digiIDAbout this policy
DIGIID LLC provides digiID, a personal document wallet for iPhone. This policy covers the versions listed above and these support pages. Secure-link sharing and App Clips described below apply to digiID Limited 2.1 when those features are available; they are not features of version 2.0. This policy does not describe earlier releases or other DIGIID apps.
Information inside your wallet
Document images, typed details, recognized text, expiry dates and local wallet activity are stored on your device. Text recognition runs on your iPhone. Core wallet use does not require an online account or upload your wallet to DIGIID LLC. Optional secure-link sharing sends an encrypted copy of the selected presentation, as explained below.
The production app contains no advertising, tracking or analytics SDKs. We do not use your document contents for advertising. Secure-sharing servers do not receive the key needed to read your encrypted presentation.
Device authentication and protection
The app uses iPhone authentication to unlock your wallet. digiID does not receive your Face ID biometric template or device passcode. Wallet metadata and saved pages are encrypted. The wallet key is protected by the device Keychain.
Permissions you control
Camera access lets you scan documents. Versions that offer photo import use the system photo picker. Notification permission is optional; expiry notifications use general text without document names or numbers. You can manage permissions in iPhone Settings.
In Limited 2.1, phone tilt can animate a hologram over details you choose to hide. Motion samples are processed on your iPhone, are not uploaded or retained by digiID, and are not used for fitness profiling. Reduce Motion disables this decorative movement.
Sharing and external copies
You choose which presentation, document sides or text fields to export. Review the result and cover sensitive text and matching barcodes before sharing. The receiving app or person may retain the exported image, PDF or text under their own policies. digiID cannot recall copies they save.
Optional encrypted links and App Clips
When you choose secure-link sharing in Limited 2.1, your iPhone prepares the selected presentation and encrypts it before upload. The service stores that encrypted copy, a random share identifier, expiry information, verification values used for revocation and viewed status, and the first-view time when a valid viewed receipt is received. The decryption key is placed in the link fragment and is used by the recipient's browser or App Clip; it is not sent to the sharing server.
Anyone who receives the complete link may be able to read the selected presentation until it expires or you revoke it. Treat the link as private. Recipients do not need a digiID account to open it. An App Clip handles the selected share and does not receive access to the sender's wallet.
Link expiry is limited to seven days. Revocation and expiry block subsequent service retrieval and schedule deletion of the encrypted copy and share record. Storage cleanup retries and backup retention can delay physical removal. These controls cannot erase a screenshot, download or other copy a recipient already made.
Security and sharing metadata
To protect the sharing service, we retain Apple App Attest registration identifiers, public keys and assertion counters for the app installation. These are used to validate requests and prevent replay and abuse, not for advertising or cross-app tracking. Security registrations are separate from share records and can remain after links expire or the app is removed.
Viewed-status metadata is stored against the random share identifier, without a recipient account or name. It lets the sender see when a valid first-view receipt was received; it is not proof of the recipient's identity. We do not join it to advertising profiles.
Our infrastructure providers, including Railway and Amazon Web Services for secure sharing, process encrypted objects and operational metadata to deliver and protect the service. Connection information such as IP addresses is processed for networking and abuse prevention. No document decryption key is intentionally included in server logs. Contact us through the support form with questions about service metadata or deletion; do not send a document, full sharing link, recovery key or device passcode.
Backups and recovery
New wallet files are excluded from automatic device backup. To recover or move your wallet, create an encrypted recovery backup and save its separate recovery key. Both are needed. DIGIID LLC cannot recover a lost wallet key.
A recovery file is exported only when you choose to save it. The storage provider you select may retain that file. Recovery from the opening screen creates a separate wallet and preserves previous wallet files and keys. Importing a backup into an open wallet adds documents to that wallet.
Retention and deletion
Your wallet documents remain on your device until you delete them. Deleting a document removes it from the active wallet. It does not remove exported backups, original photos, earlier digiID source files, a separately preserved recovery wallet, or copies held by recipients. Importing earlier digiID cards leaves the earlier source files in place.
Removing the app removes its app-container files from that device, but does not remove copies outside the app; iOS may also retain Keychain entries separately. Secure any recovery backup you need before removing the app. Delete unwanted exported copies through their storage provider or recipient.
Support requests
When you use our support form, we receive your email address, optional name, selected app, subject and message. We store these details with a request reference, submission time and support status so DIGIID LLC can review and respond to your request. Support requests are not publicly viewable. Please do not include identity documents, sensitive card numbers, device passcodes or recovery keys.
We use this information to manage your request and reply to the email address you provide. Support correspondence is retained as needed to handle the request, maintain a record of its resolution and meet applicable legal obligations. The form limits repeated submissions to reduce abuse.
To request access to or deletion of information you sent to support, use the support form and choose Website / other. We may need to verify that the request is yours. We cannot access or delete wallet contents held only on your iPhone or copies held by a recipient you chose.
This website and TestFlight
These pages do not contain advertising trackers or analytics scripts. The support form runs a script to send your message and show its result. It does not accept file attachments. Hosting providers process connection information needed to deliver and protect the website. Visiting the website does not give it access to your digiID wallet.
If you use a TestFlight build, Apple handles beta distribution and may provide testing diagnostics and feedback to the developer under Apple’s TestFlight terms. This is separate from the production app’s local wallet storage.
Questions and updates
Contact DIGIID LLC through the support form with privacy questions. Changes to this policy will be published here with an updated date. A saved document is a personal copy; digiID does not issue or verify identity credentials.