KryptoOS Privacy Policy

The data controller is Empoorio (https://empoorio.org). This policy covers the KryptoOS Android app published on Google Play as com.empoorio.kryptoos.auth. It does not cover the other apps in the ecosystem, each of which has its own. For any privacy matter: legal@empoorio.org.

This app does not ask you to register or create a profile with your personal data. No email, no password, no user name. Your identity is the EmpoorioChain account the app itself creates and keeps on your phone. Your did:empoorio identifier and the keys controlling it are generated on the phone.

Credentials and keys are stored encrypted on the phone. The identifier and the proofs you choose to publish are written to EmpoorioChain, which is public and permanent; the credential's content is not: the chain holds the proof, not the document. There is no server of ours holding your credentials.

To read QR codes: the one from a verifier asking for a credential, or from another app wanting to connect to your identity. The camera opens when you ask and what it reads is processed on the phone.

So that only you can use your credentials. Android does the check; the app only receives whether it passed.

Some credentials carry the place where they were issued or checked, and for that the app may ask for your location at that moment. There is no continuous or background tracking, and if you deny the permission the rest of the app works the same.

• It keeps no copy of your credentials on any server of ours. • It does not know who you show a credential to: the check happens between your phone and whoever asks. • No analytics. • It does not sell or share data.

Uninstalling the app deletes credentials and keys from the phone. An identifier already on the chain cannot be deleted: you can stop using it and, depending on the case, revoke it. Questions: legal@empoorio.org.