Biometric Data Policy

The short version. CachePix does not operate a cloud facial-recognition service. Any facial data used by the app is created and used entirely on your own device and is never transmitted to, received by, or stored by SmartLink Basics, LLC. Because the processing happens on your equipment, you are the party responsible for any consent the law requires from the people in your photos.

1. Scope

This policy explains how the CachePix apps (macOS, Windows, iOS, and Android) treat facial and other biometric data, and your responsibilities under laws such as the Illinois Biometric Information Privacy Act (BIPA) and comparable laws in Texas, Washington, and elsewhere. It supplements our Privacy Policy.

2. What CachePix does — and does not — do with facial data

• On-device only. If a feature of CachePix analyzes faces (for example, to help match or group people within your own library), that analysis runs locally on your device using models bundled with the app. Any resulting data — such as a mathematical face "embedding," which is a numerical vector rather than an image — is created and used only on your device.
• Never transmitted to us. We do not receive, collect, store, sell, lease, trade, or otherwise profit from your facial data or any biometric identifiers. None of it is uploaded to our servers or shared with any third party by CachePix.
• Names in your catalog. The people names you see in CachePix may come from metadata already written into your photo files, or from matching you perform locally. CachePix records those names in your local catalog on your devices — not on our servers.

3. You are the controller of this data

Because every step — cataloging on your computer, syncing over your own network, and storing on your own phone — happens on equipment you own and control, SmartLink Basics, LLC neither controls nor processes any biometric data handled through CachePix. For that data, you are both the data controller and the data processor.

4. Your consent responsibilities

If you use CachePix to catalog, identify, or attach names to photos of other people, you are responsible for complying with the biometric and privacy laws that apply to those individuals. Several U.S. states require notice and prior written consent before collecting or using biometric identifiers, including:

• Illinois (BIPA) — requires informed written consent before collecting or capturing biometric identifiers or information, a written retention-and-destruction policy, and limits on disclosure.
• Texas (CUBI) and Washington (HB 1493) — require notice and consent before capturing biometric identifiers for a commercial purpose.

You confirm that, where required, you have obtained the necessary consent from the individuals whose facial data you process using CachePix. SmartLink Basics, LLC does not provide legal advice, and you are solely responsible for your own compliance obligations in your jurisdiction.

5. Retention and deletion

Because facial data processed by CachePix lives only on your devices, you control its retention and deletion. You can remove it by deleting the relevant photos or catalog entries, by unpairing and removing the synced data on your phone, or by deleting the apps — each of which removes the associated on-device data. SmartLink Basics, LLC holds no biometric data to retain or destroy on your behalf.

6. No sale or profit

We do not sell, lease, trade, or otherwise profit from biometric data, and we never receive it in the first place.

7. Contact

Questions about this policy? SmartLink Basics, LLC · support@cachepix.com · Contact form