Section 17(1)(a) in The Aadhaar (Authentication) Regulations, 2016
(a)the core biometric information collected from the Aadhaar number holder is not stored, shared or published for any purpose whatsoever, and no copy of the core biometric information is retained with it;