The profile photo should be an approved photo and not just from the last clock-in.
This then provides a photo each clocking can be compared to, it will also be a "better" photo for when users log in to Tanda.