Biometric Data Notice

Last updated: 8 October 2026

This notice explains how lumex.id handles biometric data when you verify your identity for one of our customers.

What we collect

During a verification we capture the photo on your ID card or passport and a short series of selfie frames from your camera. From these we create face measurements so the two images can be compared.

Why

We use your biometric data for two things only:

• Liveness: to confirm that a real person is in front of the camera, not a printed photo, a screen or a mask.
• Face match: to compare your selfie with the photo on your own document.

We compare one selfie with one document. We do not search your face against other people, build a face database, identify you across customers, or use your images to train models.

Your consent

Before the camera opens, we show you which business is asking and ask for your agreement. We record that agreement with the check. If you do not agree, the verification does not start.

How long we keep it

Selfie frames, document images and face measurements are deleted once the result is decided. If you start a verification but do not finish it, they are deleted within 24 hours. The result (passed, failed or needs review, and the similarity score) is kept by the business that asked you to verify.

Who can see it

Only the systems that run the check process your images. The business that asked you to verify receives the result, not your face measurements. Cloudflare hosts and processes our service. We never sell biometric data.

Questions or deletion requests

Contact the business that asked you to verify, or use our contact form. See also our Privacy Policy.