I think the mistake is assuming they're purely doing a 2d pixel array photo comparison and not a 3d scan. This would also satisfy their statement that they delete the photos, while still being able to store data that could be used to reproduce the photos.