Solo Privacy Policy

Welcome to Solo. This Privacy Policy ("Privacy Policy"), together with our Terms of Service ("Terms"), governs the collection, processing, use, retention and disclosure of your personal information by Solo Research Limited ("Company", "we", or "us") and its affiliates in connection with your use of our facial authentication service and mobile application.

We collect the following types of information:

(a) Encrypted Face Feature Vectors (FFVs): A 512-dimensional face feature vector ("FFV") from your facial data will be extracted using deep neural networks. This FFV is encrypted using homomorphic encryption based on lattice cryptography, which is resistant to quantum attacks. The encryption is conducted immediately and in-memory. The FFV (plaintext) itself is not stored, logged, or retained on our servers, databases, or any persistent storage. Only the encrypted FFV (ciphertext) will be stored on our app, and be transmitted to and retained by us. We do not collect raw facial images or data. The encrypted FFV which we collect, use and retain cannot be decrypted by us or any other third party.

(b) Personal Information: Name, email address, and other identifying information.

(c) Device Information: Device type, operating system, and unique device identifiers.

(d) Usage Data: Information about how you interact with our application and services.

(e) Analytics Data: Performance metrics and crash reports to improve our service.

Unless you have specifically notified us to the contrary, you will be deemed to have agreed and consented to the collection, use, processing, retention, transfer and disclosure of your personal information (including but not limited to those types and categories of information and data enumerated above) so collected by us in accordance with the provisions of this Privacy Policy.

We use your information to:

• Provide facial authentication services.

• Verify your identity and maintain account security.

• Improve our services and user experience.

• Communicate with you about your account and our services.

• Comply with legal obligations and prevent fraud.

• Enable decentralized identity services (e.g., Web 3.0 DApps) by creating trusted accounts to support secure user interactions.

• Perform analytics and monitor performance.

• Other purposes referred to in, or contemplated by, the Terms.

• Other legitimate business or commercial purposes as permitted by, or which are not contrary to, the provisions of the Terms and this Privacy Policy.

Your encrypted FFV is subject to special protection:

(a) A 512-dimensional FFV would be generated from your facial data for authentication and decentralized identity services. All FFVs are immediately encrypted in-memory using homomorphic encryption based on lattice cryptography, which is quantum-resistant.

(b) Raw facial data, facial images or plaintext FFVs are never transmitted to our servers, and are never retained or stored in any form by us or any third party.

(c) Only encrypted (ciphertexts) FFVs will be stored on our app, and be transmitted to and retained by us. The plaintext FFVs are not stored, logged, or retained on our servers, databases, or any persistent storage. Encrypted FFV is retained and used by us solely because it is necessary to enable us to provide authentication and decentralized identity services. The encryption is performed immediately and in-memory, and the encrypted FFV which we collect, use and retain cannot be decrypted by us or any other third party.

(d) Encrypted FFVs are retained only for as long as the user maintains an active account or until the user chooses to delete them. Users may delete their encrypted FFV at any time via the app settings. If a user has been inactive for three (3) years, the entire account and the associated encrypted FFV are automatically and permanently deleted. This is to say, encrypted FFV are not stored indefinitely.

(e) We do not share raw face data, facial images, plaintext FFVs or encrypted FFVs with any third party.

We do not sell your personal information. We may share your information (except encrypted FFV) in the following circumstances:

• With your explicit consent.

• To comply with legal obligations.

• To protect our rights and prevent fraud.

• With trusted service providers who assist in our operations.

• In connection with a business transfer or merger.

We implement industry-standard security measures to protect your information:

• End-to-end encryption for data transmission.

• Secure storage with encryption at rest.

• Regular security audits and updates.

• Strict access controls for our team.

• Compliance with applicable data protection regulations.

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours, where feasible, and inform affected users without undue delay.

You have the right to:

• Access your personal information. You may submit a data access request to obtain a copy of your personal data held by us. We may charge a reasonable fee for complying with such requests.

• Correct inaccurate information.

• Delete your account and associated data, including encrypted FFVs.

• Withdraw consent for data processing.

• Request data portability.

• Object to certain types of processing.

We retain your information only as long as necessary to provide our services or as required by law.

You can choose to delete your encrypted FFV at any time.

If you remain inactive for more than three years, your account and associated encrypted FFV will be permanently deleted.

Our app may integrate with third-party services (such as Firebase) that have their own privacy policies. We encourage you to review their policies to understand how they handle your information.

Our service is not intended for children under 18. We do not knowingly collect personal information from children under 18.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

We continuously track legal developments, add new features, and work to enhance our processes, which may lead us to update this Privacy Policy periodically. Where required under applicable law, we will obtain your consent to such changes, otherwise, your continued use of our service after any such updates take effect will constitute acceptance of those changes. If you do not accept any updates to this Privacy Policy, you should stop using our service.

If you have questions about this Privacy Policy, please contact us at:

(a) Email: contact@projectsolo.ai

(b) Address:
Solo Research Limited
Mandar House, 3rd Floor
Johnson's Ghut
British Virgin Islands (VG)

For immediate privacy concerns or to exercise your rights, please use the contact information above.