Effective: 8 March 2026
RuonID is operated by RuonLabs ("we", "us"). This policy explains how we handle data across the RuonID mobile app, the verification server, and the developer SDK.
Identity data (app users): When you onboard, the RuonID app reads your passport's machine-readable zone (MRZ) and NFC chip, and captures a selfie for face verification. All identity data is encrypted with AES-256-GCM and stored exclusively on your device. The encryption key is held in your device's secure enclave and requires biometric authentication to access. We do not store, transmit, or have access to your plaintext identity data.
OPRF protocol: During onboarding, the app sends a mathematically blinded curve point to our server to derive your unique identifier. The server never sees your nationality, personal number, or any raw identity input — only an opaque cryptographic value.
Developer accounts: When developers register, we collect their name, email, company name, and use case description. This is stored in our database to manage accounts and billing.
Device attestation: We receive Apple App Attest or Google Play Integrity tokens to verify requests come from genuine devices. We store a hashed device identifier for rate limiting. We do not collect device model, OS version, or other device metadata.
Identity data is only shared when you explicitly approve a verification request and authenticate with biometrics. Each sharing event requires a new approval. The data is encrypted end-to-end — only the requesting developer's private key can decrypt it. Our server never sees the plaintext.
Free verify flow: When an app uses the free sybil-resistance check, only an anonymous app-specific identifier is shared. This identifier is different for each developer, so your activity cannot be correlated across apps. No personal information is transmitted.
Full identity flow: The requesting developer specifies which fields they need. You see exactly what will be shared on the consent screen before approving. Sensitive fields (name, ID numbers) are always encrypted.
Your app-specific ID is computed as SHA-256(ruonId || developerPublicKey) on your device. Your raw ruonId never leaves the device. Each developer receives a different identifier for you, preventing cross-app tracking.
You can delete all your data at any time by uninstalling the RuonID app. Since we don't store your identity data server-side, there is nothing to request deletion of. For developer account deletion, email privacy@ruonlabs.com.
We may update this policy. Material changes will be communicated through the app or by email (for developers). The effective date at the top indicates the latest revision.
For privacy questions: privacy@ruonlabs.com