Dear user,
We thank you using VIID for your age verification purposes. We value your trust and want to ensure transparency in our offered services. Here you can keep yourself up to date with VIID Technologies OÜ’s (VIID, Us, Our) privacy policy which gives details on how we collect and use information about you.
VIID is focused on an age verification solution. VIID provides you with an easy and secure way to prove your age and / or identity, online and in person. You set it up once and then use it anywhere that accepts the app as a method of age verification.
Physical ID cards have easily obtainable sensitive data on them - With our digital ID card solution the data will be encrypted and stored securely.
1. Definitions
- Analytics: The study of something, by breaking it down into smaller pieces. VIID looks at trends and patterns in the app to inform our business decisions. VIID performs analytics on how users interact with the app using anonymous data.
- Biometrics: A study of people’s unique physical and behavioural characteristics, which aims to identify or recognise people as a unique individual based on traits they have. We use biometrics to create a Biometric Template of your face so that we can confirm it is really you.
- Biometric Template: A biometric template is only a digital map of your face, this is not the original video or scan of your face. A biometric template is a snapshot of your physical or behavioural attributes. This image then becomes a master profile and it is from this that the unique features of your face are extracted, and then converted into a mathematical file.
- Encryption: This allows information to be hidden so that it cannot be read without special knowledge such as a key or a password.
- Third Parties: These are companies that we may have interactions with outside of VIID. For example, this could be other apps, software and partner companies.
2. Information collection and use
We collect information to set up your app account, when you add documents to the app and when you use the app.
The information is used for processes such as:
- Creating your account and checking if you don’t already have an account
- Verifying provided details
- Verifying the added document
- Verifying whether you are a real live person
- Checking if the face scan and photos on the provided document match
- Fraud checks
- User authentication when using the app
The information we need and use for your app account creation:
Use:
- We use this to create your account in the app, and to check that you do not already have an app account – users are allowed to have only one VIID account per email address. We keep this information until you or we close the account and delete the information.
Lawful bases:
- Performance of a contract – for registering to the app and general use in the app.
Use:
- We use this to check whether your face matches the face on the document that you are trying to use for age verification. We use the biometric face video as a security measure to make sure you are a real person, and that no-one is pretending to be you (for example by holding up a photo).
- We do not store this information anywhere, and the Biometric Face Image is destroyed after the face check for the document is done.
Lawful basis:
- Performance of a contract – for general use in the app.
- Consent – for security measures and for verification using biometric template.
Use:
- The main use of your ID document is to populate the details of your physical ID document to your app account, so they are available to you for age verification when using the app at any partner service provider.
- In addition, we check the document photo against your Biometric Face Image to ensure it is truly your document.
- The information stored is encrypted and deleted after 5 years.
Lawful bases:
- Performance of a contract – for usage of ID information in the app.
- Legitimate interest; preventing and detecting unlawful acts – to internally monitor and reduce fraud in usage of the app
3. What biometrics do we use and why
The app is a biometric identity app for age and identity verification. It works by allowing you to set up a trusted and verified digital proof of identity. The biometrics are a key part of guarantee to deny all fake identities and documents. The biometrics also make sure that it really is you using the app.
Essentially, our use of biometrics to identify or authenticate you, is to prevent fraudulent use of the app and protect your data.
We take a scan of your face to compare it to the face that is on the physical document when you are submitting a document for verification in order to create a digital VIID document. When you want to access the document after approval, we again make a scan of your face to create a Biometric Face Image to check if the face is of a real person, and if it matches the face on the document you are trying to access. Only if the Biometric Face Image and the face on the document match, will you be able to access the document and use it for age verification.
4. The content of Personal Data we process *
Here you can find what Personal Data we process about End-Users
4.1 We provide personal identity verification services to Clients. This means we verify End-Users, i.e., you. For that you have acknowledged data processing according to the Client’s privacy notice and data processing by us in accordance with this Privacy Notice. We may collect and process, among other data, the following Personal Data collected either directly from you or from the Client:
- personal information concerning the End-User, which mainly consists of information on the End-User’s document and/or extracted from the document, for example name, sex, personal identification number or national equivalent, date of birth, nationality, citizenship;
- document details, such as the name of the document, issuing country, number, expiration date, information embedded to document barcodes (may vary depending on the document) and security features;
- identity verification data, such as photographs taken from you and your document, and video and sound recording of the verification process (of the whole session, if such recording is enabled by us);
- technical data (Device Signature), including but not limited to information about the date, time and your activity in the Services, your IP address and domain name, your software and hardware attributes as well as your general geographic location (e.g., city, state, country);
- machine-readable data, metadata and device and network information;
- photos and videos as well as data, such as face scans and other measurements, extracted from the same which are used to authenticate the End-User or compare the End-User’s face to identity document photos - some of this extracted data may be considered biometric data and/or sensitive Personal Data (also "special category of personal data", hereinafter referred to as “sensitive Personal Data”) under applicable data protection laws in certain jurisdictions;
- personal information provided by the End-User, e.g., data from communications with us, feedback data;
- personal information provided by natural persons who have participated in our product and market research initiatives;
- personal information that we have received from the Client, e.g., contact details;
- evidence and records of legal basis (including consents), for example in cases where we are required or have elected to obtain a consent or a written release or another legal basis prior to processing certain Personal Data.
4.2 We may ask for access to your Personal Data that is stored by our partner Veriff. If needed (fraud cases etc.) they will share your Personal Data including identity verification data with VIID.
4.3 Please note that providing your Personal Data is voluntary. However, the decision not to do so may mean that you are not able to verify your identity via our Service.
* Information is processed, handled and verified by our third-party partner Veriff OÜ (reg. code 12932944)
5. Your rights
You have a wide array of rights given to you under data privacy laws. These include but are not limited to:
- You have the right to find out what information we hold about you and ask for copies of the information we hold about you.
- You have the right to ask us to make changes to your information in the event of it being inaccurate.
- You have the right to ask us to delete your information.
With any specific data privacy requests, please reach out to us at roland@viid.app
6. Deleting your account
You can delete your account by reaching out to us at judith@viid.app. It is important to note that if you delete the app before deleting your account, you don’t delete your data, you just lose the connection to your data, and it remains in our system. This means the data is kept in encrypted format, but cannot be accessed or used by anyone in any way. We delete inactive user data after two years of inactivity.
7. Contact details and information
Here you can find our contact details. Review this Privacy Policy carefully and contact us at roland@viid.app if you have any comments, questions or concerns.
8. Changes to the Privacy Policy
Please take note that we may change the Privacy Policy from time to time. If we make changes, we will notify you.
Thank you for choosing VIID. We appreciate your understanding and cooperation.
Sincerely, VIID Technologies OÜ
