Privacy Policy

for DoIT&C Face Authentication

Introduction

Welcome to the DoIT&C Face Authentication mobile application (“App”). Your privacy is important to us, and we are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, share, and retain your information, including face and location data, when you use the App.

By using the App, you consent to the practices described in this Privacy Policy. If you do not agree, please refrain from using the App.

1. Information We Collect

1.1 Face Data

The App uses the UIDAI’s AadhaarFaceRD app (AadhaarFaceRD) to capture your facial data for Aadhaar-based authentication.

The App does not:

  • No face data is stored on the App or its servers.
  • Facial data is securely transmitted to DoIT&C and UIDAI’s systems through the AadhaarFaceRD app.

1.2 Location Data

During the face authentication process, the App captures your geographic location.

  • The location data includes your GPS coordinates at the time of authentication.
  • This data is logged in the App’s database and shared with the whitelisted web application that initiated the face authentication request.

2. How We Use Your Data

2.1 Face Data

Face data is used exclusively for:

  • Aadhaar-based identity verification and authentication.
  • Compliance with DoIT&C and UIDAI’s guidelines for Aadhaar authentication.

The App does not process, analyze, or retain face data.

2.2 Location Data

Location data is used for the following purposes:

  • To provide contextual information regarding the authentication request.
  • To enable authorized web applications to verify the geographic origin of the request.
  • To maintain logs for audit and compliance purposes.

3. Disclosure and Sharing of Data

3.1 Face Data

Face data is not shared, stored, or disclosed by the App and is directly transmitted to UIDAI via secured network of DoIT&C AUA & ASA.

3.2 Location Data

Location data is shared only with:

  • The whitelisted web application that initiated the authentication request.
  • Internal systems for database logging and audit purposes.

The App does not share location data with unauthorized third parties.

4. Retention of Data

4.1 Face Data

Face data is not retained by the App in any form.

4.2 Location Data

Location data is stored in the App’s database logs for five years to comply with operational, audit, and legal requirements. After this period, the data is securely deleted or anonymized.

5. Data Security

We implement industry-standard practices to protect your data, including:

  • Secure APIs and encrypted data transmission for face and location data.
  • Access controls to ensure only authorized personnel and systems can access stored location data.
  • Regular audits to ensure compliance with DoIT&C and UIDAI Guidelines.

6. Your Rights

You have the following rights regarding your data:

  • To understand how your face and location data are processed.
  • To withdraw consent for location collection by disabling GPS, though this may limit the App’s functionality.
  • To request access to or deletion of your location data, subject to compliance and legal requirements.

For Aadhaar-related grievances, you may contact DoIT&C and UIDAI.

7. Updates to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in laws, technologies, or operations. Any updates will be communicated through the App.

8. Contact Us

If you have questions, concerns, or feedback about this Privacy Policy, please contact us:

DoIT&C Aadhaar Authentication Project Team
Email: DOITC.AUA@RAJASTHAN.GOV.IN
Address: IT Building, Yojana Bhawan, Tilak Marg, C-Scheme, Jaipur-302005 (Raj), INDIA

Note:The App complies with DoIT&C and UIDAI guidelines for the collection, use, and retention of both face and location data.