Privacy Policy

1. Information We May Collect

The information we process depends on how you use ProveIT. It may include the following categories:

Account and profile information

• Information you provide to create or manage an account, such as your email address, display name, username, and similar profile details.
• Information related to authentication, account recovery, account settings, and support requests.

Captured, uploaded, and shared media

• Photos, videos, and related files you capture in-app or otherwise submit to the Services.
• Information associated with that media, such as filenames, media type, file size, timestamps, and similar media attributes.
• Content you choose to share through verification links, public pages, reporting flows, or support communications.

Authenticity, provenance, and verification data

• Hashes, signatures, verification results, three-word codes, timestamps, content credential data, blockchain-related records, and other metadata generated to help establish authenticity, provenance, or verification status.
• Associated metadata supplied by the app or derived during verification, which may include capture time, app version, device-linked verification information, and similar fields.
• If you enable optional features that include location or attribution, related metadata may also be processed and may appear in verification records.

Device, security, and integrity information

• Device identifiers, device model, operating system version, app version, and similar technical device information.
• Information used to support security and anti-abuse features, such as device registration data, cryptographic key material or public-key references, and device attestation or integrity signals made available by platform providers.
• Information about failed or suspicious requests when needed to protect the Services, detect fraud, investigate abuse, or enforce our terms.

Technical, diagnostic, and usage information

• Server logs, IP address, approximate location derived from IP, browser type, request metadata, crash data, performance metrics, and similar diagnostic information.
• Website session information, cookie or local-storage data, and usage events that help keep the site working, understand product usage, and debug issues.

Communications

• Messages you send to us, including support inquiries, reports, feedback, survey responses, or other communications.

2. How We May Use Information

We may use the categories of information above to:

• Provide, maintain, and improve the Services.
• Create and manage accounts, authenticate users, and help users recover access.
• Capture, process, store, verify, display, and share media and related verification records.
• Generate authenticity, provenance, and verification-related metadata and connect that information to public verification pages or downloadable proof assets.
• Operate device security features and evaluate device integrity or attestation signals where supported.
• Monitor reliability, troubleshoot failures, investigate abuse, and protect users, the Services, and our systems.
• Respond to user communications and send transactional messages such as confirmation, security, password reset, or service-related notices.
• Analyze usage trends, performance, and diagnostics to improve the product experience.
• Comply with applicable law, enforce our terms, and protect legal rights.

3. When Information May Be Public

Some ProveIT features are designed to create publicly verifiable proof. As a result, certain information may become public when you choose to verify, publish, or share content through the Services.

• Public verification pages may display media, verification status, timestamps, verification identifiers, three-word codes, content credential details, blockchain references, or other verification-related metadata.
• If you enable attribution or otherwise choose to associate your identity with a capture, your username or similar account label may appear with that verification record.
• Where verification data is written to public or immutable systems, such as blockchain-based records or embedded provenance metadata, that information may remain accessible even if other parts of the related content are later removed or changed.

4. How We May Share Information

We may share information in the following circumstances:

• With service providers: We may use vendors and infrastructure providers that help us operate the Services, such as providers for hosting, storage, authentication, delivery, email, security, analytics, diagnostics, and customer support.
• With the public: Information may be disclosed through public verification pages, downloadable proof artifacts, or other user-directed sharing features.
• For legal or safety reasons: We may disclose information where we believe doing so is appropriate to comply with law, respond to lawful requests, enforce terms, investigate abuse, or protect rights, safety, and security.
• During business changes: Information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of assets.

We do not describe this policy as a guarantee that information will never be disclosed outside these examples, but we do not currently use personal information as part of third-party advertising networks through the ordinary operation of the Services.

5. Cookies and Similar Technologies

Our website may use cookies, local storage, and similar technologies to keep pages functioning, maintain sessions, remember preferences, support login and security flows, measure basic usage, and diagnose issues. You can often control cookies through your browser settings, but some features may not work properly if essential technologies are blocked.

6. Retention

We may retain information for as long as reasonably necessary to provide the Services, maintain security, resolve disputes, enforce our terms, comply with legal obligations, and preserve verification integrity.

• Account and profile data may be retained while your account is active and for a reasonable period afterward.
• Media and verification records may be retained for service operation, integrity review, support, abuse prevention, and user access.
• Logs, diagnostics, and technical records may be retained for shorter or longer periods depending on operational need.
• Some information may remain in backups, embedded provenance records, public verification pages, or immutable systems where deletion or full reversal is not technically feasible.

7. Security

We use administrative, technical, and organizational measures designed to protect information processed through the Services. These measures may include access controls, encryption in transit, system monitoring, and device or service-level security features appropriate to the product.

No method of storage, transmission, or processing is completely secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

Depending on where you live and how you use the Services, you may have choices or legal rights regarding your information, such as the ability to:

• Access, review, or update certain account information.
• Request deletion of your account or certain personal information, subject to technical, legal, security, and verification-integrity limitations.
• Disable optional permissions or features, such as certain device permissions or attribution settings, through device or app controls.
• Object to, restrict, or request a copy of certain processing where applicable law provides those rights.

We may need to verify your identity before acting on a request. To make a privacy-related request, email support@proveit-app.com.

9. Children's Privacy

ProveIT is not directed to children under 13, or the minimum age required by applicable law in the relevant jurisdiction. If we learn that we have collected personal information from a child in a manner that requires parental consent and that consent was not obtained, we may delete the information or take other appropriate steps.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we do, we will post the updated version here and revise the "Last updated" date above. Your continued use of the Services after an update means the revised policy will apply to your ongoing use, to the extent permitted by law.