Privacy Policy

Last updated: October 2026

What we collect

Veri-ID is operated for organizations (“Organizations”) that issue ID cards. When an ID is created we store the information the Organization chooses to collect (for example name, photo, date of birth, phone, email, address). Staff accounts store a name, email, phone and a hashed password. Payment details are handled entirely by Flutterwave; we only store transaction references and amounts.

How it is used

Data is used to issue, display and verify ID cards. The public verification page shows only the holder’s photo, name, ID number, validity dates and any fields the Organization marks as “front of card”. Phone numbers, emails and addresses are never shown on the public verification page.

Who is responsible for card-holder data

The Organization that issues a card is the data controller for its card holders; Veri-ID acts as the processor. Card holders should direct access, correction or deletion requests to their Organization.

Camera

The app requests camera access only to scan QR codes for verification. Images are not stored.

Deleting your data

Card holders can ask the issuing Organization to erase their ID record and photo at /delete-data. Staff can delete their own account from My account → Danger zone, and a Primary Admin can delete the whole Organization, which permanently erases its IDs, photos and accounts. Deleted photos are removed from our storage.

Security & retention

Data is stored in an encrypted managed database, transmitted over HTTPS, and retained while the Organization’s account is active. Organizations may revoke IDs at any time.

Contact

Questions? Contact the support address published on veri-id’s website.