The Face Scan Marks You Present. The Contract Names No Date to Delete It.

You walked into your 8 a.m. and looked at a camera to prove you showed up. Somewhere on a vendor's server, a template of your face now sits next to a student number, and nobody handed you a form asking if that was okay.

Face-recognition attendance and remote-proctoring apps have spread across Philippine universities faster than the policies meant to govern them. Administrators pitch it as convenience: no more buddy-punching, no more lost IDs, faster class rosters. The pitch skips the part where a face is data you cannot change when it leaks.

Consent nobody actually gave

The Data Privacy Act treats biometric data as sensitive personal information, the kind that needs clear, informed consent before anyone collects it. Enrolling in a course is not consent to have your face templated. A clause buried in a registration packet you signed to keep your slot is not consent either. It is a condition of staying enrolled.

Proctoring apps go further. They watch your eyes, log your keystrokes, flag your "suspicious" movements, and record the room behind you. Advocacy groups have documented how these systems misread darker skin, disabilities, and anyone whose internet drops mid-exam. The flag lands on you. Contesting it is your job.

The clause that isn't there

Read the vendor contracts, the ones students never see, and the gap is the point. Many specify how long data is stored, which is to say forever, or until the company decides. Few name a deletion date. Fewer still say what happens to your face template when you graduate, drop out, or when the vendor sells to another firm.

The National Privacy Commission has rules on retention and disposal. Enforcement runs on complaints, and complaints run on students knowing a template of their face exists in the first place. Most don't. The app just says "attendance recorded."

When a breach hits, and Philippine institutions leak data regularly, a stolen password gets reset. A stolen faceprint does not. It follows you into every future system that scans a face, at a bank, a border, a job.

What you're actually paying

Schools frame this as free. The tuition already covers it, and the vendor gets a dataset of thousands of young faces to refine their model, at no cost to them and no cut to you. You are the training data.

Ask your registrar three things in writing. Where is my biometric data stored, who is the vendor, and what is the deletion timeline. If the answer is a shrug or a link to a portal, that is the answer. The contract left the line blank on purpose, and you are the one whose face fills it.