Verification Privacy Policy
Last updated 20 September 2026. This is the same notice shown in the app before your first verification selfie.
What we collect
A selfie you take during verification, and a scan of the facial features in it. The scan is what lets us compare your selfie with the photos on your profile. This is biometric information, and we treat it as such.
Why we collect it
Only to confirm that you are a real person and that your profile photos are of you. It keeps fake and stolen photos off Crosstown. We never use it for advertising or profiling, and we never sell or share it.
Who processes it
Amazon Web Services (AWS Rekognition) performs the comparison on our behalf. It compares two images and returns a similarity result. It does not enrol you in any face database and does not keep a face template of you.
How long we keep it
Your verification selfie is stored while your account is active, so we can re-check new photos you upload. It is permanently deleted when you delete your account, and automatically after 90 days of account inactivity. We do not keep it beyond that.
Your consent, and how to withdraw it
You tick a box in the app before the camera opens. That is your written consent to us collecting and storing your selfie and the face scan taken from it, for the purposes and period described above. You can withdraw consent by deleting your account, which destroys the selfie and the scan with it.
Retention and destruction schedule
Biometric information is destroyed when the purpose for collecting it has been satisfied, or within three years of your last interaction with us, whichever comes first. In practice our 90-day inactivity deletion is far shorter than that.