Privacy and security

ZYKAY is built to minimize personal data exposure.

Core principle

Verification should return only what is needed, nothing more.

What partners get

Partners receive verification results/attributes requested by their policy, such as:

• isAdult
• isFrench
• isEU
• isUnique

What the system avoids sharing

• Full identity document contents
• Unnecessary personal profile data
• Raw private key material

Device-centric security model

• Proof generation runs through the app flow
• Device keys are created and kept on the phone
• Verification actions are approved on-device

Operational protections

• Session-based verification links (QR/deep link)
• Short-lived verification context
• Cryptographic proof flow designed for data minimization

Need more details?

For privacy-specific requests: privacy@zykay.com