Specific Face Data Collected: Live facial photographs (selfies captured via the device's front-facing camera) and real-time liveness motion indicators (head orientation angle, eye blink, and smile detection). Facial feature vectors are computed locally on the device (on-device) on an ephemeral basis.
Purpose of Collection: Exclusively for 1:1 biometric identity verification during civil servant attendance clock-in, clock-out, and approved Work From Home (WFH) presence checks, ensuring attendance authentication and integrity (anti-spoofing).
How It Is Used: When an employee records attendance, the application conducts an on-device liveness check to confirm human presence, then securely transmits the selfie snapshot to the municipal server where a 1:1 similarity match is performed against the employee's pre-enrolled official Master Face photograph.

Third-Party Sharing: Facial data is NEVER sold, rented, shared, transferred, or disclosed to any third parties, commercial entities, advertising agencies, or external platforms. All facial data is strictly confined to internal civil service administration within the sovereign municipal server of Tanah Bumbu Regency.
Retention Period: The Master Face Enrollment photograph is retained strictly for the duration of the civil servant's active employment tenure with the Government of Tanah Bumbu. Daily attendance selfie logs are retained for accountability and public finance auditing purposes (1 to 5 fiscal years under statutory government archiving schedules), after which they are permanently and irrevocably deleted from the server.

Employees may revoke their consent or request the reset and permanent deletion of their facial biometric records at any time through:
1. Submitting a Master Face Reset Request through their respective SKPD Personnel Administrator or BKPSDM Tanah Bumbu.
2. Sending an official written privacy inquiry to our data protection desk at: humas.bkpsdmtanbu@gmail.com.
3. Upon approval of the request or automatically upon retirement, resignation, or termination of employment, all facial photos, biometric feature embeddings, and associated records are permanently erased from active databases and storage systems.

While the SIAP system operates without sharing facial data with any commercial third-party vendors, in the event that any technical infrastructure provider (such as an ISO 27001-certified government cloud or data center facility) is engaged in hosting operations, the Government of Tanah Bumbu contractually enforces binding Data Processing Agreements ensuring that such providers adhere to equivalent or more stringent data protection and confidentiality safeguards as mandated by Apple App Store Review Guidelines and the Indonesian Personal Data Protection Act (Law No. 27/2022).