Kling AI's virtual try-on feature processes photographs of people's bodies and faces to simulate clothing — this involves handling biometric and photographic data without any visible consent or retention disclosure.
If you use the virtual try-on feature by uploading a photo of yourself, Kling AI processes your biometric data — but no notice of how long this data is kept or whether it is shared with third parties is provided in this document.
Cross-platform context
See how other platforms handle Virtual Try-On Biometric Data Processing and similar clauses.
Compare across platforms →Biometric data including facial geometry and body images is among the most sensitive personal data category, and processing it without explicit consent and a published retention schedule violates Illinois BIPA and similar statutes.
1) REGULATORY FRAMEWORK: Illinois BIPA (740 ILCS 14/15) requires written release before collecting biometric identifiers, a publicly available retention/destruction schedule, and prohibits sale or profit from biometric data without consent. Texas CUBI (Tex. Bus. & Com. Code §503.001) and Washington My Health MY Data Act (SB 1155) have similar requirements. GDPR Art. 9 classifies biometric data used for unique identification as a special category requiring explicit consent (Art. 9(2)(a)) or another specific exemption. CCPA §1798.140(b) defines biometric information as sensitive personal information requiring opt-in consent for certain uses. 2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.