Privacy Notice
Summary
We collect no personal data about you through the app — no name, no email address, no device identifiers, no analytics, no crash reports and no location data. The app contains no tracking of any kind. What the app sends when you link an account or answer a request goes to the server of the organisation you linked it to, never to us.
Your private keys are generated on your device and never leave it. Your face or fingerprint is verified by your device, and only the result of that verification — a pass or a failure — is used. Neither we nor any third party receives the biometric data itself.
Terms used in this notice
The same terms as the app licence uses, kept to the ones that appear here.
- The app is the Ydentifi Authenticator application for iOS, published by Ydentifi through the
official Apple App Store.
- Ydentifi (also "we", "us") is Ydentifi Ltd., the publisher of the app.
- A relying party is the organisation that gives you the setup code — your employer, your bank,
your service provider or similar. It is responsible for the authentication service, whether it runs the server itself or another organisation runs it on its behalf.
- A setup code is a QR code, number, string of characters or similar token that links the app to
a relying party's service. Until you use one, the app has nothing to authenticate against.
Who is responsible for your data
Not Ydentifi. The server the app communicates with is run by the relying party, or by another organisation on its behalf, and the relying party determines what is recorded about your sign-ins and for how long. In data-protection terms it is the controller, and its privacy notice governs that processing.
We supply the software. We do not operate the service, we do not host it, and we have no access to it. Enquiries about what is retained concerning your authentications should be directed to the relying party.
What stays on your device
| What | Where it lives | Does it leave the device? |
|---|---|---|
| Private keys | Secure Enclave (classical key); encrypted keychain, this device only (post-quantum key) | Never |
| TOTP secrets | Encrypted keychain, this device only | Never |
| Biometric data | Your device's own biometric system | Never |
| Your account list | Encrypted app storage | Never |
| Sign-in history | Encrypted app storage, 7 days | Never |
Deleting the app removes all of it. We cannot recover it, because we never held it.
What is sent, and to whom
Everything the app sends goes to your relying party's server, not to us.
When you link an account, the app sends an identifier for your phone, your phone's model (for example "iPhone17,4") and the public keys it created for that account. The identifier is the one Apple gives the app on your phone, and it is the same for every account in the app. Your private keys stay on your phone.
When you answer a sign-in request, the app sends a signed response. It states which request you answered; whether you approved, declined or dismissed it; that you confirmed it with Face ID or Touch ID; whether your phone currently has a passcode and Face ID or Touch ID set up, and whether the app may use your location; the number you typed, if the request asked for one; the reason you chose, if you declined; and the time on your phone when you answered.
Location. Where your relying party has asked for a location check, the app works out on your phone whether you are inside the area it named, near it or far from it. The response carries only that result and how precise the reading was, never where you are. You may decline to share your location, and your choice is included in the response. Where your relying party requires a location check, declining may prevent that sign-in from completing.
Every request the app makes also carries the app's version number.
Your relying party's server address is taken from the setup code you used. Traffic is directed there and nowhere else. The app makes no calls to Ydentifi.
Permissions the app requests
- Camera — to scan setup and sign-in QR codes. Images are processed on the device and are never
stored or transmitted.
- Face ID / Touch ID — to confirm your identity before an approval. Performed entirely by your
device.
- Location, only if your relying party asks for a location check — used on your phone to work
out whether you are inside, near or far from the area named. Only that result is sent to your relying party, and nothing is sent to us.
Any of these may be refused or withdrawn in your device settings. Refusing camera access prevents enrolment; refusing the others limits what the app can do rather than preventing its use.
The app does not use push notifications. It holds no push token, and nothing about you passes through Apple's push notification service, Firebase's cloud messaging service, or any other messaging provider. When a sign-in is waiting, the app learns it from its own connection to your relying party's server and shows a banner inside the app. This is deliberate: a push service would otherwise observe metadata about who is authenticating and when, even without access to the contents.
Children
The app is not directed at children. It has no function until an organisation enrols you.
Your rights
Because we hold no personal data about you, there is nothing for us to provide access to, rectify or erase. Your data-protection rights in relation to the authentication service are exercised against your relying party, which holds the records. Its privacy notice should set out how.
Should you believe we nonetheless hold data about you, contact us at support@ydentifi.io and we will respond. You may also complain to your national data-protection authority; in Bulgaria that is the Commission for Personal Data Protection (КЗЛД).
Changes
If this notice changes, the updated version ships with a new release of the app, and the current version is published at https://ydentifi.io/legal/privacy so you can read it at any time without installing anything.
Language
This notice is made in English, which is the authoritative version. Any translation is provided for convenience only, and in the event of any inconsistency the English text prevails.
Contact
Ydentifi Ltd., Todor Aleksandrov No. 46, floor 2, 2700 Blagoevgrad, Bulgaria. Company number 208962261.