What face data we collect, what it's used for, and how you keep full control over it.
When you give consent for an event, we capture two live selfies straight from the camera to confirm it's a real face, not a photo of a photo (liveness check). Both photos are processed into a single unique face-recognition data point stored as numbers. The original selfie photos themselves are not stored by Kepoto — they're used briefly for processing, then permanently deleted.
Your face-recognition data is compared by Detektif Kepo (Kepoto's automatic face-matching feature) against faces detected in photos from the same event, so your photos can find you. We also compare it globally (across events), but only to prevent one person from registering with two different accounts. Outside of those two purposes, this data isn't used for anything else.
Automatically matching event photos to your face
Preventing the same person from registering duplicate accounts
Not used for any other purpose
Sometimes your appearance in an event photo differs from your signup selfie — wearing glasses, different lighting, or an unusual photo angle. When that happens, Detektif Kepo shows that photo on the “My Photos” page with the question: “Is this you?”. If you confirm “yes”, that photo is used as an additional reference to make future matching more accurate. But this only happens when you confirm it yourself — never automatically.
Your face-recognition data can only be accessed by Detektif Kepo. Photographers can't, other photo subjects can't, and our own team doesn't read it manually as part of day-to-day operations.
Photographers only know that a photo of theirs was successfully matched to someone. They can't see who you are, who downloaded it, or access your face-recognition data at all.
You can withdraw your face consent for an event at any time from the “My Photos” page. Once withdrawn, your face immediately stops being used to match new photos from that event. Matching references that are no longer needed are automatically deleted on the schedule in the Data Retention Policy. Your primary face-recognition data (account selfie) stays stored while your account is active, but only to detect duplicate account registration — not to match photos in events where consent has been withdrawn.
The capture and use of this face data is governed by Indonesia's Personal Data Protection Law (PDP Law No. 27/2022) as a specific category of personal data. All activity involving it (consent, matching, manual confirmation, withdrawal) is logged for compliance and investigation if ever needed.