Is Nametag safe with your data?

Content licence allows sublicensing

EULA 2.4 says "You own and independently control which End User Information is shared", but EULA 2.2 grants Nametag a worldwide licence to "prepare derivative works of, incorporate into other works, and otherwise use and exploit your End User Information, and to grant sublicenses". Reuse is not cleanly limited to running the service, though the licence is revocable plus scoped "solely as set forth in this EULA".

Transfer safeguards apply only in Europe

The DPA clause is conditioned on "If you are located in the European Economic Union, United Kingdom or Switzerland", and Prighter is appointed as a GDPR privacy representative for "Users in Europe and in the UK", which is a contact point rather than a transfer safeguard such as SCCs or an adequacy decision. No sub-processor list appears anywhere in the text.

Portability is a two-word bullet

The entire portability disclosure is the bullet "Data portability." inside a state-residents rights list. No mechanism, format or request path is given beyond a generic "contact us as described below".

Biometric consent is a real commitment

The biometrics section states "We will request your prior consent to use your photographs and related information (including biometric information)", a commitment by Nametag rather than a recital of what state law provides. Security language elsewhere stays adjectival, as in "advanced encryption" with no named control.