Last Updated: 23 August 2026
In these AyeFace User Terms and Conditions ("Terms"), references to "You", "Your" and "Yours" refer to the individual end user utilising the AyeFace service. References to "We", "Our", "Ours" and "Us" refer to Aye Global Holdings Pte. Ltd., providing AyeFace services to You.
Aye Global Holdings Pte. Ltd. wholly owns Aye Solutions Sdn. Bhd., and these Terms are binding with respect to any contracts or engagements entered into with Aye Solutions Sdn. Bhd. in connection with AyeFace services.
These Terms govern Your access to and use of the AyeFace platform, including biometric verification, membership and loyalty features, payment features where You choose to link a payment method, and AI-driven personalisation. By using AyeFace, You agree to be bound by these Terms and acknowledge that Your Personal Data will be processed in accordance with Our Privacy Policy and applicable data protection laws (Malaysian PDPA, Singapore PDPA, and GDPR where applicable).
"AyeFace" means the software-based biometric payment solution comprising facial recognition functionality, customer onboarding, AI CRM integration, and transaction processing interfaces, including mobile applications, APIs, and associated features.
"AyeFace Account" means the account registered by You, including Your biometric profile, associated payment methods, AI-generated preferences, and consent records.
"Auto DirectDebit" means the payment authorisation mechanism whereby You consent to automated fund transfers from Your designated bank or e-money account, linked through a DuitNow ID in Malaysia or the equivalent identifier under another supported national payment scheme, subject to Your revocable consent.
"DuitNow ID" means a commonly recognised identifier (mobile number, NRIC, passport number, or business registration number) used to link a bank or e-money account for DuitNow transactions in Malaysia. Equivalent identifiers apply under other national payment schemes where those schemes are supported in Your market.
"Merchant" means any business or entity participating in the AyeFace ecosystem that accepts payments via AyeFace and offers products or services to You as a Customer.
"User Portal" means the digital platform through which You can manage Your AyeFace Account, payment methods, rewards, preferences, and exercise Your data protection rights.
These Terms set out the conditions for Your use of AyeFace services, including the AI features and Facial Recognition Payment service. An AyeFace Account may be used for membership and loyalty alone, without any payment method linked. Where You do choose to link one, AyeFace also allows You to initiate payments to participating Merchants using facial recognition, through payment methods linked to Your AyeFace Account: including credit or debit cards, e-wallets, bank or e-money accounts through a supported national payment scheme where one is available in Your market, such as DuitNow in Malaysia, and other alternatives as may be introduced. Available payment methods vary by market.
While AyeFace facilitates payments and personalisation, all payment processing is conducted by the respective merchant acquirers connecting to authorised financial institutions, card issuers, or e-wallet providers. AyeFace does not itself hold, receive, or transfer funds. We are not a bank, e-money issuer, or payment institution.
You may register at user.ayeface.com/register. To register, You must complete a facial capture process and set a PIN for verification. An AyeFace Account may be used for membership and loyalty alone, or You may additionally link a payment method. We collect further identity details, including Your date of birth and a government identity document number, where these are needed to verify You or to provide a regulated feature, as described in Our Privacy Policy. You must not misstate Your age, and You confirm that any age or date of birth You give Us is accurate. If You are under 13, You may register only through child mode, with verifiable parental consent and a parent or guardian who holds their own AyeFace account linked to Yours; that parent or guardian agrees to these Terms on Your behalf and is responsible for Your compliance with them. If You are between 13 and 17 years old, You may register only through teen mode, and the parent or guardian who links Your account agrees to these Terms on Your behalf and is responsible for Your compliance with them. If You are 18 or older, You confirm that You are capable of entering into a binding contract in Your own right. Your account moves automatically from child mode to teen mode at 13, and from teen mode to Our standard adult service at 18; each transition requires a new facial capture, and moving to adult service ends the parent or guardian's link.
You are not required to link a payment method in order to hold an AyeFace Account. If You choose to, You may link a payment method including: a credit or debit card; a bank or e-money account through a supported national payment scheme, such as DuitNow in Malaysia; or a supported e-wallet account. Available methods vary by market. By linking a payment method, You consent to Us securely storing Your payment details in encrypted form, solely to facilitate future payments. Full card or bank credentials are not stored directly: we rely on tokenisation provided by licensed payment processors.
Once a payment is confirmed via AyeFace, it is considered final and irrevocable, except in cases of fraud, unauthorised use, or error. Such cases are subject to investigation by the relevant financial institution.
1. Consent. Facial recognition requires Us to process Your biometric data. Before Your facial capture at registration, We will ask You to give Your express consent to that processing, separately from Your acceptance of these Terms. We will record the date and time of Your consent and the version of these Terms and Our Privacy Policy to which it relates. We will not process Your biometric data without that consent, and You will not be able to use the facial recognition payment feature without giving it.
2. What We process. At registration Your facial image is captured on the device and converted there, by a one-way conversion, into an encrypted recognition template. Only that template is sent to Our servers for matching; the image is not. The recognition template cannot be turned back into a face. Separately, We create an encrypted evidence record so that a disputed or suspected fraudulent transaction can be investigated. Unlike the recognition template, the evidence record can be decrypted, but only with dedicated keys held under strict access control, and every access to it is logged and auditable.
3. Purposes. We process Your template to recognise and authenticate You at a Virtual Terminal and to apply Your linked payment method and rewards. We also use biometric data to test and improve the accuracy and security of Our facial recognition and liveness detection, which protects You against impersonation and spoofing. For accounts in child or teen mode, this improvement use is off by default and occurs only with the separate opt-in consent of the linked parent or guardian, as described in Our Privacy Policy. We do not use Your biometric template for personalisation, for marketing, or to train or improve any other artificial intelligence model. The personalisation features described in the AyeFace Artificial Intelligence Service section are based on Your transaction and preference data, not on Your biometric template. We use the evidence record only to investigate a disputed or suspected fraudulent transaction, or where an authority requires it. We do not share Your recognition template or Your evidence record with any Merchant or with any other user.
4. Retention. We retain Your recognition template for as long as Your AyeFace Account remains open, and will delete it within thirty (30) days of You withdrawing consent or closing Your Account. We retain the evidence record for thirty (30) days by default. That period is extended only where a dispute or fraud case is raised by You, by a merchant or by an authority, and only for as long as that case remains open. Where anti-money-laundering record-keeping obligations apply to a transaction, the applicable retention period for the related record is five (5) years.
5. Withdrawing consent. You may withdraw Your consent at any time from the User Portal, without charge and without giving a reason. On withdrawal We will stop processing Your biometric data for recognition and delete Your recognition template within thirty (30) days, and will confirm to You when this is done. Where an evidence record must be retained under clause 4 because a case is open or because a record-keeping obligation applies, We will tell You that this is the case and delete it as soon as that obligation ends. You will no longer be able to pay using facial recognition. Withdrawal does not affect the lawfulness of processing carried out before it, does not reverse transactions already completed, and does not by itself close Your Account.
6. Where Our Privacy Policy gives You rights in relation to Your biometric data that go beyond this clause, the Privacy Policy prevails.
Through the User Portal, You may manage payment methods (add, update, remove), suspend or revoke consent, set payment limits, enable/disable PIN verification, manage notification preferences, view and track eligible rewards, and obtain referral codes.
We will notify You 7 days before Your payment method consent expires. If expired, a new consent must be submitted. You can view transaction history including ID, timestamp, and merchant info. For disputes, contact complaints@aye-ai.org with the transaction ID.
You must take reasonable precautions to keep login credentials confidential. You are responsible for all account activity until You notify Us of any unauthorised use.
By making Your first payment at a merchant using AyeFace, You consent to automatic enrollment into that merchant's membership program (if enabled), in accordance with the merchant's terms. AyeFace does not guarantee membership benefits. If a merchant closes their AyeFace account, the points and vouchers You hold with that merchant's programme end with it. Advance notice is at that merchant's discretion and is sent either through Our outreach tools or their own channels, so it is not something We can guarantee. Your AyeFace account, Your identity and Your balances with other merchants are unaffected.
Cross-merchant features. A merchant You have never transacted with holds no profile of You and receives nothing about You. When You pay with AyeFace at a merchant, a customer profile is created with that merchant as described above. Where participating merchants choose to run joint campaigns with one another, a reward or entitlement You have earned at one of them may be made available to You at another. We perform that matching: participating merchants do not receive each other's customer records, they see only that You qualify for the joint campaign they are running, and no merchant receives Your biometric template. Taking part is Your choice each time: at a participating outlet You decide whether to earn or redeem a joint reward, or simply to pay and take neither. Your activity at a merchant is otherwise used only for that merchant's own programme.
No personal information other than Your store activity (purchases, points earned, rewards redeemed) is shared with merchants. You may receive promotional messages facilitated by AyeFace without merchants accessing Your personal data directly. You may opt out at any time by emailing complaints@aye-ai.org.
AyeFace may also create its own rewards programmes, which may be changed, edited, or removed at AyeFace's discretion.
When You register, Your facial features are captured and converted into a unique, tokenised template using secure encryption. This biometric data is processed for recognition and authentication, and to improve the accuracy and security of Our facial recognition and liveness detection. Personalisation features use Your transaction and preference data, not Your biometric template.
AI features may include personalised prompts, menu recommendations, targeted marketing, and contextual suggestions based on Your preferences and purchase behaviour. AI is not used to initiate, authorise, or complete payments, all payment transactions require explicit action by You.
We employ Presentation Attack Detection (PAD) and anti-spoofing measures consistent with ISO/IEC 30107 standards. Recognising You at a Virtual Terminal, and applying Your linked payment method and rewards, are automated processes, and they are necessary to provide the service You have asked for. We do not use automated processing alone to decide whether You may hold an Account or to assess Your creditworthiness. Where a match cannot be made You can always pay by another method, and You may ask Us to have a person review any decision You believe was made about You in error.
You acknowledge that AI and biometric technologies are probabilistic and may not always be accurate. Performance may be affected by environmental factors such as lighting or device quality.
1. You may initiate a refund request by contacting the relevant merchant directly with the transaction ID. Refunds will only be processed once approved by the merchant and returned to Your original payment method.
2. For erroneous or unauthorised payments, initiate a dispute directly with Your financial institution or payment provider. AyeFace Support (complaints@aye-ai.org) may assist in investigation but is not a payment processor and cannot directly refund amounts.
3. Where a wrongful transaction is established as caused by an AyeFace system malfunction, including a failure of Our facial recognition to identify You correctly, We will procure the reversal of that payment through the relevant payment processor in accordance with the Liability and Indemnity section. We will investigate on receiving Your report and Your cooperation with that investigation is required.
1. Nothing in these Terms excludes or limits Our liability for: (a) death or personal injury caused by Our negligence; (b) fraud or fraudulent misrepresentation; (c) any liability which cannot lawfully be excluded or limited; or (d) any right available to You under mandatory consumer protection law in Your country of residence.
2. We are responsible for loss You suffer that is a foreseeable result of Our breach of these Terms or Our negligence. We are not responsible for loss that is not foreseeable.
3. Where a payment is charged to You because Our facial recognition failed to identify You correctly, and this is established following the investigation described in the Refunds and Recovery of Funds section, We will procure the reversal of that payment through the relevant payment processor. This applies whether or not the failure involved gross negligence on Our part.
4. Subject to clause 1, We are not responsible for: (a) errors or delays in payment processing by financial institutions, card issuers or e-wallet providers; (b) the goods or services supplied by a Merchant, or the operation of a Merchant's membership programme; or (c) unauthorised access to Your Account resulting from Your failure to keep Your credentials confidential or to notify Us promptly of any unauthorised use.
5. Subject to clauses 1 and 3, Our total aggregate liability to You shall not exceed the greater of (a) the total value of AyeFace transactions on Your Account in the six (6) months before the event giving rise to the claim, and (b) SGD 300, or its equivalent in Your local currency.
6. You agree to indemnify Us against claims arising from Your breach of these Terms, Your unauthorised use of AyeFace, or Your violation of third-party rights.
Contact Us: complaints@aye-ai.org
We will acknowledge complaints within seven (7) working days and provide a substantive response within one (1) calendar month. This does not affect Your rights to escalate to relevant supervisory authorities.
1. You may close Your AyeFace Account at any time from the User Portal, without charge and without giving a reason.
2. On closure We will delete Your biometric template within thirty (30) days in accordance with clause 4 of the Your biometric data section, delete the payment tokens stored against Your Account, and stop sending You promotional messages.
3. Rewards. Point balances and vouchers You hold with Merchant membership programmes end when Your Account closes and cannot be reinstated, transferred or exchanged for cash. Before You confirm closure, the User Portal will show You the balances that will be lost.
4. Records We keep. We retain records of Your transactions for the period required by applicable law and regulation, as set out in Our Privacy Policy. These records are retained without Your biometric template.
5. We will confirm closure to You within seven (7) working days.
6. If You wish to use AyeFace again after closing Your Account, You will need to register again, including a new facial capture and a new consent under clause 1 of the Your biometric data section.
7. We may suspend or close Your Account where required by law or regulatory request, where We reasonably suspect fraud or unauthorised use, or where Your use poses a security risk. We will give You notice unless We are prohibited from doing so, and clauses 2 to 4 apply.
Amendments: We may amend these Terms with at least thirty (30) days' prior notice via email, the AyeFace portal, or Our official website. Continued use after the effective date constitutes acceptance.
Governing Law: These Terms are governed by the laws of Singapore. You submit to the exclusive jurisdiction of the courts of Singapore, without prejudice to mandatory consumer protection laws of Your country of residence.
International Data Transfers: Where personal data is transferred outside the EEA or the UK, We rely on the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where applicable, which are incorporated into Our agreements with the receiving parties, alongside any other safeguard permitted by applicable law. See: commission.europa.eu/standard-contractual-clauses
Severability, No Waiver, Entire Agreement: Standard provisions apply. In the event of conflict between these Terms and the Privacy Policy regarding personal data, the Privacy Policy shall prevail.