Enfacial replaces cash and cards in places where the same people come back every day: schools, universities, corporate campuses, clubs and members’ communities. Walk up, look at the terminal, done. Faster than a card tap. No wallet, no phone, no PIN required.
From enrolment to payout, in four quiet steps.
Enfacial is the operating system underneath a closed-loop campus economy, end to end, with the controls institutions actually need.
Enrol once, with consent
A student (or their parent) opens the app, takes a short face scan with a liveness check, and confirms consent. The image becomes an encrypted embedding on the device. The raw photo is discarded before it is uploaded.
Load the wallet
Parents, members or employees add balance in the app. Funds sit in the institution's own account. Enfacial is not a payment aggregator and never holds the money. Limits, alerts and auto-reload are one tap away.
Pay with a glance
At the counter, staff punch the amount into the shared terminal. The user looks up, matched against that institution's own enrolled faces in under half a second. A PIN fallback is always one tap away.
Vendors settle, admins see everything
Counter operators withdraw on demand straight to a bank account. Admins see a live ledger: revenue, peak hours, every transaction, a clean audit trail they can export any day.
Every other way to pay has something you can lose.
On a closed campus, the only credential that can't be forgotten, lost, shared, or stolen is the face of the person standing at the counter. The rest of the table follows from that.
Closed campuses. Recurring faces. One frictionless layer on top.
Schools are our core market, but the same model works anywhere the same set of people come back each day. Run the canteen, the library, the gym bar and the tuck shop on one identity, one wallet, one ledger.
Visibility without surveillance.
A notification the moment a child buys something. Daily and weekly limits you can change from the app. Full history you can check any time. No behavioural profiling, no data sold, ever.
Reconciliation happens on its own. No end-of-day counting, no reconciling floats against receipts.
Institution-scoped, always
A face only matches within the campus it was enrolled at. No cross-institution recognition. Ever. The data is the institution’s, by architecture.
Built for the pace of a lunch break.
Enfacial is designed around the realities of a counter: fast taps, loud rooms, staff turnover. It has to just work on whatever device is already there.
Turns any device into a counter
No proprietary hardware, no card reader. Use the phone or tablet the counter already has. A larger screen is simply nicer for the operator.
Built for noisy, patchy networks
Optimised for the thin connectivity you actually get in a canteen at lunch. Retries are silent, recovery is automatic.
Withdraw to a bank on demand
One tap sends today's takings to the operator's bank account. No month-end reconciliation marathon, no chasing invoices.
Every transaction, every item, audited
Automatic end-of-day summary. Exports for the accountant. Zero manual cash counting, zero disputes.
Biometrics done the boring way. The only right way.
Face payments only work if the people whose faces are enrolled actually trust the system. Enfacial's privacy posture isn't a policy page; it's an architectural decision at every layer.
Recognition happens on the device
The raw face image never leaves the phone. A mathematical embedding is generated locally; the photo is destroyed before anything is uploaded.
Institution-scoped by architecture
Per-institution isolation is enforced at the database layer. A student enrolled at one school cannot be matched against another. Ever.
Data stays where it should
Each deployment stores data in the region the institution operates in. Localisation is configurable, not a global dumping ground.
Every biometric access is logged
Audit log on every read, every match, every admin action. Exportable for the institution's compliance team at any time.
Withdraw consent, data is gone
One tap in the app deletes the embedding across every system of record. No retention loopholes. No soft deletes.
Consent, by default
Nothing happens without explicit consent. From the user, or from a guardian when the user is a minor. Enrolment without consent is impossible by design.
One platform. Three surfaces. Each built for the person using it.
Users carry a wallet in their pocket. Operators run a counter. Admins run the institution. Enfacial gives each of them exactly the tool they need, nothing they don't.
- Main canteen$340.00
- Tuck shop$109.00
- Juice bar$55.00
Bring Enfacial to your campus.
We’re onboarding a small number of schools, universities, corporate campuses and clubs for the next cohort. White-glove deployment. A direct line to the founders.