There's nothing in this email that implies Google is uploading biometric data anywhere.
AFAIK it's stored locally on your device, never uploaded anywhere (and that's on purpose), and apps can tap into a system-level API to use your biometrics or phone password to re-verify that you're really you.