Privacy Policy

1. Who this policy applies to

This policy applies to people who visit or use Show Face, create an account, appear in content managed by a Show Face member, or submit a privacy request. Show Face is designed to help members remember professional and personal connections through contact details, meeting context, and private photos.

2. Personal data we collect

Depending on how Show Face is used, we may process:

• Account and authentication data, including name, email address, phone number, login credentials, verified social identity details, account status, and device access records.
• Profile data, including profile photo, WhatsApp number, company, job title, industry, and general location.
• Member-created content, including contacts, notes, tags, meeting events, photos, and business-card images or text reviewed by the member.
• Biometric and image data, including consent records, enrollment photos, facial templates or opaque provider references, face-matching results, and liveness verification results when those features are used.
• Technical and usage data, including IP address, browser or device information, push-notification tokens, request logs, security events, feature usage, and diagnostic records.

3. How we use personal data

We use personal data to:

• create, secure, and manage member accounts;
• provide private contact, photo, business-card, recognition, and connection features;
• perform facial matching or liveness checks only where the relevant feature and consent requirements apply;
• deliver service and connection-request notifications;
• prevent misuse, investigate errors, maintain audit records, and improve reliability;
• respond to access, correction, consent-withdrawal, and deletion requests; and
• comply with applicable legal and regulatory obligations.

Show Face does not sell personal data.

4. Facial recognition and biometric processing

Facial features are processed to support consented enrollment, face matching, identity claims, and privacy opt-out verification. A facial template is a mathematical representation used for similarity matching; it is not a password hash and must be treated as sensitive biometric data.

Members may use manual contact entry without relying on facial recognition where that alternative is available. Facial matching can produce false positives or false negatives and must not be treated as the sole proof of identity or used as the sole login factor.

5. Service providers and data transfers

Show Face uses carefully scoped service providers where needed to operate the service. These may include:

• Amazon Web Services for facial recognition and liveness processing in Malaysia, and business-card text extraction in Singapore;
• Google and LinkedIn for optional social sign-in, with Google Firebase also supporting Android push delivery; and
• Expo for application build and push-notification delivery services.

These providers process only the data needed for the relevant function under their applicable terms and security controls. Some providers may process data outside Malaysia. Show Face may also disclose data when legally required or when necessary to protect users, the service, or the public.

6. Storage, security, and retention

Show Face applies access controls, private media storage, encrypted connections, rate limits, audit logging, and restricted provider permissions. No internet service can guarantee absolute security.

Personal data is retained only while it is needed for the service, security, legal, audit, or recovery purposes. Under the current product policy, uploaded and enrollment images are retained in private storage until they are deleted through an applicable account, consent, moderation, or privacy process. Deletion may take additional time to cycle through backups and provider systems.

7. Your choices and rights

Subject to applicable law, you may ask to access or correct your personal data, withdraw biometric consent, delete your account, or request removal of facial recognition data connected to you. Withdrawing consent does not affect processing that was lawful before withdrawal and may disable features that require that consent.

To start a facial-data opt-out or removal request, use the Face Removal Request portal. For other account-related privacy requests, contact the Show Face administrator or project representative who provided access to the service.

8. Other people's data

Members must have an appropriate reason and any required permission before adding another person's details or images. A member's private contacts, notes, and photos are not made public merely because the person is a registered Show Face member. Connection sharing is limited to the information and context supported by the relevant request flow.

9. Children

Show Face is not designed for children. Do not submit a child's personal or biometric data unless a lawful basis, appropriate permission, and all required safeguards are in place.

10. Changes to this policy

We may update this policy when the product, service providers, legal requirements, or data practices change. The effective date at the top of this page will be updated when a revised policy is published.