Privacy Policy

Last updated: November 24, 2025

1. Introduction

We take privacy seriously. This policy explains how your personal data is handled by:

• The digital identity wallet app ("the Wallet")
• The credential issuing service ("the Issuer")

By using our services, you agree to the data practices described below.

---

2. Data Controller and Contact

• Issuer Service: The issuer is the controller for credential requests and issuance.
• Wallet App: The wallet app processes personal data locally and only transmits what you explicitly consent to share.

For questions: [email protected]

---

3. What Data We Collect

a) Issuer Service

• Minimal data required to create and deliver credentials (e.g. identifier, claims).
• Logs for technical debugging and security (do not include credential contents).

b) Wallet App

• Personal data (credentials, keys) are stored locally on your device.
• No user data is collected, tracked, or sent to us unless you explicitly use a network feature (e.g. requesting a credential or presenting to a verifier).

---

4. How Data Is Used

• Data is used only to fulfill your requests (issuing credentials, storing credentials, presenting credentials).
• We do not profile, track, or combine your data for any purpose.
• The Issuer never receives details about your other credentials or your usage of the Wallet.

---

5. Data Sharing and Disclosure

• Issuer shares data only as necessary to comply with your request and with applicable laws.
• Wallet shares data only when you actively present or request a credential, and only those attributes you approve.
• No data is sold or shared with third parties for marketing.

---

6. Data Storage & Security

• Wallet: All user data and keys are encrypted at rest on your device. Only you have access.
• Issuer: Security best practices are followed; data is retained only as long as needed to fulfill credential issuance.
• Technical and organizational security measures are in place to protect against unauthorized access.

---

7. Your Rights

Where applicable under law (e.g. GDPR), you have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing
• Lodge a complaint with a supervisory authority

You may delete your wallet or email our support at any time to have request logs deleted.

---

8. Data Minimization & Consent

• Only the minimum data required for operation is processed.
• The Wallet supports selective disclosure—only data you choose is shared.
• The Issuer only sees what is needed to issue the requested credential.
• All disclosures and data releases are made only with your explicit consent.

---

9. Children's Privacy

Our services are not directed at children under 16. We do not knowingly process data from children.

---

10. Changes

We may update this policy from time to time. Material changes will be communicated via the app or website.

---

11. Contact

If you have questions, please contact: [email protected]

---