This Privacy Policy explains what personal data screenme.science collects, why, and your rights over it. It also says who is responsible for it and how long we keep it.
1. Data we collect
To verify a screening we collect: your account details (name, email); the screening video you record; still images derived from it (your face and the test strip); biometric face data used to confirm the person testing is the enrolled member; the test result and outcome; and technical data such as device and log information. Screenings are linked to the account and program that requested them. Our public marketing pages additionally record cookie-free, aggregated page-view statistics — the page address, referrer, browser type and country — collected by analytics software we host on our own servers and never linked to your account or identity.
2. Who is responsible for your data
If you use screenme.science on your own, without belonging to a programme, we are the controller of your data and this policy applies in full.
If you take part through an employer, school, kindergarten, university, course or other programme, that organisation is the controller and decides what screening is run and why. We act as their processor. Your rights are exercised through them in the first instance, and the terms of our processing are set out in our Data Processing Terms at screenme.science/data-processing.
3. How the face check works, and what we do not do
The check is a one-to-one comparison between your face in the recording and a reference photo you enrolled yourself. We do not search your face against a database of other people, and no biometric template of your face is created or stored. What we hold is a photograph.
4. Why we use it, and our legal basis
The face check — comparing your face in the recording with your reference photo: your explicit consent, Article 9(2)(a) GDPR. We ask for it separately from anything else, and you can withdraw it at any time.
The recording, the still images taken from it, the test result and your account details — delivering the screening and issuing a timestamped record: performance of a contract with you or with the programme you belong to.
Technical and log data — keeping the service available, secure and diagnosable: our legitimate interests.
To withdraw consent for the face check, contact us at privacy@screenme.science. We delete your reference photo and stop comparing. You do not have to delete your account. Withdrawal takes effect from the moment we act on it and does not affect screenings already completed.
5. Children
Where the person being screened is under 14, an adult must be present and must collect or supervise the collection of the sample. The screening cannot start without confirming this.
Where a child takes part through a school, kindergarten or other programme, that organisation is the controller and is responsible for obtaining consent from the person with parental responsibility. We process the child's data only to deliver the screening the organisation asked for.
We do not profile children and we do not use their data for marketing.
6. How long we keep it
Screening records and their evidence — the recording, the images and the result: 12 months from the date the screening reaches a final outcome.
Your enrolled reference photo: until your membership of the programme ends, or after 12 months without a screening, whichever comes first, and immediately if you withdraw consent.
Account details: for as long as your account is open.
Where a programme is subject to a legal requirement to keep records for longer, that period applies instead and the programme will tell you what it is.
7. Who receives your data
We share personal data only with service providers that process it on our behalf. They fall into these categories:
A cloud storage provider, which stores the recordings, the still images taken from them and the screening records. This storage is not currently restricted to the European Union.
Providers that process the recording and the still images so that a screening can be verified, including the face check you consent to separately.
A payment provider. It receives no screening data.
Some of these providers process data outside the European Economic Area. Where they do, the transfer is made under the European Commission's standard contractual clauses.
The names of these providers are available on request to the organisations that use screenme.science under a data processing agreement.
We do not sell your data and we do not use it to train anyone's models.
8. Who can see your data
You — everything about your own screenings.
The coordinator of your programme — whether you completed a screening, whether it was verified, and the result. Coordinators cannot view the face images from your screenings.
Our reviewers — where a screening needs manual review, a small number of trained staff can see the recording and images. Every such access is logged.
9. Your rights
Subject to your jurisdiction, you may request access to the personal data we hold about you, a copy for export, correction of inaccurate data, deletion of your data, and restriction of or objection to certain processing.
You may withdraw your consent to the face check at any time without deleting your account, by contacting us. If you belong to a programme, exercise these rights through that organisation in the first instance.
You may also lodge a complaint with your national data protection authority.
To exercise any of these rights, contact us using the details below.
10. Cookies and similar technologies
Without asking, we store only what the site needs in order to work: your language and your cookie choice, in your browser's local storage. If you are signed in, or taking a screening, the app also keeps a diagnostic log of its own events on your device and sends it to us so we can investigate faults. Visitors who are not signed in send no diagnostic log. The page-view statistics described in section 1 use no cookies.
Stripe. When you verify a payment card in the app, the card form is provided by Stripe, which sets its own cookies in your browser (__stripe_mid, kept for one year, and __stripe_sid, kept for 30 minutes) and receives information about your device and browser, to prevent fraud. Stripe is loaded only when you open card verification, and on no other page.
Google Ads. On pages that belong to an advertising campaign, currently the Swedish-language homepage, we ask whether you accept Google Ads cookies before anything is loaded from Google. If you accept, Google's tag is loaded: it sets the _gcl_au cookie on screenme.science (kept for up to 90 days) and cookies on Google's own domains, such as doubleclick.net, and Google receives your IP address, details of your browser and the address of the page, so that we can measure our advertising and show our ads to people who have visited the site. If you reject, or make no choice, nothing is loaded from Google.
Our legal basis for Google Ads cookies is your consent (Article 6(1)(a) GDPR). You can change your choice at any time with "Cookie settings" at the bottom of the page where you were asked. After you withdraw consent, Google's tag is no longer loaded. Clearing your browser's stored data also resets the choice.
Contact
For privacy requests or questions about this policy, contact us at privacy@screenme.science.
Last updated: September 2026