How much have you investigated the legality of this? In the EU biometric data is 'special category data' under the GDPR [0] and can only be processed in very limited circumstances unless you have the consent of the data subject [1]
[0] https://www.dataprotection.ie/en/organisations/know-your-obl...
Thanks for the info. We don't use any private data, only publicly available images. So it won't be a problem, in my opinion.
I will contact my lawyer and double check this.