Identity verification privacy notice

Who is responsible

The controller is [AMAL legal entity, registered address — to be confirmed]. Data protection contact: [DPO or privacy contact — to be confirmed], or the “Legal or privacy” topic on our contact page.

What we collect

• Photos of your identity document (passport, national ID card, driving licence or residence permit): front, and back where there is one.
• A selfie, taken in the app, which our verification team compares with the photo on your document. Because a face image used to confirm who you are can be biometric data, we treat it as a special category of personal data (GDPR Article 9).
• The result of the check: status (verified or not), document type, issuing country, expiry date, date of the decision and the reviewer.
• Your consent record: the notice version, date and time, IP address and device user agent.

Why we use it

Only to confirm that you are a real person whose name matches your profile, so that members can trust who they hand a parcel to and to prevent fraud. We do not use your document or selfie for marketing, profiling or any other purpose, and we do not share them with other members — they only see an “ID verified” badge.

Legal basis

• Your explicit consent (GDPR Article 9(2)(a) for the selfie and Article 6(1)(a) for the document), given with the separate checkbox before you take the photos.
• You can say no: without a verified ID you can still create an account and post trips or parcels, but you cannot be matched or confirm a match.

How long we keep it

• Document and selfie photos: until a decision is made, then deleted automatically 30 days after the approval or rejection. They are deleted at once if you send a new set, withdraw your consent or delete your account.
• The result of the check (no photos): while your account exists; it is erased when you delete your account.
• Your consent and withdrawal records: kept as evidence that we asked for consent, for [period to be confirmed by counsel].

Who can see it

• Only AMAL verification staff with the administrator role. Photos are stored encrypted in a private storage area, are shown through links that expire after 5 minutes, and every viewing is recorded in an audit log.
• Support staff see only whether you are verified, not your documents.

Service providers (processors)

• Amazon Web Services (storage of the encrypted photos, in the EU — Paris region by default).
• Our hosting and database providers, which process the photos in transit and store the result of the check: [providers and locations — to be confirmed].
• No identity-verification (KYC) provider is used today. If we add one for document and liveness checks, this notice will be updated before it is used.

International transfers

The photos are stored in the European Union. If personal data is accessed from or transferred to a country without an EU adequacy decision (for example by a provider or by staff outside the EU), we use the safeguards required by the GDPR, such as the European Commission's standard contractual clauses: [details — to be confirmed].

Your rights

• Withdraw your consent at any time in the app: Profile › Settings › Privacy and data › Withdraw consent and delete my ID images. Your photos are deleted and your verified status is removed; withdrawal does not affect checks already done.
• Access, rectification, erasure, restriction, objection and portability, from the app (data export, account deletion) or by contacting us.
• No automated decision: a person at AMAL reviews every check.
• You can complain to a data protection authority, in particular where you live: in France the CNIL (cnil.fr), in Italy the Garante per la protezione dei dati personali (garanteprivacy.it).