Last updated: 2026-05-23
This summary is not a legal substitute for the full policy below.
Checkify provides a privacy-first identity and proof approval service. Our app helps users create a private Checkify identity and approve proof requests from websites or businesses, such as proving they are a real human or meet an age requirement.
This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Controller contact: Checkify
Email: privacy@checkify.me
Website: checkify.me
If you create a Checkify account, we may collect account information such as your email address, account identifiers, authentication records, and account status information.
We use this information to create and manage your account, authenticate you, support account recovery, protect the service, prevent abuse, and provide customer support.
Some Checkify features may allow you to create or maintain an identity profile. Depending on the features you use, this may include details such as your name, date of birth, document-derived information, verification status, or proof eligibility.
Checkify is designed to minimise server-side storage of personal identity data and to keep sensitive identity information on your device where possible. Where a feature requires information to be sent to Checkify or a service provider, it is used only to provide the requested verification, proof approval, security, fraud-prevention, or support function.
Some features may require camera access for QR scanning, selfie capture, liveness checks, or identity verification.
Photos, videos, biometric-related information, liveness outputs, or verification results may be processed to verify that a real person is present, prevent fraud, protect the integrity of the service, and allow you to approve requested proofs.
We do not use photos, videos, selfie data, liveness data, or biometric-related information for third-party advertising or tracking.
Some features may involve you capturing, scanning, entering, or using verification content such as identity document information, proof documents, document-derived information, or other user-submitted verification material.
Our design goal is that sensitive identity and verification information remains on your device wherever possible. If a feature clearly requires server-side processing, we process the information only for the purpose of providing that feature, protecting the service, preventing fraud, maintaining audit records where required, or supporting you.
To operate the service, we collect and store limited operational data such as:
We design these logs to avoid storing direct personal information where it is not needed, but some operational records may be linked to your account, device, session, or proof request so that we can provide, secure, and troubleshoot the service.
The app and our backend may process limited device, network, and diagnostic information such as device type, operating system version, app version, locale, IP address at the time of request, crash logs, performance data, error logs, failed request details, and related technical diagnostics.
We use this information to keep the service secure, prevent abuse, diagnose problems, improve reliability, maintain server uptime, minimise crashes, and provide support.
We may collect limited information about how the app and service are used, such as app launches, proof request activity, QR scan activity, verification flow status, approval or decline events, failed or expired request events, and security-related usage events.
We use this data to provide app functionality, maintain security, prevent fraud, troubleshoot issues, improve reliability, and understand whether core product features are working correctly.
If you enable notifications, the app may use Apple Push Notification service (APNs) and/or Firebase Cloud Messaging (Google) to deliver alerts such as business login approval requests or important account notices.
To deliver push notifications, we store a push token linked to your Checkify identity on our servers. We do not use push data for advertising or cross-app tracking.
The table below summarises our design intent. Individual features may vary as the product evolves.
Business billing features may collect a billing email address and create a Stripe customer record. Payment card details are entered on Stripe’s hosted checkout pages and are processed by Stripe—not stored in the Checkify app.
We do not sell your personal information.
We do not use personal data, identity data, photos, videos, selfie data, liveness data, device identifiers, usage data, or diagnostic data for third-party advertising tracking.
We do not share personal information with data brokers for advertising purposes. If we use service providers to help operate Checkify, they are required to process information only for permitted service, security, support, reliability, or legal purposes.
Where UK or EU data protection law applies, we process information under one or more of the following legal bases:
We do not sell your personal information. We may share limited data in the following cases:
Key service providers we use to operate Checkify include:
We can provide additional subprocessor details on request by contacting privacy@checkify.me.
We retain information only for as long as reasonably necessary to provide the service, keep it secure and reliable, investigate abuse or incidents, resolve disputes, support users, and meet legal obligations.
Standard operational logs are typically retained for up to 90 days. We may retain security, fraud-prevention, audit, legal, or incident-related records for longer where justified.
Information stored only on your device may remain on that device until you delete it, clear app data, or uninstall the app, subject to your device settings and backups.
We use appropriate technical and organisational measures to protect information, including access controls, encryption in transit, least-privilege practices, monitoring, and security-focused operational procedures.
No method of transmission or storage is 100% secure, but we work to protect your information and reduce unnecessary data exposure.
Depending on your location, you may have rights to access, correct, delete, restrict, or object to the processing of your information, and to withdraw consent where processing is based on consent.
Because Checkify is designed to minimise direct identity storage, some records may be linked to UUIDs, device identifiers, sessions, proof requests, or operational logs rather than obvious personal details. We may need additional information to locate relevant records and verify your request.
To exercise your rights, contact: privacy@checkify.me
You may request deletion of your account and associated personal data by contacting privacy@checkify.me.
Where information is stored only on your device, deleting the app or clearing app data may remove that local information. We may retain limited records where required or justified for security, fraud prevention, legal compliance, dispute handling, support, or audit purposes.
Checkify is not intended for children under the age where parental consent is required in their jurisdiction.
If you believe a child has used the service without appropriate consent, contact us at privacy@checkify.me.
If we transfer information internationally, we use appropriate safeguards such as contractual protections or other recognised transfer mechanisms to help ensure an appropriate level of protection.
We may update this Privacy Policy from time to time. We will update the “Last updated” date above when changes are made.
If changes are material, we will provide additional notice where appropriate.
Contact: privacy@checkify.me