Effective date: [EFFECTIVE DATE] · Last updated: [DATE]
⚠️ DRAFT — NOT LEGAL ADVICE. This is a working template prepared to give a qualified attorney a strong starting point. It is not legal advice and must be reviewed and adapted by a licensed lawyer before you publish or rely on it. This document is the standalone biometric notice and written release required under the Illinois Biometric Information Privacy Act (BIPA §15(b)) and is read together with the publicly-posted Biometric Data Retention & Destruction Schedule (BIPA §15(a)). Replace every [BRACKET] placeholder before use.
In one line: To score your knife skill, CookCredit measures the motion of your hand (wrist and knuckle positions over time) on your device. This is treated as biometric data. We use it only to grade technique and to build cooking-skill and robotics/AI models — never to identify you and never for sale — and we destroy it on a fixed schedule.
The compact line you see and check during capture is the operative consent for that session; this page carries the full detail so the capture screen can stay short. The exact on-screen line reads:
*I agree to capture my hand-motion (biometric) to score my knife skill and train cooking/robotics AI, deleted when that's done or 3 years after I last use CookCredit. Biometric notice*
CookCredit ("CookCredit," "we," "us") asks you to read and sign this release before we collect any hand-geometry data. It explains, in plain English:
You do not have to sign. Signing is voluntary. If you do not sign, we do not collect your hand-geometry data, and you can still use the rest of CookCredit that does not require it.
We collect — and treat as biometric:
wrist and knuckle (hand-landmark) points over time and the motion derived from them. This is what lets us detect strokes and grade your technique.
embeddings, skill features, scores, and any synthetic or derivative datasets and trained model weights** built from it.
We treat all of the above as biometric data by construction — we do not hedge — and we handle it under this release even though we do not use it to identify you.
We do NOT:
to recognize or verify who you are.
live person is present (liveness/presence). **We do not run facial recognition, do not create or store a face template / faceprint, and do not use face data to identify you.**
We collect and use your hand-geometry data only for these purposes:
and feedback for you.
models for kitchen manipulation**, and to develop and improve the Services.
The derived artifacts listed in Section 2 (trajectories, embeddings, skill features, synthetic datasets, and model weights) are covered by, and used only for, these same purposes. We do not use your biometric data for any other purpose without a new release.
Training default (tiered). Free / practice ("PLAY") sessions are opted in to model-training use as a condition of the free feature. Paid or B2B validation sessions are opted out of training by default unless you choose otherwise. You can change this and withdraw at any time — see Section 6.
We destroy your biometric data on the earlier of:
The 3-year clock is a rolling one — it is measured from your most recent interaction, not from your first capture — so it resets each time you use CookCredit. This matches the compact on-screen line ("deleted when that's done or 3 years after I last use CookCredit").
Destruction is real and complete. It reaches backups, caches, and shadow copies, and it is wired to account deletion — deleting your account triggers destruction of your biometric data.
The full, governing terms live in our publicly-posted Biometric Data Retention & Destruction Schedule, which we maintain and follow as required by BIPA §15(a). If anything here and the Schedule differ, the Schedule controls the retention period.
We do not sell, lease, trade, or otherwise profit from your biometric data, and we do not disclose it except as needed to provide the Services (e.g., to vetted cloud processors under contracts that limit their use), or where the law requires (e.g., a valid legal order) or your written consent permits. This commitment follows BIPA §15(c)–(d).
Services that do not need hand-geometry data.
biometric data through in-app settings or by emailing [PRIVACY EMAIL].
triggers deletion under the Schedule, but it does not un-train models already trained or undo derived datasets already created from data you previously consented to.
You must be at least the Minimum Age to sign this release and have your hand-geometry data collected. "Minimum Age" means 18, or a greater age where your local law requires it for us to collect biometric data without parental consent. No minors. We do not knowingly collect biometric data from anyone under 18. By signing, you confirm you meet the Minimum Age. (See Terms of Service §1.)
Some states give biometric data special protection — including Illinois (BIPA), Texas (CUBI), and Washington. Until this dedicated written release is live in your state, CookCredit does not collect hand-geometry data from residents of Illinois, Texas, or Washington. We determine your state from your connection at the point of collection and block the feature ourselves where collection is not yet enabled — this gate is our responsibility, not something we shift onto you, and your signing does not authorize collection in a state where it is disabled. Where collection is available, this release and the §15(a) Schedule govern it, and BIPA's protections — written release, retention schedule, no sale — apply.
This release is part of, and should be read with, our Privacy Policy (see §6 Biometric and §7 Retention) and Terms of Service (see §1 Age and §8 Data license). Those documents say the same facts in more context; nothing in them reduces the protections in this release for your biometric data.
Email [PRIVACY EMAIL] to ask a question, withdraw consent, or request deletion.
This block is presented as a default-OFF, separate control — it is not bundled with the general consent box. You must affirmatively check it to proceed. We log your consent with a timestamp and the exact version of this text shown to you.
By checking the box below and clicking "Agree & Continue," I affirm that:
is collected (Section 2), the specific purpose (Section 3), and the retention and destruction terms (Section 4);
hand-geometry data and the data derived from it** for the purposes stated above; and
(Section 6), with withdrawal being forward-only.
☐ I agree to the CookCredit Biometric Notice & Written Release. (must be checked — off by default)
This is my electronic signature under applicable law, and I intend it to have the same effect as a handwritten signature.
`` Release version shown: [TEXT VERSION ID] Effective date of text: [EFFECTIVE DATE] Signed by (account): [USER ID / EMAIL] State of residence: [STATE — determined by CookCredit from your connection] Consent timestamp (UTC): [YYYY-MM-DDThh:mm:ssZ] Result: AFFIRMATIVE — CONSENT GRANTED ``
[Logged automatically. A copy of the exact text you agreed to, and the timestamp above, is retained as the record of your consent. Whether collection is permitted in your state is determined by CookCredit and is not established by your signature.]
CookCredit — draft legal documents. This is a beta preview and not legal advice.