Fast access — face and PIN

1. What is collected

When you turn on fast access, the device front camera captures short images of your face during setup. Each image is processed immediately on the device and converted into an irreversible mathematical code called an "embedding" — a numeric vector that represents characteristics of your face. The original images (photo or video) are discarded right away and are never saved anywhere.

2. Where data stays

The embedding and your PIN are stored encrypted only on this device, inside a protected area of the Android operating system (Android Keystore — AES-GCM key generated by hardware) that only the EtiquetaChef app can read. None of this is sent to EtiquetaChef servers, to your organization, or anywhere else. The data does not leave the device.

3. What it is for

Fast access has a single purpose: to unlock the app in seconds, without having to type email and password every shift. We do not use your face for any other purpose — no advertising recognition, no behavior profiling, no AI model training.

4. How long it stays

The data stays on the device as long as you want. It is removed automatically when:

• you tap "Remove" on your profile card inside the app ("Fast access on this device" → "Remove");
• your organization administrator revokes your fast access remotely from the "Edit user" screen;
• the app is uninstalled from the device;
• the app data is cleared by the operating system or by the user.

There is no maximum retention — control belongs to you (or to your administrator). We do not back up this data on any server.

5. How the app works offline

Face recognition runs entirely on the device, with no internet required. When you unlock the app with your face or PIN, the app does not send your face or PIN to any server — it only verifies locally whether the embedding matches what was configured and, if so, resumes your existing session on the device.

6. Legal basis

In Brazil, this data is processed based on the explicit consent of the data subject (art. 11, II, "a" of LGPD — Law no. 13,709/2018). In other applicable jurisdictions, the basis is equivalent (explicit consent of the data subject). You may refuse or withdraw consent at any time without losing access to the app — just keep using email and password normally.

7. Your rights

You can always:

• refuse fast access and continue with email and password;
• remove fast access at any time from inside the app;
• ask for confirmation about the data processed or request clarification;
• file a complaint with a data protection authority (in Brazil, ANPD; in the EU, your national authority).

Because biometric data never leaves the device, there is no server-side copy to "access" or "export" — it exists only locally.

8. Where to find legal references

This page details a specific aspect of our Privacy Policy. For general data processing, see the full Privacy Policy. Data subject rights: LGPD art. 18 (Brazil) and GDPR art. 12 to 22 (European Union).

9. Contact

Questions or requests about fast access, biometric data or this page: help@etiquetachef.com. We respond within 15 business days.