Privacy Policy

1. Who we are and what this covers

This Privacy Policy explains how Studio GR, a California corporation ("Studio GR," "we," "us," or "our"), collects, uses, discloses, and protects personal information in connection with the Sign w Selfie mobile application (the "App"), the Sign w Selfie software development kit (the "SDK"), the website at signwselfie.com and its public verification tool (the "Site"), and related services (together, the "Services").

By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.

2. Information we collect

Information you provide and create

• Captures. Photos taken through the App, which may include images from both the front and rear cameras simultaneously, and any signature you add. These images may contain your face, your surroundings, other people, and objects you choose to capture.
• Account information. Information you provide to create or manage an account, such as a username, email address, and password.
• Communications. Information you send us when you contact support or fill out a form.

Information collected automatically

• Precise location (GPS). When you make a capture, we collect precise GPS location data to timestamp and place the moment. You can disable location access in your device settings, though this limits the proof record.
• Timestamp and capture metadata. The date and time of capture and technical metadata associated with the record.
• Device and usage data. Device model, operating system, app version, identifiers, IP address, and how you interact with the Services.

Payment information

Purchases of the App are processed by Apple through the App Store. SDK billing is processed by our payment processor, Stripe. We do not receive or store full payment card numbers; those are handled by Apple or Stripe under their own terms and privacy policies.

Public verification uploads

When someone submits an image to the public verification tool on the Site, that image is fingerprinted (hashed) on our servers so we can check it against existing Sign w Selfie records and return whether it matches, along with limited verification metadata.

What we do not do

We do not perform facial recognition, biometric matching, or create facial templates or "faceprints." We capture and store images that may contain your face, but we do not use them to identify you biometrically.

3. How we use information

• To create, store, and display your Sign w Selfie proof records.
• To generate an irreversible fingerprint of a capture and a verification token.
• To operate the public verification tool and confirm whether an image matches a record.
• To provide, maintain, secure, and improve the Services.
• To process purchases and subscriptions and provide customer support.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with law and enforce our Terms of Service.

4. Blockchain records and permanence

A core feature of Sign w Selfie is writing a cryptographic fingerprint of each capture to a public blockchain (the Solana network). Only an irreversible hash and verification token are written on-chain — never your images, signature, location, or other personal information.

Because the blockchain is public and decentralized, on-chain records are permanent and immutable. They cannot be edited, deleted, or recalled by you, by us, or by anyone else, even if you delete your account. The on-chain fingerprint by itself does not reveal the underlying image or personal data.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information only as follows:

• Service providers. Cloud hosting and infrastructure providers, Apple (App Store purchases), Stripe (SDK billing), and the Solana network, who process information on our behalf or as needed to deliver the Services.
• Verification results. When a proof is checked, we disclose the match result and limited verification metadata to the person performing the check — not your account history or raw captures.
• Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of Studio GR, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy.

6. Data retention and deletion

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

You may request deletion of your account and associated off-chain data by emailing hello@signwselfie.com. Please note that the irreversible on-chain fingerprint described in Section 4 is permanent and cannot be deleted; it contains no images or personal information.

7. Your California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA ("CCPA"), gives you the right to:

• Know what personal information we collect, use, and disclose.
• Access a copy of the personal information we hold about you.
• Delete personal information we have collected (subject to exceptions, including on-chain permanence).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information — though we do not sell or share it.
• Limit use of sensitive personal information.
• Non-discrimination for exercising your rights.

To exercise these rights, email hello@signwselfie.com. We will verify your request and respond as required by law. You may use an authorized agent to submit a request on your behalf with proper authorization.

8. Children's privacy

The Services are intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact hello@signwselfie.com and we will delete it. Users between 13 and 18 should use the Services only with the involvement of a parent or guardian.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data location and international users

We are based in the United States and process information in the United States. If you access the Services from outside the U.S., you understand your information will be processed in the U.S., where privacy laws may differ from those in your location.

11. Third-party services and links

The Services rely on and may link to third parties (such as Apple, Stripe, and the Solana network). Their handling of your information is governed by their own privacy policies, and we are not responsible for their practices.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective" date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance.

13. Contact us

Studio GR
981 Via Regina, Santa Barbara, CA 93111
hello@signwselfie.com