Privacy Policy
How FaceBiometric collects, uses, protects and deletes personal data — on this website and in the attendance service we provide to institutions.
Effective date: 13 October 2026 · Last updated: 13 October 2026
1. Who we are and our role
FaceBiometric ("we", "us") provides a face-recognition attendance service — a kiosk app, an admin panel and a member portal — to colleges, schools, hospitals, offices and other institutions ("Institutions").
If you are a student or staff member, please contact your Institution first for any question about your attendance data — they manage your record and can act on your request using the tools we provide.
2. This website
- No sign-up, no tracking. This website does not ask you to create an account, and does not use advertising or analytics trackers.
- Demo / contact form. When you send the form, your name, institution, email / phone and message are stored securely by us (email and phone encrypted), together with the page you sent it from, your IP address and browser type to stop spam. We use them only to contact you about a demo or quote, and delete them on request.
- Emails you send us. We use your name, institution and contact details to reply, arrange a demo or prepare a quote, and keep the conversation as long as needed for that purpose.
- Technical logs. Like any website, our hosting may record basic request details (such as IP address, browser type and time) for security and to keep the site running.
- Fonts. The website loads fonts from Google Fonts, so your browser connects to Google's servers, which receive your IP address as part of that request.
3. Data in the attendance service
What is stored depends on the features each Institution switches on. It may include:
| Category | Examples |
|---|---|
| Member details | Name, enrollment / member number, member type, designation, department, course or class, batch, shift; optionally email and phone number. |
| Biometric data | A face template (a set of numbers calculated from the face, used only for matching) and a registration photo. If the Institution switches it on, a small photo taken at each scan. |
| Attendance records | Date and time, IN / OUT, which kiosk, late / half-day status, manual entries with the reason and who made them; the kiosk's location at the time of the scan only where the Institution uses location checking. |
| Leave | Holidays, leave marked by the Institution, and leave requests sent from the member portal. |
| Administrator accounts | Name, email, role and permissions, sign-in records, display preferences, and a log of actions taken in the admin panel (including IP address). |
| Kiosk devices | Device identifier, app version, last time it connected and its IP address. |
| Notifications | Email addresses and phone numbers used for alerts the Institution has switched on, and a log of messages sent. |
| Consent records | Whether and when consent for face attendance was recorded for a member. |
4. How the data is used
- To recognise members at the kiosk and record their attendance.
- To show dashboards and reports, and to manage leave, holidays and shifts for the Institution.
- To send the alerts and scheduled reports the Institution has set up.
- To keep the service secure — for example, checking that a face is live, verifying devices and administrators, preventing misuse, and keeping an audit log.
- To provide support to the Institution and to maintain and improve the reliability of the service.
We do not sell or rent personal data, do not use it for advertising, and do not use face data for any purpose other than providing attendance to the Institution it belongs to.
5. Who the data is shared with
- The Institution's authorised administrators, according to the permissions the Institution gives them. Each Institution's data is kept separate from every other Institution's.
- Service providers that help us run the service, such as hosting and email delivery, under obligations to protect the data.
- Messaging providers chosen by the Institution (for example SMS or WhatsApp providers), only when the Institution switches those alerts on, and only the recipient's number and the message.
- The Institution's own software (for example its ERP or payroll), when the Institution connects it through our API or webhooks. These connections carry the attendance log only — never photos or face data.
- Authorities, where we are required to by law.
6. How long data is kept
| Data | Kept for |
|---|---|
| Photos taken at each scan (if switched on) | Deleted automatically after 30 days. |
| Face template and registration photo | Until the member's data is erased, or automatically after a member has been disabled for a period the Institution chooses, or until the Institution's account ends. |
| Attendance, leave and member details | While the Institution uses the service, or until the Institution deletes or erases them. |
| Admin panel audit log | As set by the Institution (180 days by default). |
| Notification and integration delivery logs | Up to 90 days. |
| Member portal sign-in codes | Expire within minutes; sign-in sessions end after the period the Institution sets. |
When an Institution stops using the service, its data is deleted or handed back as agreed with that Institution, except where the law requires us to keep something longer.
7. How data is protected
We use administrative, technical and physical safeguards appropriate to the sensitivity of the data, including: face matching on the kiosk device; encryption of data in transit (HTTPS) and of face templates and contact details at rest; one-time-code sign-in for administrators; role-based permissions; registered, credential-protected kiosks with lock-out after repeated failed attempts; and an audit log of changes. More detail is on our Security page. Specific internal configuration is not published, as good security practice.
No system is completely secure. If we become aware of a personal data breach affecting an Institution's data, we will inform the Institution without undue delay and help it meet its obligations, including notifying the Data Protection Board of India and affected people where required.
8. Your rights
Under the DPDP Act you have the right to:
- Access — get a summary of your personal data and how it is processed;
- Correction and completion of inaccurate or incomplete data;
- Erasure of data that is no longer needed, or after you withdraw consent (unless the law requires it to be kept);
- Withdraw consent at any time — this does not affect processing done before;
- Grievance redressal, and to nominate another person to exercise your rights in case of death or incapacity.
Members should send requests to their Institution, which can download a member's data, record or withdraw consent, and erase personal data using the tools in FaceBiometric. If you cannot reach your Institution, or for data about this website or an administrator account, contact us using the details below. If you are not satisfied with the response, you may approach the Data Protection Board of India.
9. Children's data
Schools and colleges may have members under 18. Where the DPDP Act requires it, the Institution is responsible for obtaining verifiable consent from a parent or lawful guardian before registering a child's face, and can record that consent in FaceBiometric. We process children's data only to provide attendance to the Institution, and never for tracking, behavioural monitoring or targeted advertising.
10. Cookies and browser storage
This website does not set cookies of its own. The admin panel and member portal store a sign-in token and display preferences (such as theme and language) in your browser's local storage so that you stay signed in and see your chosen settings. These are needed for the service to work and are not used for tracking. Signing out removes the sign-in token.
11. Changes to this policy
We may update this policy as the service or the law changes. The date at the top shows the latest version. Significant changes will be communicated to Institutions in advance.
12. Contact and grievances
For privacy questions, requests or complaints, write to our Grievance Officer at info@facebiometric.com with the subject "Privacy". Please mention your Institution's name so we can route your request. We aim to acknowledge requests promptly and respond within the time required by law.