Biometric Policy
Effective date: October 7, 2026
This policy explains how OVE, Inc. (“OVE”, “we”) collects, uses, stores and destroys biometric data. It applies to everyone who uses the OVE App, the OVE® Sensor or the OVE Sensor app. It is written to comply with the Illinois Biometric Information Privacy Act (740 ILCS 14), the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001), Washington’s biometric identifiers law (RCW 19.375) and My Health My Data Act (RCW 19.373), Colorado’s biometric privacy law (HB24-1130) and similar state laws.
1. What biometric data we collect
We collect fingerprint templates. A template is an encrypted set of numbers that the OVE Sensor creates from your fingerprint. We never store fingerprint images.
2. When we collect it
Only after you sign the Biometric Consent in the OVE App. You add fingerprints yourself, with an OVE Sensor connected to your own phone, wherever you are. When you pay or verify your identity at a merchant, the merchant’s OVE Sensor reads your finger once and sends the result to OVE for matching. The merchant never stores it. We never collect fingerprints without your consent.
3. How we use it
Only to verify your identity when you pay or confirm who you are with OVE, and to prevent fraud on your account. We don’t use your templates for advertising, profiling or training of any kind.
4. Who we share it with
We never sell, lease, trade or otherwise profit from biometric data. We disclose templates only:
-
to service providers that host and match templates for OVE, under written contracts that limit them to that purpose and require the same protection;
-
when you consent to a specific disclosure;
-
when the law, a valid warrant or a subpoena requires it.
Merchants never receive your templates. They only receive the result: whether you were verified.
5. How we protect it
Templates are encrypted in transit and at rest and are used only by OVE’s automated matching system. If a security breach affects biometric data, we follow our written incident response plan and notify affected users and authorities as the law requires. We protect biometric data with at least the same care we use for our most sensitive information.
6. Retention and destruction schedule
-
A scan fails or is incomplete: Discarded right away, never stored.
-
Your account is active: Kept while you use OVE.
-
You deactivate your account: Kept for six months so you can reactivate.
-
Six months pass without reactivation (account permanently deactivated): Fully deleted.
-
You ask OVE Support to delete them: Deleted within 30 days.
-
You delete your account: Fully deleted right away (account permanently deactivated).
-
You touch a sensor to pay or verify: The scan is used for that match only, then discarded.
-
24 months pass since you last used OVE: Deleted, even if the account is still active.
-
OVE deletes them for a security reason: Deleted right away.
In every case, templates are deleted when the purpose for collecting them ends, and never later than 24 months after your last use of OVE. Deletion includes backups within their normal rotation.
What we keep after deletion. A record of which fingers you enrolled, the dates, the payment method each finger was linked to, and which finger verified each payment. This record contains no fingerprint data and can’t identify anyone by their fingerprint. We keep it with your transaction records, up to five years after permanent deactivation, to resolve payment disputes and prevent fraud.
Washington residents
Under Washington’s My Health My Data Act, fingerprint templates are consumer health data, and this Biometric Policy is OVE’s Consumer Health Data Privacy Policy. We collect them only with your consent and to provide the service you asked for, and we share them only with the service providers in section 4. You can ask to see them, have them deleted, or withdraw your consent by contacting support@ovetouchngo.com. If we decline a request, you can appeal by replying to our answer.
7. Changes
If we change this policy, we’ll post the new version and email you. If a change affects how we use your fingerprints, we’ll ask for your consent again.
8. Contact
OVE, Inc., 1333 N Curson Ave, Los Angeles, CA 90046 · support@ovetouchngo.com