Sleevr Biometric Information Policy

Effective October 6, 2026 · Hestertainment LLC, the maker of the Sleevr app and getsleevr.com

The short version. Sleevr never recognizes faces and never makes face scans. One feature, “Make one with AI”, sends a person’s photo to Google’s AI to make a younger-looking picture of them, and only after that person has signed their own OK in the app. The photo isn’t kept, nothing is sold, and the picture is marked “Made by AI”.

Why this policy exists

Some state laws, such as the Illinois Biometric Information Privacy Act (740 ILCS 14), protect “biometric identifiers” like a scan of face geometry, and information based on them. Sleevr doesn’t make face scans or face templates, and doesn’t identify anyone. But an AI that edits a face in a photo may look at the shape of that face to do it, so Hestertainment LLC treats the photos sent for younger-looking pictures as if they were biometric information, and follows this policy for them.

What is sent, and why

Only when someone using Sleevr taps Make the picture (or Try again) for a person with no photo from years ago:

that person’s photo from their card in Sleevr (about 800 pixels, without its location or other details);
their age, and how many years younger the picture should look.

No name is sent. These are used for one purpose only: to make that one younger-looking picture.

Consent first: a signed written release

Before anything is sent, the person in the photo reads what is sent, to whom, why and for how long, and that laws like Illinois’ may count it as collecting biometric identifiers or biometric information from their face, then signs on the phone by typing their full name and ticking “I agree”. That is their written release.
Only adults who sign for themselves. Nobody can sign for someone else, and pictures are never made of children or of anyone who can’t sign for themselves.
Our server checks for that signed release every time and refuses to make a picture without it.

Who receives it

Google LLC, as our service provider, through Google Cloud’s Vertex AI (Gemini), only to make the picture.

Google doesn’t use it to train or improve its AI.
Sleevr turns off Google’s data caching and request logging for its project, so Google doesn’t keep the photo or the picture after the picture is made.
One exception: if Google’s automatic safety checks flag a request as possible misuse, Google may keep that request for up to 90 days, only to review it.

We don’t give or show it to anyone else, unless a law, a valid warrant or a court order requires it.

Never sold

Hestertainment LLC never sells, leases or trades anyone’s photo, face data or biometric information, and never otherwise profits from them.

How long it is kept, and when it is destroyed

On our server: the photo and the picture pass through in memory only. They aren’t saved or logged, and are gone as soon as the request ends, usually within a minute.
At Google: not kept after the picture is made, except a request flagged by its safety checks (up to 90 days, above).
On the device: the picture comes back to the phone to be checked. It is kept with the person’s card only if “Use this” is chosen, marked “Made by AI”, and it syncs (end-to-end encrypted) and backs up like the card’s other photos. Remove it at any time in Edit person.
Our rule for anything else: if we ever held any biometric identifier or biometric information, we would permanently destroy it as soon as the picture is made, and never later than 3 years after the person’s last use of Sleevr, whichever comes first.

We also keep two records that aren’t face data:

The signed release: the typed name of who signed, the name on the card, which wording they agreed to, and when it was signed and last used. It is kept for 5 years after its last use, also after an account is deleted, as the record that they agreed, and then deleted.
A count of tries: how many pictures each account made this month and today (up to 6 a month and 3 a day), to limit costs.

How it is protected

Everything is sent over encrypted connections (HTTPS). Our server runs on Google Cloud, and only the Sleevr server can reach the AI. Signed releases can only be written by the account that made them, and no app can read them back. We protect this information at least as carefully as the other private information we hold.

Reporting a picture

If a picture is wrong or upsetting, tap Report this picture. Only your note is sent to us, with your account ID, never the picture or a name.

Questions, or taking back an OK

To ask about this policy, or to take back a signed OK so it can’t be used again, email sleevrcontact@gmail.com. We keep the record of the earlier OK for the 5 years above. Pictures may not be offered in every state. See also the privacy policy and the terms of use.

Changes

If this policy changes, we’ll update the date at the top. If the wording a person agreed to changes, they’re asked to sign again before another picture is made.