Biometric data
General meaning and what it means for FormFit face scanning.
What biometric data is (in general)
In privacy and security discussions, biometric data usually means information derived from the measurable characteristics of a person's body or behavior—things that are relatively unique to them and stable over time. Regulators and industry frameworks often treat this category as sensitive because it can identify someone strongly, is difficult to change if compromised, and may reveal more about the individual than ordinary contact details.
Examples you may have seen elsewhere include fingerprints, iris or retina patterns, voiceprints used for authentication, DNA profiles, and facial geometry or templates produced for face verification. The exact legal definition varies by country and sector; many laws look at both raw samples (e.g. a scan or recording) and derived representations (e.g. a numerical template or 3D model) when they assess risk and consent requirements.
Organizations that collect biometrics are generally expected to use them only for defined purposes, protect them with strong technical and organizational safeguards, retain them only as long as necessary, and be transparent with individuals about collection and use.
What "biometric data" means for Vitacore FormFit
For FormFit and our Forge scanning flow, we collect material that is commonly treated as biometric-related because it captures the shape and appearance of your face in order to produce a custom-fitted CPAP mask. In practice, that includes:
- Face-scan video recorded according to our on-screen instructions, used to reconstruct three-dimensional information about your facial surface and contours.
- Still calibration photographs of your face, used to align scale and improve the quality of the reconstruction.
- Derived 3D data—such as meshes or models—that describe your facial geometry for manufacturing, quality checks, and related steps in the mask production pipeline.
We use this information for product fit and fulfillment—not for advertising profiling, not for selling data to third parties, and not as a general-purpose identity system. It is tied to your order or scan session and the operational needs of producing your mask. How we protect it in transit and storage, where it is processed, retention, and your rights are described in our security overview and privacy policy.
Note: This page is a plain-language explainer for customers and partners. It is not legal advice. If you need a formal position for compliance (for example under a specific province, state, or sector rule), work with qualified counsel and use your executed agreements and policies as the source of truth.