you do it, over a few seconds.
4. Send those frames to our servers over an encrypted connection.

What happens to those frames

They are checked, then deleted. The frames exist only for as long as the check takes. They are never added to your profile photos, never stored as a video, never shown to anyone, and never kept after the check finishes, whether it passes or fails.

They are not sent to an identity verification company. The check runs on servers we operate. No third party receives your face.

What we keep

We keep one thing: a mathematical representation of your face, derived from those frames. It is a list of numbers produced by a face recognition model. It is stored encrypted, and it cannot be turned back into an image of you.

We keep it for one purpose: to confirm that the person in your profile photos is the same person who took the selfie, including when you add or change photos later. That is what makes a verified badge on Tujuane mean something rather than being decoration.

We also keep the result of the check, and the date it happened.

What the check proves, and what it does not

Our liveness check is designed to distinguish a live person in front of the camera from a photograph, a printed image, or a face displayed on a screen.

It is not proof against every possible form of impersonation, and we are not going to tell you it is. Verification raises the cost of faking an identity substantially. It does not reduce it to zero, and you should still use the safety tools in the app and your own judgement when meeting someone.

Your choice, and how to change it

Giving this consent is voluntary. You can use Tujuane without verifying. What you cannot do without verifying is appear in other people's decks, swipe, match or chat, because a space where everyone is verified only works if everyone in it is verified.

You can withdraw this consent at any time, in Settings. When you do:

• The face representation we derived is deleted.
• Your account returns to unverified.
• You lose access to the features that require verification.

Withdrawing does not delete your account, and it does not delete anything else. You can verify again later if you change your mind.

Higher-tier verification

If you later choose to verify with a government issued identity document, that is a separate step with its own consent, and it is reviewed by a person. We keep a one-way code derived from the document rather than a copy of the document, so the same identity cannot quietly run several accounts. That code cannot be reversed back into your document number.

That code is deleted along with everything else when you withdraw consent, with one exception: if the account has been banned and the ban is still in force, the code is kept for as long as the ban is. Otherwise withdrawing consent would erase the only thing preventing an immediate return under a new account, and a ban that forgets itself protects nobody. It is still not a copy of your document, and it is still not reversible.

Your rights

Biometric data is a special category of personal data. You have the right to withdraw consent, to ask what we hold, to have it deleted, and to complain to a data protection authority. The full picture of how we handle your data is in our Privacy Policy, and contact details are published at tujuane.africa/support.