Short answer: probably.

Long answer: Its hard to tell. Their privacy policy doesn't really mention it, however it does say they store some "biometric" data, not a clue what it refers to though. This data could be leaked in some form of data breach. I would recommend emailing them (privacyoffice@takeda.com) as they may be able to help more.