wellknown.id witness: privacy notice, version 1 (26 September 2026)

Who we are. wellknown.id ltd, registered in England and Wales, company number 17105257, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE. Contact: privacy@wellknown.id.

What witnessing is. You ask wellknown.id to check a passport or identity card and vouch for what it proves. kivi on your phone carries our service's questions to your document's chip and the chip's answers back to us. We check that the chip is genuine and that its issuing state signed its data.

What we read. To make those checks we read the chip's data page: your name, date of birth, nationality, sex, document number, expiry date and issuing state, and the chip's security files. We never read your photograph or fingerprints.

What we keep. Nothing. The data page is held in memory only while the check runs, a few seconds, and is then discarded. It is not written to disk or to logs, and it is not passed to anyone.

What you get. Up to ten single-use credentials, signed by us, that say only what your document proves: the age thresholds you meet, your nationality and the country that issued the document, and how the chip was checked. Each is bound to its own key on your phone and can be shown to one site only. You decide which site sees which. They are kept on your phone, not by us.

What we can't tell. That the person holding the phone is the person the document belongs to. Sites that need that will ask for more.

Why we're allowed to. To provide the service you ask for (performance of a contract, UK GDPR Article 6(1)(b)).

Your rights. You can ask about, or object to, anything here at privacy@wellknown.id, and complain to the Information Commissioner's Office (ico.org.uk). As we keep nothing, there is nothing of yours for us to hand over or delete: your credentials are on your phone, and removing the document in kivi deletes them.

Changes. A new version of this notice gets a new number, and kivi asks you again before you use the witness under it.