Skip to content
Circadify Circadify Circadify

Data Minimization

Data minimization is a core privacy principle at Circadify. We collect and process only the minimum data required to deliver a result — and we don’t keep any of it.

Principles

Section titled “Principles”
  • Collect less — The SDK accesses the camera only for the duration of a single scan. No persistent recording occurs.
  • Process locally first — The SDK performs face detection, region-of-interest selection, and frame normalization on the device. Raw video and raw camera frames never leave the user’s device.
  • Transmit only what’s needed for inference — Only the preprocessed RGB tensor extracted from skin regions is uploaded to our inference engine. The tensor cannot be played back as video and contains no identifiable imagery.
  • Don’t keep it — The uploaded RGB tensor is processed and discarded. Vital sign results are returned in the API response and are not stored on our side. The only state we persist from a scan is a usage record (one scan credit consumed) for billing and quota.

What We Don’t Collect

Section titled “What We Don’t Collect”

Circadify never collects, transmits, or stores:

  • Raw video or camera frames — The SDK processes video locally and never uploads it.
  • Vital sign results — Results are returned to your application in the API response and are not stored on our side.
  • The uploaded RGB tensor — Processed and discarded after inference. Not retained.
  • Persistent device identifiers — No device fingerprinting or cross-site tracking identifiers are collected.
  • Precise location data — No GPS, IP-based geolocation, or fine-grained location data is collected.
  • Unrelated sensor data — Only the device camera is accessed during a scan. No microphone, accelerometer, or other sensor data is collected.
  • Biometric templates — The uploaded tensor is not a biometric template; it cannot be used to identify the original face or be replayed as video.

Verification

Section titled “Verification”

Enterprise customers can request audit reports to verify our data-minimization practices. You can also independently inspect what leaves the device via browser network inspection — only the encrypted RGB tensor upload and the result-bearing API response cross the network.

Contact sales@circadify.com to discuss audit and verification options.

Next Steps

Section titled “Next Steps”