BIOMETRIC DATA NOTICE — READ CAREFULLY BEFORE SUBMITTING

This service collects and processes your facial geometry, which is classified as biometric information under the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14/1 et seq.), the Chicago Personal Information Collection and Protection Ordinance (MCC § 2-312-010 et seq.), the Texas Capture or Use of Biometric Identifier Act (CUBI, Tex. Bus. & Com. Code § 503.001 et seq.), the Washington My Health MY Data Act, and other applicable laws. By checking the consent box and submitting, you agree to this entire Policy including the mandatory arbitration clause and class action waiver in Section 20.

Biometric Data Consent, Privacy & Terms of Use

Effective Date: March 12, 2026 · teaappgreenflags.com and its owners, partners, and associates (“Company,” “we,” “us,” or “our”)

1. Scope and Applicability

This Biometric Data Consent, Privacy & Terms of Use (“Policy”) applies to all users who submit a photograph through the Tea App Profile Search tool available at https://app.teaappgreenflags.com (“the Service”). By checking the consent box and submitting an image, you acknowledge that you have read, understood, and agree to be legally bound by this Policy in its entirety.

2. What We Collect

When you use the Service, we collect and may retain indefinitely:

Facial geometry and biometric identifiers — your facial scan including landmark coordinates, bounding box data, pose, and quality measurements, extracted during comparison processing.
The submitted photograph — stored in encrypted private cloud storage.
Embedded image metadata (EXIF) — device make/model, software version, GPS coordinates, timestamp, and other camera data embedded in your image file.
Contact information — email address and phone number you provide.
Search data — name(s) searched, age, city, and all results returned.
Device & session data — IP address, browser user agent, screen dimensions, timezone, device memory, language settings, referrer URL, and other technical identifiers.

Except where prohibited by applicable law (see Sections 6–10), we retain all data for as long as we deem necessary for our business purposes, which may be indefinitely.

3. Purpose and Use

We collect and process your data for the following purposes:

Performing facial comparison against publicly visible profile photographs as requested by you.
Providing search results, alerts, and follow-up communications related to the Service.
Marketing, promotional communications, and sales outreach (see Section 5).
Improving and evaluating our services, technology, and user experience.
Legal compliance, fraud prevention, dispute resolution, and enforcement of our rights.
Internal analytics and business intelligence.
Any other purpose disclosed to you at the time of collection or consistent with this Policy.

4A. Image Upload Authorization & User Liability — CRITICAL

BY SUBMITTING ANY IMAGE, YOU MAKE THE FOLLOWING LEGALLY BINDING REPRESENTATIONS AND WARRANTIES:

Authorization to Submit. You represent and warrant that you are one of the following with respect to every individual depicted in any image you submit:
- The person depicted, submitting your own image of your own free will;
- A parent or legal guardian of the depicted person with full legal authority to provide biometric consent on their behalf;
- An attorney-in-fact or agent holding a duly executed written power of attorney specifically authorizing biometric data submission;
- A licensed professional (e.g., private investigator, licensed attorney) with lawful authority under applicable law to submit biometric data of the depicted individual for the stated purpose; or
- A holder of explicit, prior, documented written consent from the depicted individual that specifically authorizes submission of their facial image for biometric comparison processing.
Compliance with Biometric Privacy Laws. You acknowledge that submitting an image of another person without their informed written consent may constitute a violation of BIPA (which carries statutory damages of $1,000–$5,000 per violation), CUBI, the Washington My Health MY Data Act, CCPA/CPRA, and other applicable biometric and privacy laws — and that you, not the Company, bear sole legal responsibility for any such violation.
No Verification Obligation. The Company does not and is not required to verify your authorization to submit any image. The Company processes images in good faith reliance on your representations herein. The Company bears no liability for processing an image that you submitted without proper authorization.
Full Personal Liability. You accept full, exclusive, personal liability for: (a) any claims by individuals depicted in images you submitted without proper authorization; (b) any regulatory penalties or enforcement actions arising from your unauthorized submissions; (c) any damages, costs, legal fees, or sanctions resulting from your violation of any biometric privacy law; and (d) any harm caused to any third party as a result of your use of the Service.
Indemnification for Unauthorized Uploads. If any claim, demand, lawsuit, regulatory action, or other proceeding is brought against the Company arising from an image you submitted without proper authorization — including but not limited to claims under BIPA, CUBI, invasion of privacy, identity theft, harassment, or civil stalking statutes — you agree to immediately assume the defense of such claim at your sole expense and to indemnify and hold harmless the Company for all resulting costs, damages, judgments, fines, settlements, and attorneys’ fees, without limitation.

THE COMPANY'S FACIAL COMPARISON SERVICE IS PROVIDED AS A TOOL. THE USER IS SOLELY RESPONSIBLE FOR ENSURING THEY HAVE ALL REQUIRED AUTHORIZATIONS BEFORE SUBMITTING ANY IMAGE. THE COMPANY DISCLAIMS ALL LIABILITY FOR USER-INITIATED UNAUTHORIZED SUBMISSIONS.

5. Marketing & Communications Consent

By consenting to this Policy and providing your contact information, you expressly consent to receive communications from teaappgreenflags.com and its owners, partners, and associates including:

Email marketing — promotional offers, service updates, newsletters, and other marketing messages. By providing your email address you opt in to email marketing communications from us.
Text/SMS messages — by providing your phone number, you expressly consent under the Telephone Consumer Protection Act (TCPA, 47 U.S.C. § 227) to receive autodialed or pre-recorded text messages and SMS marketing messages at the number provided, even if the number is on a state or federal Do Not Call registry. Standard message and data rates may apply. Message frequency varies.
Phone calls — including autodialed calls, pre-recorded messages, and live calls for marketing, informational, or transactional purposes.
Retargeting and digital advertising — your data may be used to deliver targeted advertisements on third-party platforms.
Service alerts and notifications — communications related to your search results, profile monitoring, or other Service features.

Opt-out: You may opt out of email marketing at any time by clicking “Unsubscribe” in any email. You may opt out of SMS messages by replying STOP to any text message. Opting out of marketing communications does not affect our right to retain your data as described in this Policy.

Your consent to marketing communications is a condition of using the Service and is separate from, but included in, your biometric data consent above.

6. Illinois BIPA Compliance (740 ILCS 14/1 et seq.)

§ 15(a) — Written Policy & Retention Schedule

This publicly available Policy governs our retention and destruction of biometric identifiers. Biometric identifiers and biometric information will be permanently destroyed no later than 3 years from the date of collection, or when the initial purpose for collection has been fulfilled, whichever occurs first, as required by 740 ILCS 14/15(a). All other personal data (contact information, search records, device data) is retained for as long as we deem necessary for our business purposes, which may be indefinitely.

§ 15(b) — Informed Written Consent Before Collection

This Policy constitutes the written notice required by § 15(b). Purpose: facial identity comparison. Duration of biometric data retention: up to 3 years. Your electronic consent constitutes a written release as required by law.

§ 15(c) — No Profit from Biometric Data

We do not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information specifically. Your contact and search data may be used for marketing purposes as described in Section 5.

§ 15(d) — No Unauthorized Disclosure

We will not disclose or disseminate biometric identifiers or biometric information to any third party without your written consent, except as required to perform the requested service or as required by law.

§ 15(e) — Reasonable Standard of Care

We protect biometric data using a reasonable standard of care within our industry, in a manner that is at least as protective as our protection of other confidential and sensitive information.

7. Chicago Biometric Ordinance Compliance (MCC § 2-312-010 et seq.)

In compliance with the Chicago Personal Information Collection and Protection Ordinance:

This publicly posted written policy governs our biometric data retention schedule and destruction guidelines.
We provide written notice prior to collecting biometric information, describing the specific purpose and length of term for collection, storage, and use.
We obtain written consent before collection.
We do not sell, lease, trade, or otherwise profit from biometric identifiers or information.
We do not disclose biometric information without written consent, except as required by law or to provide the requested service.
Biometric data will be permanently destroyed within 3 years of collection or when the purpose is fulfilled, whichever occurs first.

8. Texas CUBI Compliance (Tex. Bus. & Com. Code § 503.001 et seq.)

Facial geometry extracted from your image constitutes a biometric identifier under CUBI. In compliance:

We inform you before capture (this Policy serves that notice).
We do not sell, lease, or disclose biometric identifiers except to service providers assisting in providing the requested service under a CUBI-compliant contract.
We protect biometric identifiers using reasonable care at least as protective as our protection of other sensitive information.
We destroy biometric identifiers within a reasonable time, not to exceed 3 years from the date of collection or when the purpose has been fulfilled.

9. Washington State Compliance (My Health MY Data Act; RCW § 19.373 et seq.)

For Washington residents:

We obtain your valid authorization before collecting, using, or sharing your biometric data.
We do not sell your biometric data to third parties.
You have the right to withdraw consent and request deletion of biometric data specifically by contacting us (see Section 23). Non-biometric personal data is retained per our standard retention practices.
Deletion requests for biometric data will be honored within the timeframe required by applicable law.

10. California CCPA / CPRA Compliance

For California residents, biometric information is Sensitive Personal Information under Cal. Civ. Code § 1798.100 et seq. We:

Do not sell or share biometric information as defined under CCPA/CPRA.
Limit use of Sensitive Personal Information to performing the services you requested.
Honor your right to know, right to delete (for biometric data specifically, subject to our legal retention obligations), right to correct, and right to non-discrimination for exercising privacy rights.
All other personal data, including contact information, search history, and device data, is retained for as long as necessary for our business and legal purposes, which may be indefinitely, consistent with applicable law.

11. Retention Schedule

IP-Based Jurisdiction Detection & Deletion Determination

Your IP address at the time of submission is automatically captured and used to determine your approximate geographic location and, therefore, which jurisdiction’s biometric privacy laws govern your submission. Your detected jurisdiction determines what biometric data we delete and when. The applicable retention and deletion rules are:

Detected Jurisdiction	Governing Law	Biometric Data Deletion Obligation
Illinois	BIPA (740 ILCS 14/1)	Destroyed within 3 years of collection or when purpose fulfilled, whichever is first
Chicago (IL)	BIPA + Chicago Ordinance MCC § 2-312-010	Destroyed within 3 years of collection or when purpose fulfilled
Texas	CUBI (Tex. Bus. & Com. Code § 503.001)	Destroyed within a reasonable time, not to exceed 3 years
Washington	My Health MY Data Act (RCW § 19.373)	Upon valid consent withdrawal request, within legally required timeframe
California	CCPA / CPRA (Cal. Civ. Code § 1798.100)	Upon verified consumer deletion request, subject to legal retention exceptions
All Other Jurisdictions	No applicable mandatory biometric statute	Retained at our discretion for business purposes, which may be indefinitely

Note: IP geolocation is not always precise and may not perfectly reflect your physical location. If you believe your jurisdiction was incorrectly detected, or if you are a resident of a state with biometric privacy protections not listed above, contact us at the secure contact form to assert your applicable rights. Non-biometric personal data (email, phone, search records, EXIF, device fingerprint, consent record) is retained indefinitely in all jurisdictions, as permitted by law.

Data Type	Retention Period	Reason
Submitted face photograph	Max 3 years (BIPA/CUBI legal requirement)	Biometric data — legally mandated destruction
Extracted facial geometry	Not retained after comparison	Biometric data — processed in-memory only
Email address & phone number	Indefinitely (as long as permitted by law)	Lead data, marketing, business operations
Search records (names, age, city, results)	Indefinitely (as long as permitted by law)	Business analytics, legal compliance
EXIF, device, & IP data	Indefinitely (as long as permitted by law)	Security, fraud prevention, legal compliance
Biometric consent record	Indefinitely (legal compliance)	Audit trail, legal defense

12. Disclosure & Third-Party Sharing

We may disclose your data to:

Service Providers

Third-party vendors who assist in providing the Service, including facial comparison processing, encrypted cloud storage, database infrastructure, email delivery, and SMS messaging. These providers are contractually bound to process data only for the specified purpose and maintain equivalent security standards.

Marketing Partners

Your non-biometric contact and usage data (email, phone, search history, device data) may be shared with marketing platforms, CRM tools, and advertising partners to deliver marketing communications and targeted advertisements as described in Section 5.

Legal & Compliance

We may disclose data when required by law, subpoena, court order, regulatory inquiry, or to protect our legal rights, enforce this Policy, or prevent fraud or illegal activity.

Business Transfers

In connection with a merger, acquisition, sale of assets, or other business transfer, your data may be transferred to the successor entity, which will be bound by this Policy or notify you of any material changes.

Biometric identifiers specifically will NOT be sold, leased, traded, or disclosed to third parties for their independent use. See Section 14.

13. Security Safeguards

Encryption in transit: All data transmitted over HTTPS/TLS 1.2+.
Encryption at rest: All stored data encrypted using AES-256.
Access control: Least-privilege access policies. No public read/write access to any data store.
No persistent facial geometry: Facial geometry is never persistently stored in a face collection or facial recognition database.
Audit logging: All access to data stores is logged and monitored.
Incident response: In the event of a breach involving biometric data, we will notify affected individuals as required by applicable law.

14. No Sale of Biometric Data

WE DO NOT SELL, LEASE, RENT, TRADE, OR OTHERWISE PROFIT FROM YOUR BIOMETRIC IDENTIFIERS OR BIOMETRIC INFORMATION. This prohibition is absolute. Your non-biometric personal data (contact information, search history, device data) may be used for our marketing and business purposes as described in this Policy.

15. Prohibition on Minors

The Service is strictly for persons 18 years of age or older. We do not knowingly collect biometric or personal data from minors. If you are under 18, you may not use the Service. If we learn we have inadvertently collected data from a minor, we will delete that data promptly. Contact us immediately if you believe we have collected data from a minor.

16. Acceptable Use

By using the Service, you represent, warrant, and agree that:

You are searching for a real person whom you have a legitimate, lawful reason to search for (e.g., your own partner, a person you are dating, or someone you have a genuine personal connection to).
You will not use the Service to stalk, harass, intimidate, threaten, or harm any individual.
You will not use search results to discriminate against any person in housing, employment, lending, or any other protected category.
You will not use the Service for any unlawful purpose, including but not limited to violating any federal, state, or local law.
You will not attempt to reverse-engineer, scrape, copy, or exploit the Service or its underlying technology.
Results are for informational purposes only and are not to be used as legal evidence in any proceeding.
You accept sole responsibility for how you use the search results.

Violation of this section may result in immediate termination of access to the Service and may expose you to civil and/or criminal liability.

17. Disclaimer & Accuracy of Results

THE SERVICE AND ALL RESULTS ARE PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT ANY WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, OR NON-INFRINGEMENT.

Facial recognition and comparison technology is not infallible. Results may include false positives (incorrect matches) and false negatives (missed matches). We make no guarantee regarding the accuracy, completeness, or reliability of any search result. Results are provided for informational purposes only and are not legal evidence of identity, presence, or any other fact. You assume all risk associated with reliance on results.

18. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, TEA APP GREEN FLAGS, LLC, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, LICENSORS, AND SUCCESSORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR IN CONNECTION WITH THE SERVICE OR THIS POLICY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL OUR TOTAL CUMULATIVE LIABILITY TO YOU FOR ANY AND ALL CLAIMS ARISING FROM OR RELATED TO THE SERVICE EXCEED THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM, OR $100.00, WHICHEVER IS GREATER.

19. Indemnification

You agree to indemnify, defend, and hold harmless teaappgreenflags.com and its owners, partners, and associates and its officers, directors, employees, agents, licensors, successors, and assigns from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to: (a) your use of the Service; (b) your violation of this Policy; (c) your violation of any applicable law; (d) your violation of any third party’s rights; or (e) your use of or reliance on any search results. We reserve the right to assume exclusive control of any matter subject to indemnification by you, at your expense.

Specific Indemnification for Unauthorized Image Submissions

Without limiting the foregoing, you specifically agree to indemnify, defend at your own cost, and hold harmless the Company from any and all third-party claims, regulatory enforcement actions, civil suits, class action proceedings, or governmental investigations arising from or related to any image you submitted to the Service without the proper authorization described in Section 4A, including but not limited to:

Claims under BIPA (including per-violation statutory damages of up to $5,000 per negligent or intentional violation);
Claims under CUBI, the Washington My Health MY Data Act, CCPA/CPRA, or any other state or federal biometric or privacy statute;
Civil claims for invasion of privacy, appropriation of likeness, identity fraud, harassment, stalking, or tortious interference;
Any attorney’s fees, court costs, settlement amounts, or regulatory fines imposed against the Company as a result of your unauthorized submission;
Any damages claimed by the person depicted in the unauthorized image.

This indemnification obligation survives termination of your use of the Service and is not subject to the liability cap in Section 18. Your indemnification obligation is unlimited in scope and amount with respect to unauthorized image submissions.

20. Mandatory Arbitration & Class Action Waiver — READ CAREFULLY

THIS SECTION CONTAINS A MANDATORY ARBITRATION CLAUSE AND A CLASS ACTION WAIVER. BY CONSENTING TO THIS POLICY, YOU WAIVE YOUR RIGHT TO A JURY TRIAL AND YOUR RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT.

Agreement to Arbitrate. You and teaappgreenflags.com and its owners, partners, and associates agree that any dispute, controversy, or claim arising out of or relating to the Service, this Policy, or any breach thereof — including any claims under BIPA or any state biometric privacy statute — shall be resolved exclusively by final and binding arbitration administered by the American Arbitration Association (“AAA”) under its Consumer Arbitration Rules, rather than in a court of law.

Class Action Waiver. YOU AGREE THAT ANY CLAIMS SHALL BE BROUGHT SOLELY IN YOUR INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, OR REPRESENTATIVE ACTION. The arbitrator may not consolidate more than one person’s claims and may not preside over any class or representative proceeding. This waiver is a material inducement for us to provide the Service.

Exceptions. Either party may seek injunctive or other equitable relief in a court of competent jurisdiction to prevent the actual or threatened infringement, misappropriation, or violation of intellectual property rights. You may also bring individual claims in small claims court.

Opt-Out. You may opt out of this arbitration agreement by sending written notice to our contact email within 30 days of first using the Service. Opting out does not affect the class action waiver, which remains in effect.

Waiver of BIPA Class Actions. You specifically agree that any claims under the Illinois Biometric Information Privacy Act or any substantially similar state statute shall be brought solely on an individual basis and not as part of any class, collective, or representative action.

21. Your Privacy Rights

Subject to applicable law, you have the following rights regarding your biometric data specifically:

Right to Know

Request information about what biometric data we hold about you and the purposes of use.

Right to Delete Biometric Data

Request deletion of your submitted photograph and any retained biometric identifiers. This does not extend to your contact information, search records, or other non-biometric personal data, which we retain per our standard practices.

Right to Withdraw Biometric Consent

Withdraw consent to biometric processing. Withdrawal does not retroactively affect prior processing and does not obligate us to delete non-biometric data.

Right to Non-Discrimination

We will not discriminate against you for exercising biometric privacy rights.

Note: Rights to deletion and access apply to biometric data as required by applicable law. Your contact information, search history, EXIF data, device fingerprint, and other non-biometric personal data are not subject to mandatory deletion under most applicable laws and will be retained per Section 11.

22. Governing Law & Jurisdiction

This Policy and any dispute arising hereunder shall be governed by and construed in accordance with the laws of the State of Illinois, without regard to its conflict of law provisions. For any matters not subject to arbitration under Section 20, you consent to the exclusive personal jurisdiction and venue of the state and federal courts located in Cook County, Illinois.

23. Contact & Biometric Deletion Requests

To submit a biometric data deletion request, ask questions about this Policy, or exercise your rights under applicable biometric privacy law, contact our Privacy Officer:

teaappgreenflags.com

Attn: Privacy Officer — Biometric Data Requests

Email: the secure contact form

We will acknowledge receipt of biometric deletion requests within 10 business days and fulfill verified requests within the timeframe required by applicable law. We may require identity verification before processing a deletion request. Deletion of biometric data does not obligate us to delete any other personal data we hold about you.

24. Changes to This Policy

We may update this Policy from time to time. If we make material changes affecting how we collect, use, or share biometric data, we will post a prominent notice and update the Effective Date above. Your continued use of the Service after such changes constitutes your acceptance of the revised Policy. For material changes to biometric data collection practices under BIPA or equivalent statutes, we will obtain fresh consent.

25. AI-Generated Report Disclaimer & Intended Use

AI-GENERATED REPORT DISCLAIMER & INTENDED USE POLICY

This report is generated entirely by artificial intelligence and is based solely on the opinions, views, and publicly posted content found on the Tea App platform. The analysis reflects data submitted by third-party users of Tea App and does not represent the views, opinions, or endorsements of Tea App Green Flags, its owners, operators, employees, or affiliates.

Purpose of This Report:

This report exists for one purpose: to provide awareness. Specifically, it is designed to help men understand how they may be perceived in the dating community based on posts made about them on Tea App. The intent is to illustrate the perspective and potential reputational impact that defamatory or negative posts can cause — not to create, spread, or amplify defamation.

Tea App Green Flags is a defamation awareness and reputation management service. We do not create content about individuals. We analyze content that already exists on public platforms and present it in a structured format to help the subject (or their legal representative) understand the scope and severity of what has been posted about them.

Who This Report Is For:

This report is prepared exclusively for:

The individual who is the subject of the report, OR
The legal representative(s) of the subject

This report is NOT intended for distribution to third parties, employers, landlords, insurance companies, financial institutions, or any other entity for the purpose of making decisions about the subject.

This Is Not a Background Check:

This report is NOT a consumer report as defined by the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq. Any person or entity that uses this report as a background check, employment screening tool, tenant screening tool, credit evaluation, insurance underwriting decision, or any other purpose regulated under federal or state consumer reporting laws is doing so in direct violation of federal law and the Terms of Service governing this report. Tea App Green Flags expressly prohibits such use and will cooperate with law enforcement in the prosecution of any misuse.

Accuracy Disclaimer:

All scores, grades, percentages, risk assessments, and analytical conclusions contained in this report are AI-generated approximations based on publicly available third-party content. They are not verified facts. Tea App Green Flags makes no representations or warranties regarding the accuracy, completeness, or reliability of any information in this report. The content analyzed may include false, misleading, exaggerated, or defamatory statements posted by anonymous third parties. This report’s analysis of that content should not be interpreted as validation of any claims made within it.

Fighting Defamation, Not Spreading It:

This service was created to combat online defamation — not to facilitate it. By providing subjects with a clear picture of what has been posted about them, we empower them to take appropriate action, whether that means seeking legal counsel, requesting post removals, or simply understanding the landscape of their online dating reputation. Anyone who attempts to use this report to harass, intimidate, stalk, defame, or discriminate against any individual is in violation of our Terms of Service and may face civil and criminal liability.

Legal Disclaimer

This Policy is intended to comply with applicable biometric, privacy, and consumer protection laws. Nothing herein constitutes legal advice. Compliance obligations vary by jurisdiction and may change over time. teaappgreenflags.com is not affiliated with Tea App or any related entity.