Personal data subject: stated when the consent is accepted.
I consent to ByFly Group LLP (BIN 261040023460, address: Республика Казахстан, г. Алматы, ул. Айтеке би, д. 100, н. п. 71) carrying out an AI check before I go online: the processing of the image of my face, my video and my voice, including the matching of my face with my registration selfie, and the assessment of signs of my condition by a program using artificial intelligence (AI). The consent is valid while my agreement with ByFly (a driver, courier or carrier agreement) is in force.
1.What it is. Before going online for the first time each day, the app runs a 30–60 second check: it matches my face with the selfie I took at registration, so that the person going online is the account holder; it assesses the reaction of my pupils to a flash of the screen, blinking, following a dot with my eyes, reaction time and my speech when I read a phrase aloud. If my driving licence says that I drive with glasses or contact lenses, the program checks whether I am wearing glasses, and I confirm contact lenses myself with the mark "I am wearing lenses": lenses cannot be checked by the camera. This is a ByFly safety measure, not a medical check and not a medical report: no medical conclusions are drawn from it. I undergo the medical check before and after a shift myself — this is my obligation under the agreement.
2.The program's decision. If there are no signs, I go online. If the program sees signs of intoxication, or that someone other than the account holder is taking the check, going online is blocked until a ByFly staff member makes a decision. This is automated processing that changes my rights, so ByFly asks for my consent and explains the procedure. If the program could not produce a result (a failure), going online is not blocked. If my driving licence requires glasses and the program does not see them, the app asks me to put them on and repeat the check; if there are still no glasses the second time, going online is closed until a ByFly staff member decides, as in point 3.
3.What happens after a signal. A ByFly staff member contacts me by phone or in the app chat and decides: the program made a mistake — the restriction is lifted at once; or sends me for a medical check to a licensed medical organisation at my own expense. Until I upload a certificate (a photo of the mark in the waybill or of the medical report) and the staff member checks it, I cannot start a shift. Without waiting for the call, I can undergo a medical check myself and upload the certificate.
4.Objection. The app has an "I disagree" button — an objection to the program's decision. ByFly considers it no later than 3 working days from the day it is received, usually during the shift, and reports the result in the app. I can challenge the staff member's decision under my agreement with ByFly, and seek protection of my personal data before the authorised body or in court.
5.What data. The video and voice recording of the check; the registration selfie; the vision correction mark from my driving licence (glasses, lenses) and my "I am wearing lenses" mark; the numbers calculated by the program (pupil size and reaction, blinking, tracking, reaction time, speech rate, face match); the outcome of the check; if there is a signal — the staff member's decision and the medical check certificate, from which ByFly takes only "admitted" or "not admitted", the date, the time and who carried out the examination — without health indicators. The image of the face is an identifier of my personal data, and matching it with the selfie is processing of biometric data.
6.Where and for how long. All data are stored and processed on servers in the Republic of Kazakhstan; there is no cross-border transfer. They are not transferred to third parties, except in cases expressly provided for by law. The video, the voice recording and the photo of the certificate are kept for 30 days, and if there was a signal or an objection regarding the check — until the decision and for another 30 days; then they are deleted. The numbers from the checks — to compare with my usual baseline — are kept while the agreement is in force. The outcomes of the checks and the staff members' decisions — for 3 years after the agreement ends, for handling disputes. Only numbers without the face, the voice or any link to me are used to improve the program.
7.If I do not agree. The AI check is not run and my work is not closed: before my first time online each day I record a short video in the app (my face and a phrase read aloud), and a ByFly staff member watches it — compares my face with the photo in my profile and looks at my condition, without artificial intelligence programs or biometric templates. This processing is based on my Consent to the collection and processing of personal data; the procedure and storage periods are in my contract with ByFly. Refusing does not affect orders or rating.
8.Withdrawal: in the app, "Profile → Documents", or via the contact of the person responsible for personal data processing (директор ТОО «ByFly Group», info@byfly.kz). After withdrawal, point 7 applies. My data are deleted no later than 15 working days after withdrawal, except data on an objection, signal or dispute already filed — these are deleted after it is closed.