Privacy Policy

Who we are

KeyU is a secure digital identity service operated by uTrust Company. This Privacy Policy explains how we collect, use, process, share, store and protect personal data when you register, verify your identity, use the KeyU application, respond to authentication requests or contact us.

For personal data processed directly through KeyU, uTrust acts as the data controller. Participating organizations may separately process personal data for their own purposes under their own privacy policies.

Information we process

Identity and document information

• Full name, date of birth, calculated age, nationality and gender where available.
• Document type and number, issuing country or authority, issue date, expiry date, and whether the document is valid or expired.
• Information from the visual zone, barcode, machine-readable zone or NFC chip, including the document photograph.

Verification information

• Document support, authenticity, validity and inspection results.
• NFC chip-reading, chip-authenticity and certificate-verification results.
• Screenshot, photocopy, OCR and machine-readable-zone consistency results.
• Face verification, liveness verification, decision status, reason codes and identity-assurance level.

Document images may be processed during verification to extract information and evaluate authenticity.

Account, device and security information

• KeyU identity references, registration identifiers, enrollment status, account status, verification method and timestamps.
• Device and app identifiers, device public key and key identifier, attestation and app-integrity results.
• App version, operating system, language, package or bundle identifier, IP address, request identifiers, timestamps and security logs.
• Push-notification token where notifications are enabled.

KeyU does not receive or store the private signing key generated on your device.

Authentication and support information

• Requesting organization, authentication-request identifier, request date and time, method, status, approval or rejection, verification result and assurance level.
• Messages and technical information you provide when contacting support.

How we collect information

• Directly from you when you register, scan a document, complete verification, respond to a request or contact support.
• From the visual area, machine-readable zone, barcode or NFC chip of your supported identity document.
• Automatically from your device, limited to information needed to operate and secure KeyU.
• From participating organizations when they create an authentication request.
• From verification, hosting, security and notification service providers when they return results required to provide KeyU.

Why we process information

• Registering, maintaining and protecting your KeyU account.
• Verifying identity, document authenticity and validity, including supported NFC chips.
• Performing face and liveness verification and assigning a KeyU ID and assurance level.
• Preventing duplicate, fraudulent or unauthorized registrations.
• Delivering authentication requests and enabling you to approve or reject them.
• Providing authentication results to participating organizations.
• Protecting device keys; detecting fraud, abuse, tampering and security threats.
• Troubleshooting, improving reliability, answering requests and meeting legal obligations.

We do not use your identity or biometric information for advertising.

Legal basis and required information

Depending on the activity, we process personal data based on your consent or explicit consent where required; steps necessary to provide the service requested by you; compliance with legal or regulatory obligations; and permitted legitimate interests such as security, fraud prevention and service reliability where these interests do not override your rights.

Identity-document information, verification information, device keys and essential security information are required to create and protect a verified account. If you do not provide them or complete required checks, we may be unable to register you or provide authentication services.

Push notifications may be optional. If disabled, you may need to open KeyU to view requests. Where processing relies on consent, you may withdraw it; withdrawal does not affect earlier lawful processing or processing supported by another lawful basis.

Biometric and device protection

KeyU is designed to minimize centralized biometric-data processing and prevent centralized storage of live face captures and biometric identity templates.

During enrollment and authentication, KeyU captures facial information to perform face verification, face matching and liveness checks. KeyU distinguishes between the portrait contained in an identity document, temporary live face captures and the encrypted biometric identity template stored on the enrolled device.

Native biometric information managed by Apple Face ID, Touch ID or Android system biometrics remains controlled by the device operating system. This native biometric information is not accessible to, received by or stored by KeyU.

The private transaction-signing key is generated and protected on the enrolled device. Only its public key and related attestation information are registered with KeyU.

Face data processed by KeyU

• The portrait contained in the visual image or NFC chip of a supported identity document.
• Temporary live face images or frames captured during face verification and liveness detection.
• A biometric face template generated after successful verification.
• Face-matching and liveness results, including scores, status and verification outcomes.

Purpose of processing face data

Face data is used only to:

• Verify that the person completing registration is the genuine holder of the identity document.
• Perform liveness detection and help prevent attempted impersonation.
• Compare the live face with the portrait obtained from the verified identity document.
• Generate an encrypted, device-bound face template for future user-authorized authentication requests.
• Determine whether a registration or authentication request satisfies the required verification checks.

Face data is not used for advertising, marketing, analytics, unrelated profiling or identification unrelated to a user-requested KeyU verification.

Document portrait processing

For camera-based document verification, the captured identity-document image, which may contain the document holder's portrait, is transmitted securely to uTrust's backend and processed by an Innovatrics Digital Identity Service deployed on infrastructure operated by uTrust.

These document images, NFC verification binary content packages and document portraits are used only for the active verification transaction. They are not retained as part of the user's KeyU account. After the document-verification decision has been completed, the temporary verification materials are deleted regardless of whether registration is allowed or declined.

Live face processing

Live face capture, liveness processing and comparison with the verified document portrait are performed locally on the user's device using Innovatrics DOT mobile components.

Live face images, face-capture frames and the generated biometric face template are not transmitted to uTrust's backend, Innovatrics, requesting organizations or other third parties.

Only non-biometric verification results required to complete registration or authentication, such as the face-match outcome, liveness outcome and associated scores, are submitted securely to uTrust.

Face-template storage and retention

After successful registration, KeyU generates a biometric face template. The template is encrypted and stored only in protected storage on the enrolled device. uTrust's backend does not receive or store the face template, and no server-side copy is created.

The encrypted face template is retained on the enrolled device while the KeyU enrollment remains active so that the user can approve future authentication requests. It is deleted when the user deletes the KeyU account from within the application or when KeyU removes or replaces the enrollment.

Sharing with third parties

KeyU does not sell, rent or share live face images, face-capture frames or biometric face templates.

Requesting organizations do not receive the user's live face images, document portrait or biometric face template. They receive only information required for the requested authentication transaction.

Face-data deletion

Temporary document images, NFC verification packages and document portraits are deleted after the document-verification decision has been completed, regardless of whether registration is allowed or declined.

The encrypted face template stored on the enrolled device is deleted when the user deletes the KeyU account or when KeyU removes or replaces the enrollment.

Apple system biometrics

Apple Face ID is separate from KeyU's document-holder verification process. Face ID information remains managed by iOS and is not accessible to, collected by or stored by KeyU.

Automated verification

KeyU uses automated technology to evaluate identity documents, NFC chip information, document authenticity, face similarity, liveness and device integrity. These checks may produce outcomes such as verified, unsuccessful, unsupported or requiring another method.

An unsuccessful result does not by itself mean a document is fraudulent. It may be caused by compatibility, image quality, device capability, incomplete information or a technical error. Where available, you may retry, use another supported method or contact support.

Sharing and service providers

Participating organizations

When you respond to a request, KeyU may provide the requesting organization with authentication status, approval or rejection, verification result, assurance level, transaction identifiers and timestamps, and other identity information required for the requested service where permitted and configured. KeyU does not provide your biometric template or private device key.

Verification providers

We may use identity-verification technology to support:

• Document capture and information extraction.
• Document authenticity analysis.
• NFC chip reading and validation.
• Face verification.
• Liveness verification.

Technical providers and legal disclosure

We may use selected providers for infrastructure, hosting, security monitoring, app-integrity checks, push delivery, error monitoring and support. We may disclose data when required by law or a lawful request from a competent authority. Providers must process data only for authorized purposes and apply appropriate safeguards. We do not sell personal data.

Storage and international transfers

Backend information is stored in secure systems operated by or for uTrust. Where personal data is stored or processed outside Saudi Arabia, we will apply safeguards, assessments, contractual requirements and regulatory approvals required by applicable law.

Information protected locally on your device, including your encrypted biometric template and private cryptographic key, remains on that device unless you remove the account, clear application data or replace the device.

Retention and deletion

We retain personal data only as long as needed for the collection purpose or applicable legal, regulatory, security, audit or contractual obligations.

• Account and verified-identity information may be retained while the account is active.
• Registration data may be retained to complete, troubleshoot and audit registration.
• Authentication records may be retained for security, fraud prevention, disputes and audit.
• Security logs may be retained to detect, investigate and prevent incidents.
• Legally required information may be retained for the applicable statutory period.
• Backup information may remain until securely overwritten under the normal backup cycle.

When no longer required, information will be securely deleted, destroyed or anonymized.

Security

We use administrative, organizational and technical safeguards designed to protect personal data.

• Encryption in transit and, where applicable, at rest.
• Device-protected cryptographic keys and app/device attestation.
• Access controls, authorization, security logging and monitoring.
• Network protection, secure development, incident response and provider reviews.

No system guarantees absolute security. Protect your device, KeyU PIN and device-unlock credentials, and reject requests you do not recognize.

Your rights

Subject to applicable law and permitted limitations, you may have the right to:

• Be informed about processing of your personal data.
• Access your personal data and request a clear, readable copy.
• Request correction or completion of inaccurate or incomplete data.
• Request deletion or destruction of eligible data.
• Withdraw consent where consent is the processing basis.
• Submit a complaint concerning processing of your personal data.

We may verify your identity before completing a request. A request may be limited or refused where permitted by law.

Your choices and responsibilities

You can approve or reject each authentication request. Reject a request if you do not recognize the organization, did not initiate the activity, see incorrect information or suspect misuse.

• Keep your device and KeyU PIN secure.
• Do not allow another person to use your account.
• Keep your operating system and KeyU app updated.
• Tell us if your account or device may be compromised.
• Review request details before approval.

Children and legal capacity

KeyU is intended for individuals with legal capacity to provide required consent and accept applicable service terms. Where parental or guardian authorization is required, KeyU must not be used until that authorization and verification are completed.

Security incidents

If a personal-data security incident occurs, we will investigate, contain and address it. Where required by law, we will notify the relevant authority and affected individuals within the required period and provide available information about possible effects and measures taken.

Changes to this policy

We may update this policy when services, verification methods, features, processing practices, laws, security or operations change. The latest version will be available in KeyU with its updated effective date. Material changes will receive appropriate notice, and consent will be obtained where required.

Contact us

For KeyU support, privacy questions, complaints or requests, contact:

You may also use Help & Support in KeyU. Do not send identity-document images, passwords, PINs, private keys or other sensitive information through an unsecured channel.

Governing language

This Privacy Policy may be provided in Arabic and English. If the versions conflict or differ in interpretation, the Arabic version will prevail to the extent permitted by applicable law.