1. Data we collect
- Account data: your email address, used to sign you in with a one-time password (OTP) and to identify your verification records.
- Identity document data: images or PDF scans of your identity document (Civil ID, Resident Card, or Passport) and the details extracted from them — name, document number, date of birth, nationality, expiry date and machine-readable zone (MRZ) data.
- Biometric verification data: a short video and still frames of your face recorded during live verification, and the face image cropped from your identity document, used solely to confirm that the person completing the verification matches the document.
- Verification results: pass/fail outcomes, reference numbers, timestamps and version history of your verifications.
- Technical data: basic device model information attached to an upload for support and audit purposes.
2. Why we collect it
We process this data solely to provide identity verification: to read and validate your document, to confirm liveness and face match, to maintain your verification history and reference numbers, and to let you share your verified result with institutions you choose. We do not use your data for advertising, and we do not sell it.
3. How it is protected
All data is transferred over encrypted HTTPS connections and stored on our secured servers. Access is restricted to your own authenticated account — each user can only see their own records.
4. Sharing
Your data is not shared with any third party except:
- the institutions you explicitly choose to share your verified result with;
- our email delivery provider (Brevo), which receives your email address solely to deliver your login codes;
- where required by applicable law or a competent authority.
5. Retention and deletion
Verification records, including document images and liveness evidence, are retained while your account is active so your verified status and history remain available. You may request deletion of your account and all associated data at any time (see Section 6). Upon a verified deletion request, your records — including document images, biometric data and verification history — are permanently removed from our servers.
6. Your rights and account deletion
You may request access to, correction of, or deletion of your data by contacting us at the support email below from your registered email address. Deletion requests are honoured within 30 days.
7. Children
The App is intended for adults who hold a government-issued identity document. It is not directed at children under 18.
8. Changes
We may update this policy; material changes will be reflected by the "Last updated" date above.
9. Contact
Muscat Tech Solutions
Email: support@mts-om.com
Website: https://mts-om.com