Privacy Policy

Overview

Provn is a privacy-preserving identity verification service. This policy applies to the Provn Wallet app and the provn.io website. Our core principle is simple: we minimise data collection by design, not just by policy.

Data We Do Not Collect

Provn does not collect, store, or process any of the following:

Names, dates of birth, or addresses
Identity documents, passport images, or selfies
Biometric data of any kind
Browsing history or usage analytics
Location data
Device identifiers or advertising IDs

Data Stored on Your Device

The Provn Wallet stores the following data locally on your device only. This data never leaves your device unless you explicitly choose to present a credential to a verifier.

Cryptographic key pair — generated on your device when you first open the wallet. The private key never leaves your device.
Verifiable Credentials — signed digital attestations (e.g., "this person is over 18") issued to your wallet. These contain no personal information — only cryptographic proofs.
Wallet DID — a decentralised identifier derived from your public key.

Credential Issuance

When you receive credentials, the issuance server processes a one-time verification result from a third-party identity provider. Provn receives only the outcome (e.g., "age over 18 confirmed") — never the underlying identity documents or personal data. This information is used solely to generate signed credentials and is not retained after issuance.

Credential Presentation

When you present a credential to a verifier (such as an age-restricted website):

Your wallet sends the credential directly to the verifier — Provn's servers are not involved
The verifier receives only the claims you approved (e.g., ageOver18: true) — no personal data
Provn cannot see when, where, or to whom you present your credentials

Camera and Photo Library

The Provn Wallet requests camera access solely to scan QR codes for receiving and presenting credentials. No images or video are captured, stored, or transmitted. Photo library access may be requested to scan QR codes from saved images — no photos are accessed for any other purpose.

Third-Party Services

The app loads a QR code scanning library from cdnjs.cloudflare.com and fonts from Google Fonts. These services may collect standard web request logs as described in their respective privacy policies. No personal data is shared with these services by Provn.

Data Retention

Credentials and keys are stored on your device until you delete them or reset the wallet. Provn has no ability to access, recover, or delete data stored on your device.

Children's Privacy

The Provn Wallet is not directed at children under 13. We do not knowingly collect any data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted at this URL with an updated date.

Contact

For questions about this privacy policy, contact us at privacy@provn.io or visit provn.io.

Home