Privacy Policy

Duovity is a trust and identity verification service that helps people document interactions with confidence. We operate at duovity.com.

If you have questions about this policy, contact us at privacy@duovity.com.

When you verify your identity, your government ID is processed by Persona, a SOC 2 Type II certified identity verification provider. This means:

• Your ID image is sent directly to Persona — Duovity never receives or stores it
• Persona returns only a verification result (pass/fail) — not your ID data
• We store only your name, email, and verification status — never your ID number, date of birth, or photo

You can review Persona's privacy practices at withpersona.com.

When you use Trust Scan to verify someone else's identity:

• The scan requires their explicit consent — shown and confirmed on screen
• Their ID is processed by Persona — not stored by Duovity
• We store a record that a scan occurred: scanner name, scanned person's name, situation, result, and timestamp
• An optional SMS confirmation can be sent to the scanned person via your device's native Messages app — Duovity never accesses your contacts or sends SMS directly

• To create and display your verified QR card
• To generate timestamped interaction records for both parties
• To send magic link sign-in emails and record confirmation emails
• To maintain your verification status and badge history
• To improve the product (aggregated, anonymized analytics only)

• Account data — kept while your account is active
• Interaction records — kept permanently as they form your verified history. You may request deletion.
• Verification status — expires after 12 months and requires renewal
• Authentication logs — kept for 90 days for security purposes

You have the right to:

• Access — request a copy of your personal data
• Correction — update your name or email address
• Deletion — request deletion of your account and records
• Portability — receive your data in a machine-readable format
• Objection — object to certain uses of your data

To exercise any of these rights, email privacy@duovity.com. We'll respond within 30 days.

We take security seriously:

• All data is encrypted in transit (HTTPS/TLS) and at rest
• Database access is protected by row-level security — your records are only accessible to you
• Authentication uses magic links — no passwords are stored
• We never store ID images, payment details, or sensitive government data

If you discover a security vulnerability, please report it to security@duovity.com. We take all security reports seriously and will respond within 48 hours.

Duovity is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

Duovity uses Google Analytics (via Google Tag Manager) to collect anonymized usage data — pages visited, time on site, general geographic region. No personal information is shared with Google Analytics.

We do not use advertising cookies, tracking pixels, or sell data to advertisers. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

What Duovity is: Duovity is an interaction tracking and identity logging service. It creates timestamped records of interactions and facilitates identity verification through a certified third-party provider.

What Duovity is not: Duovity is not a professional background check service, a law enforcement tool, a guarantee of safety, or a substitute for personal judgment. A verified badge does not mean a person is safe, trustworthy, or free from criminal history unless a Deep Check has been completed and confirmed.

Identity verification accuracy: Identity verification is performed by Persona, a third-party provider. Duovity makes no warranty, express or implied, as to the accuracy, completeness, or reliability of any identity verification result. Verification confirms that a document appears authentic and matches a person's face — it does not guarantee the document is genuine or that the person has not provided false information.

Your responsibility: You are solely responsible for decisions you make based on information provided by Duovity or its verification partners. Duovity shall not be liable for any loss, damage, injury, or harm arising from reliance on verification results, interaction records, or any other information provided through the service.

No guarantee of safety: Using Duovity does not guarantee personal safety. Always use good judgment, follow your instincts, and use additional precautions appropriate to the situation.

Limitation of liability: To the maximum extent permitted by applicable law, Duovity's total liability to you for any claims arising from your use of the service shall not exceed the amount you paid to Duovity in the twelve months preceding the claim, or $100, whichever is greater.

No professional advice: Nothing in this service constitutes legal, medical, security, or professional advice of any kind. If you have concerns about a specific situation, consult a qualified professional.

We may update this policy from time to time. We'll notify you by email and update the "Last updated" date at the top. Continued use of Duovity after changes constitutes acceptance of the updated policy.