Privacy

This page covers our website and the hashID app. In short: the website sets no cookies, measures nothing and loads nothing from third parties. The app keeps your data on your device. Our servers store only what is needed to reach you, relay your messages end-to-end encrypted, and delete them once they have been delivered. No tracking, no advertising, no data sales.

Controller

Desteba Productions S.L., Ptda del Boch 151, 03330 Crevillent (Alicante), Spain. Email: info@hashid.eu

When you visit

Our host IONOS SE (Germany) processes technically necessary data such as your IP address to deliver and protect the site. The legal basis is our legitimate interest in running it securely (Art. 6(1)(f) GDPR). There are no cookies, analytics, ads or external fonts here.

Newsletter

When you sign up, we store your email address, your language, the time of signup and confirmation, and the IP address at signup. We need this to write to you and to be able to prove your consent (Art. 6(1)(a) and Art. 7(1) GDPR). We use double opt-in: you are only on the list once you confirm the link in our email.

The hashID app

What stays on your device

Most of hashID works without us. The following data is stored encrypted on your phone, and on your watch if you use one, and never reaches our servers:

• The data from your ID document that you read via NFC or the camera (hIDme).
• Credentials you receive in your wallet (hIDhold), and the log of what you shared and with whom.
• Health and cycle entries (hIDhealth), your day planning (hIDday, hIDcal, hIDplan), breathing sessions (hIDchill), and your progress in games and learning modules.
• Your location, when Clock or Sky Map show the sun, moon and planets for where you are.
• Backups (hIDback). They are stored only where you choose, never on our servers.

Unlocking with your face or fingerprint is handled by your phone's operating system. We never receive biometric data.

What our servers store

So that people can reach you, our servers store:

• Your hashID, a pseudonymous identifier, and your alias if you choose one.
• Technical identifiers of your devices, their public keys, and the push tokens the operating system assigns to them.
• Your notification settings.
• Check values (hashes) of your emergency TANs, never the TANs themselves.
• Your contacts. Their details are encrypted so that we cannot read them. Our server only knows which hashIDs are connected, so that messages reach the right person.

Messages and calls (hIDcom)

• Messages, photos, videos, voice messages and files are end-to-end encrypted on your device. This includes quotes, shared locations, file names and link previews. We cannot read them.
• To deliver a message, our server sees which hashID sends to which hashID and when. For attachments, it also sees their type and size. As soon as the recipient's device has received a message, its content is deleted from our server. What remains is a delivery record without content, so that ticks, reactions and pins work. It is deleted after 30 days. Messages you share for joint editing keep this record while sharing is switched on.
• Location: when you share your location in a chat, the coordinates are end-to-end encrypted like a message.
• Calls are end-to-end encrypted. If the two devices can connect directly, they exchange their IP addresses with each other. Otherwise the call runs through our relay server, which cannot decrypt it.
• Link previews are created only on the sender's device. The linked website sees the sender's IP address. The recipient's device does not contact it.
• If you report a message, we receive the sender, the time and a reference to the message. The content stays encrypted.

Notifications

Notifications are delivered through the push service of your phone's operating system. What a notification shows depends on your setting in hIDcom: nothing, only the sender's name, or a preview of the message. If you choose name or preview, this text passes through our server and the push service so it can appear on your lock screen. Choose the most private setting if you want neither us nor the push service to see anything.

Sharing with others

When you prove your age (hIDage), present a credential (hIDhold), sign in to a service (hIDlogin) or check someone at the door (hIDin), you see beforehand exactly what will be shared, and you confirm it. The recipient receives only what you approve and handles it under its own privacy policy. Credentials you receive come directly from the issuer you choose.

When you browse with hIDsurf, the websites you visit see your IP address, as with any browser. We do not record what you browse.

DoorProof for companies

Companies can use a device as a DoorProof door to record check-ins and check-outs. The company decides about this processing and is responsible for it; we process it on its behalf. Our servers hold no readable company or employee data, only codes and hashes. For employees, the company's privacy policy applies.

Crash reports

If you allow sharing with app developers in your phone's settings, we receive anonymous crash reports through the operating system. We use no analytics, no tracking and no advertising tools.

Legal basis

We process the data above to provide the app functions you use (Art. 6(1)(b) GDPR) and to keep our servers secure (Art. 6(1)(f) GDPR). The camera, NFC, location, microphone, Bluetooth and notifications are used only after you allow them in your phone's settings. You can withdraw this at any time there. Health data never leaves your device; we do not process it.

Who processes the data

• Hetzner Online GmbH (Germany): servers for the app, the newsletter list and e-mail, in the EU, under a data processing agreement.
• IONOS SE (Germany): hosting of this website and e-mail, in the EU, under a data processing agreement.
• Apple: delivery of push notifications and, if you allow it, crash reports. Apple may process this data outside the EU under its own privacy policy.

We do not sell data and never use it for advertising.

How long

Unconfirmed signups are deleted after 48 hours. Confirmed addresses are kept until you unsubscribe. Every email contains an unsubscribe link.

In the app:

• Messages: the content is deleted as soon as it has been delivered, the delivery record after 30 days. Messages that cannot be delivered are deleted after 30 days at the latest.
• Photos, videos and files: stored encrypted on our server for 30 days at the most.
• Your hashID and the data stored for it: as long as your hashID exists. When you delete your hashID in the app's settings, we delete the data stored for it on our servers.
• Reports: as long as we need them to handle the report.
• Server logs: our own programs do not record IP addresses, and their logs are deleted after 7 days. The access log of our hosting provider stores only shortened IP addresses and is deleted after 7 days.

Children

hashID may only be used by people aged 16 or older. If you learn that a younger child is using hashID, please tell us at info@hashid.eu.

Your rights

You can ask for access, correction, deletion, restriction and portability, and withdraw your consent at any time. Write to info@hashid.eu. You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).

In the app, you can delete your hashID and the data stored for it on our servers at any time in the settings. Data that stays on your device is under your control; we have no access to it.

Last updated: 24 October 2026