Privacy Policy

1. The short version

PassVerity is a fully on-device application. It does not create accounts, does not use cloud servers, does not collect analytics, and never uploads or transmits your passport data, face data, or any other personal information. If your phone is offline, the app works exactly the same.

2. Information we do not collect

• Passport information. We do not collect, store or transmit MRZ text, chip data (DG1/DG2), document numbers, names, dates of birth or portraits.
• Biometric data. Liveness checks and face embeddings are computed locally and are never sent anywhere.
• Personal identifiers. We do not ask for your name, email, phone number or address, and the app has no accounts.
• Usage analytics. We do not collect usage statistics, crash logs tied to you, or device identifiers.
• Advertising identifiers. Ad measurement is handled by the ad network under its own terms; PassVerity itself does not collect identifiers.

3. How data is handled during a scan

All processing occurs inside the app process on your device:

• OCR of the machine-readable zone runs locally using on-device models.
• NFC chip authentication (BAC/PACE) and reading of signed data groups (DG1, DG2) happen over a direct, encrypted contactless link between your phone and the passport.
• Liveness inference and face embedding generation run on your phone's processor.
• Temporary frames, decoded data and embeddings exist only in memory for the duration of the scan and are deleted when the session ends.

4. Screen capture and media

Screenshots and normal screen capture are blocked while the app is active. The camera and liveness flows do not accept images from the gallery — only a live camera feed is used. The final selfie used for matching is the one that passes the last liveness challenge and is not persisted.

5. Purchases and advertising

Pro is a one-time, non-consumable purchase processed by the Apple App Store or Google Play and delivered through RevenueCat. Payments are handled by those platforms under their own privacy policies. The free version displays ads served by Google AdMob; you may see ad-related processing by the ad network. Neither of these services receives your passport or biometric data.

6. Children

PassVerity is not directed at children under 13 and does not knowingly collect any information from anyone, regardless of age.

7. Security

Because no data leaves the device, the most effective safeguard is not having the data at all. On top of that, the app blocks screen capture, keeps sensitive flows free of photo-picker input, and deletes temporary data at the end of each session.

8. Changes to this policy

If this policy changes, the updated version will be published on this page with a new "last updated" date. We will never retroactively claim that we process data we do not process.

9. Contact

Questions about this policy can be directed to the app's support contact listed on the store listing for PassVerity.