Biometric data policy

Last updated: November 6, 2026

This page is our public schedule for biometric data: what we collect when you verify your identity, who handles it, who can see it, and when it is deleted.

1. What we collect

When you verify your identity, Didit, our verification provider, scans your ID document and takes a short selfie, and creates a scan of your facial geometry to match the two. If you agree to face matching, Greenlight also creates an encrypted scan of your selfie's facial geometry to compare with your profile photos. If you choose manual review and tick its optional face matching box, Greenlight may compare your selfie, never your ID photo, with your profile photos. If it does, it keeps only the match score with the reviewer's decision.

2. Who processes it

Didit processes your ID document, selfie and facial geometry for us, under our instructions, as our service provider. Greenlight never stores your ID document, its numbers or the barcode on its back.

3. Human review

A person on our team reviews each automated verification and approves or declines it. They may view your selfie and Didit's result; no one at Greenlight views your ID document. The selfie is loaded from Didit each time they look, and every view is logged.

4. When it is deleted

  • Didit deletes your ID document, selfie and facial geometry the moment our team approves or declines your verification.
  • If no one has done so within 30 days of Didit's decision, Didit deletes them then.
  • If your date of birth shows you are under 18, Didit deletes them right away and no one at Greenlight views them.
  • If face matching needs a closer look, Greenlight keeps its own copy of your selfie for up to 3 days so a team member can check it, then deletes it. A badge held for that check is released within 72 hours at the latest.
  • Greenlight keeps the encrypted facial geometry, the match score and the reviewer's result until you delete your account or withdraw consent.
  • For manual review, we do not store the facial geometry. If a match score was made, we keep it and the reviewer's decision until you delete your account or withdraw consent.
  • If you delete your account or withdraw consent, we delete what we hold and ask Didit to delete your verification right away.

5. Your choices

You can withdraw your consent at any time. We never sell your biometric data or use it for advertising. Questions go to support@greenlightdate.com.