Privacy Policy

This policy covers individuals whose identity is verified through FaceTrust AI — consumers who link a NIN or BVN and enroll a face, responsible officers and staff of institutions we onboard, and operators at merchant desks. It also covers visitors to facetrustai.com.

Registry identity data. When you link a NIN or BVN, we validate it against the relevant national registry and store a masked, encrypted record of it — never the full plaintext number in a way that's displayed back to staff.

Biometric data. A live face capture is used, at the moment of verification, to confirm you match the registry photo. From that capture we derive a single canonical face embedding — a numeric representation of your face, not a photo — which is what's stored and reused for future identification. We do not keep a rolling album of past photos; a new enrollment replaces the canonical embedding, and the prior one is archived to an internal audit table rather than kept as an active record.

Verification and usage records. Every comparison — matched, not matched, or too close to call — is logged with its outcome, confidence score, timestamp, and which merchant desk or channel it came from. This is what makes disputes and audits possible.

Account and contact data. Name (as matched from the registry), phone number, email, and any preferences you set (like notification settings) in the consumer app.

To confirm that the person completing an action — opening a registered identity, checking in at a merchant desk, or being re-identified in a 1:N search — is a real, live person matching a real registry record, and to give institutions an auditable trail of that confirmation. We don't use your data for advertising, and we don't sell it.

The registry photo behind a NIN or BVN is never released to a client before your own live face proof succeeds — validating an identity and fetching its photo are two separate, gated steps. Liveness is checked before any face comparison runs, so a printed photo or screen replay is rejected before it reaches the matching engine. Staff access is layered — password, one-time codes, and for the most sensitive actions, hardware security keys plus a second person's approval. Full detail is in our Security page.

The national identity registries we validate against (for the minimum needed to confirm your record), the institution you enrolled through (for its own compliance and audit obligations, scoped to that institution only — one institution never sees another's data), and infrastructure providers who process data on our behalf under contract. We do not share biometric data with advertisers or data brokers.

Summarized here; full detail, including the exact ordering used when you delete your account, is in our Data Retention Policy. In short: your biometric record is removed first and immediately when you request deletion, before the rest of your profile is soft-deleted. Verification and audit logs are retained for a longer window to support disputes and regulatory obligations, even after your profile is deleted.

Depending on your jurisdiction, you may have the right to access, correct, export, or request deletion of your data, and to object to certain processing. You can exercise these through our Data Subject Request form, or directly from your account settings where the underlying action (export, delete) is available in-product.

FaceTrust AI is not directed at children and is not knowingly used to enroll anyone below the minimum age for holding a NIN/BVN registry record in their jurisdiction.

We'll update the effective date above when this policy changes and, for material changes affecting how biometric data is handled, notify institutions and, where required, affected consumers directly.