You're right about the need for caution. If only a hash of the data is saved on chain, then it should be safe. I wouldn't want my fingerprints or personal data on any blockchain, encrypted or not. A hash of my fingerprint data, yes, provided that it the hash function would be good enough.

Of course, that code needs to be checked to see that it does what it is supposed to.