Is AI face search safe for wedding guests? Privacy and India's DPDP Act

When a studio puts a QR code at the wedding entrance and asks guests for a selfie, some relatives will hesitate. That is a reasonable reaction. A selfie is a photo of your face, and a face is about as personal as data gets. This post explains what a face search gallery does with it, what India's data protection law expects, and what a family should ask before agreeing.

This is general information, not legal advice.

The short answer

Face search is safe when guests choose it, when it only shows people photos they are actually in, and when the full gallery stays private. Look for four things: guests agree before taking a selfie and can skip it, nobody appears in someone else's results without saying yes, the full gallery needs a passcode, and galleries are kept out of search engines.

What face search actually does with a selfie

1. The guest takes a selfie in their phone's browser.
2. The software turns the face into a set of numbers that describe it, often called a face template. It is used for comparison and is not shown to anyone as a picture.
3. It compares those numbers with the faces found in the event's photos.
4. The guest sees the photos where the faces match.

The selfie is not posted in the gallery, and other guests do not see it. What matters is who controls the photos, how long the face data is kept, and whether the guest can say no.

What India's DPDP Act means here

The Digital Personal Data Protection Act, 2023, and the DPDP Rules notified in November 2025, cover personal data in digital form. A face in a selfie or photo is personal data. The rules are coming into force in phases: the main duties around notice, consent, data principal rights, security safeguards and breach reporting apply from May 2027.

In practical terms, the law points to the same things good practice already does:

• Clear notice: tell guests what the selfie is used for, in plain words, before they take it.
• Real consent: guests choose face search; they are not forced into it to see any photos.
• Purpose: use the selfie to find that guest's photos, not for anything else.
• Retention: do not keep face data longer than needed.
• Withdrawal: a guest should be able to change their mind.

Under the Act, the studio and the software company both have roles in this, so studios should pick an app that makes these steps part of the product rather than something to explain at the door.

Privacy settings a family should expect

Questions guests and families commonly ask

"Can other people find my photos by uploading my picture?" In a well-built gallery, face search only works with a live selfie from the guest's own phone, and features that show photos of two people together ask both of them first. Ask the studio how theirs works.

"Will my photos be on the internet?" The gallery is online, because that is how guests receive photos on their phones, but it should not be listed on search engines and the full set should need a passcode.

"What if I do not want face search at all?" Skip it and browse, or ask the family. Studios can usually switch face search off for the whole event.

What studios can do at the event

• Put one line on the QR standee: "Take a selfie to find your photos. Optional. Your selfie is only used to find your photos."
• Tell the family in advance, and offer a passcode-only gallery if they prefer.
• Keep the passcode for the full gallery with the immediate family.
• Respect requests to remove a photo, quickly.

For the wider setup, see how to share wedding photos with all guests and QR codes for wedding photos.

How Vyavasth handles it

Guests agree to face search before taking a selfie and can skip it. My People shows photos of two guests together only when both have agreed. The full gallery opens with the family's passcode, guests sign in with their WhatsApp number or Google, wedding galleries are kept out of Google search, and face search can be switched off for a single event. Details on the face search page.

Frequently asked questions

Is it safe to give a selfie to a wedding photo app?

It is reasonably safe when the app uses the selfie only to find your photos, asks for your agreement first, lets you skip it, and keeps the gallery private with a passcode. If any of these is missing, ask the studio before taking the selfie.

Does the DPDP Act apply to wedding face search in India?

Faces are personal data under the Digital Personal Data Protection Act, 2023. Its main notice and consent duties apply from May 2027 under the phased DPDP Rules, 2025. Getting clear consent before a selfie is the safe practice now.

Can a guest refuse face search and still get photos?

Yes, in a well-designed gallery. The guest can skip the selfie and browse, and the family can share the full gallery passcode with them.

Are wedding face search galleries public?

They should not be. A good gallery needs a sign-in, shows guests only their own photos, keeps the full set behind a passcode, and is kept out of search engines.