It is only kept on the device.

Sources:

- https://www.apple.com/business-docs/FaceID_Security_Guide.pd...

- https://support.apple.com/en-us/HT204587

- https://support.apple.com/guide/security/welcome/web