Compliance Statement
Compliance Statement
Version: v1.0
Last Updated: November 12, 2025
1. Introduction
At FacePass, operated by TechKluster LLC, we are committed to protecting student and family data under all relevant data protection laws.
This page summarizes our compliance posture with major privacy and education regulations across the United States, Europe, and other regions.
2. COPPA (Children’s Online Privacy Protection Act – U.S.)
FacePass complies with COPPA, which governs the online collection of personal information from children under 13.
Parental consent is required before collecting or storing any data related to a child.
Parents can access, review, or request deletion of their child’s data at any time via the FacePass Parent Portal.
Data is used only for attendance verification, safety notifications, and educational purposes — never for marketing or advertising.
3. FERPA (Family Educational Rights and Privacy Act – U.S.)
FacePass supports schools in meeting their FERPA obligations by ensuring student education records remain confidential.
Access to student data is limited to authorized school officials, parents, and administrators.
Audit logs and access controls are built into our system to ensure traceability and accountability.
Schools retain ownership of all student data processed through FacePass.
🔗 Learn More: Data Processing Agreement
4. GDPR (General Data Protection Regulation – EU & UK)
FacePass is designed to be GDPR-compliant, ensuring transparency, control, and data protection for EU and UK users.
Users and schools have the right to:
Access their data
Request deletion (“Right to be Forgotten”)
Request data export in a portable format
Withdraw consent at any time
Data is stored securely on Google Cloud (Firebase, Cloud Run, Firestore) servers in compliance with EU adequacy standards.
5. CCPA (California Consumer Privacy Act – U.S.)
For California residents, FacePass honors all CCPA rights, including:
The right to know what data is collected
The right to delete personal data
The right to opt out of data sale (FacePass does not sell any data)
All CCPA requests can be made via email to privacy@getfacepass.app.
6. BIPA (Biometric Information Privacy Act – Illinois, U.S.)
FacePass stores face embeddings (not actual biometric templates) to identify students for attendance.
All embeddings are securely encrypted and cannot be reverse-engineered into facial images.
Consent is required before capturing or storing any facial image or embedding.
Schools and parents can request deletion of biometric data at any time.
🔗 Learn More: Data Processing Agreement
7. Contact Information
For any compliance-related questions or data protection inquiries:
Data Protection Officer (DPO):
TechKluster LLC
30 N Gould St Ste R
Sheridan, WY 82801
United States of America
📧 privacy@getfacepass.app