Biometric Notice

Credit Karma · agreement dated June 9, 2026 · Official agreement

Read the agreement

11 of 11 cards

Data Access & Collection · Context

The notice covers optional automated identity verification

This notice describes how Intuit Inc. and its group companies handle biometric information if you choose automated identity verification through an Intuit service. QuickBooks Money and QuickBooks Payments are examples, not an exhaustive service list. The linked Global Privacy Statement provides additional processing details.

Details not recorded for this card

Supporting quotations

This Biometric Privacy Notice explains how Intuit Inc. and the Intuit group companies (collectively “Intuit,” “we,” “us,” or “our”) will treat your personal biometric information (“Biometric Information”) if you choose to engage in automated identity verification through one of our services (including, for example, QuickBooks Money and QuickBooks Payments).
The Intuit Global Privacy Statement provides further details about how Intuit processes your data.

Not stated here

  • The linked group-company list and Global Privacy Statement are not supplied here; this notice does not name a specific Credit Karma verification feature.

Data Access & Collection · Company practice

Verification can use an ID, a selfie and biometric information

If you choose automated identity verification, you may provide Intuit or its service providers with information from your photo ID or another identification document, including your name, birth date, image, address and government-issued identification details. You may also provide a prompted photo or video selfie and biometric information derived from both your government ID image and selfie.

Details not recorded for this card

Supporting quotations

If you choose to engage in automated identity verification, you may provide us, or our service providers, with your personal information as follows:
Personal information relating to you from your photo ID or other identification document. Personal information may include your name, date of birth, image, address, and other government-issued identification details.
A photo or video of your face (a “selfie”) that you provide when prompted.
Biometric Information that is derived from both the image on your government-issued identification and your selfie.

Use & Processing · Company practice

Identity checks also serve compliance, security and fraud prevention

For automated identity verification, Intuit and/or service providers, such as Persona Identities and Mitek Systems, use your personal and biometric information to verify your identity, meet legal and regulatory obligations such as anti-money-laundering requirements, support account security and protect against fraud.

Details not recorded for this card

Supporting quotations

For automated identity verification, Intuit and/or our service providers, such as Persona Identities, Inc., and Mitek Systems, Inc., will use your personal information together with your Biometric Information to verify your identity, ensure that we meet our legal and regulatory obligations (e.g., requirements related to anti-money laundering regime), account security, and protect against fraud.

Not stated here

  • The providers’ linked privacy policies are not included in this source.

Cross-references

  • qualified by (model-proposed): Biometric information is kept only as needed, for at most one year — The stated verification, compliance, security and fraud-prevention purposes do not imply indefinite biometric retention: Intuit and its providers retain biometric information only as needed for its specific collection purposes, or one year, whichever comes first.
  • qualified by (model-proposed): You can withdraw biometric-use consent at any time — The described uses of biometric information are accompanied by a right to withdraw consent at any time through the contact form; withdrawal does not affect the lawfulness of prior processing.

Use & Processing · Company practice

Facial templates match your ID image to your selfie

Intuit and/or its service provider scans the government ID image and selfie you supply, creates facial templates and uses them to match the two images in the automated identity verification process.

Details not recorded for this card

Supporting quotations

Intuit and/or our service provider will scan the image on your government-issued identification and the selfie you provide and create facial templates to conduct face matching between the two images.
Also annotated in the same passage (1)

Linking & Identification · Company practice

Intuit may compare ID details with your account

As part of the described identity verification process, Intuit may compare personal information from your identification document with your Intuit account information. The notice describes this as a possibility, not a step that always occurs.

Details not recorded for this card

Supporting quotations

Intuit may also compare your personal information from your identification document with your Intuit account information.
Also annotated in the same passage (1)

Retention & Deletion · Company commitment

Biometric information is kept only as needed, for at most one year

Intuit and its service providers retain biometric information only as long as necessary for the specific purposes for which it was collected, or for no more than one year, whichever comes first, in accordance with applicable law. This stated limit concerns biometric information; it does not set the retention period for every item of personal information collected during verification.

Details not recorded for this card

Supporting quotations

Intuit and its service providers will retain your Biometric Information only for as long as necessary to fulfill the specific purpose(s) for which it was collected or no more than 1 year, whichever is first, in accordance with applicable law.

Cross-references

  • qualifies (model-proposed): Identity checks also serve compliance, security and fraud prevention — The stated verification, compliance, security and fraud-prevention purposes do not imply indefinite biometric retention: Intuit and its providers retain biometric information only as needed for its specific collection purposes, or one year, whichever comes first.

Sharing & Disclosure · Restriction or exception

Biometric disclosure is limited, with legal and consent exceptions

The notice says biometric information will not be shared or disclosed to third parties unless disclosure is permitted or required by law, or you otherwise consent. The exception includes legally permitted disclosure, not only disclosure the law requires.

Details not recorded for this card

Supporting quotations

Your Biometric Information will not be shared and/or disclosed to third parties unless such disclosure is permitted or required by law or you otherwise consent to such sharing.

Sharing & Disclosure · Company practice

Intuit may transfer biometrics outside the collection region

When the law permits it, Intuit may transfer your biometric information outside the region where it was initially collected. The notice does not identify destination regions.

Details not recorded for this card

Supporting quotations

When permitted by law, Intuit may transfer your Biometric Information outside of the region in which it was initially collected.

Account & Service Control · User right or choice

Access and correction rights depend on where you live

Under its access and rectification section, the notice says you may have state- or country-specific rights over personal information depending on where you live. It directs you to the Global Privacy Statement’s region and state-specific terms for your country or to Intuit’s contact form for information about exercising them.

Details not recorded for this card

Supporting quotations

Access and rectification
Depending on where you live, you may have certain state- or country-specific rights with respect to your personal information.
Please see the Region and state-specific terms section for your country in our Global Privacy Statement for information on how to do so or write to us using the Contact Form available here, although withdrawal of consent will not affect the lawfulness of any prior data processing.

Not stated here

  • The linked regional terms are not supplied, so this notice alone does not establish a particular location’s rights or procedures.
Also annotated in the same passage (1)

Account & Service Control · Procedure

Intuit provides a contact route for privacy questions

For questions about handling your personal information, the notice directs you to the contact information at intuit.com/privacy/submit-a-question/. It also points to the Global Privacy Statement for more details about personal-information processing.

Details not recorded for this card

Supporting quotations

For further details about how Intuit processes your personal information, you may consult our Global Privacy Statement. If you have questions about the handling of your personal information, please contact us by using the contact information provided at https://www.intuit.com/privacy/submit-a-question/.

Not stated here

  • The linked Global Privacy Statement and contact page are not supplied here; their additional terms and contact instructions are outside this analysis.