Last updated: October 3rd, 2025
This Privacy Policy explains how Identity.io (“Identity.io,” “ION Identity,” “we,” “our,” or “us”) collects, stores, and protects your information when you use our decentralized identity service.
We are committed to protecting your privacy and giving you full control over your data.
1. What We Do
Identity.io provides self-sovereign identity services on the Ice Open Network (ION). Unlike centralized identity systems, Identity.io is designed so that:
- Your identity data is stored locally on your device, not on our servers.
- Only encrypted hashes and proofs are recorded on-chain.
- You decide what to share, with whom, and for how long.
2. Data We Handle
When you use Identity.io, we may process the following:
- Identity attributes you provide (name, date of birth, email, phone, etc. depending on assurance level).
- Device-level security data (e.g., biometrics, keys in secure enclave).
- Blockchain metadata (encrypted hashes, proofs, verification records).
We do not collect or store your plain-text personal data on centralized servers.
3. How Your Data Is Used
Your data may be used to:
- Verify your identity through authorized verifiers.
- Enable selective disclosure and zero-knowledge proof verification.
- Provide proof-of-identity to relying parties (apps, services, DAOs).
- Record encrypted verification data on the ION blockchain for immutability.
We never sell your data. Any monetization of data (e.g., through a future data marketplace) will be user-consent based and under your full control.
4. Consent and Control
- You choose which data attributes to disclose.
- You can revoke consent to data access at any time.
- You control backups (ION Vault, iCloud, Google Drive, or other storage).
Consent actions are recorded immutably on-chain for transparency.
5. Security
We use strong encryption and privacy-preserving cryptography to protect your identity:
- Zero-Knowledge Proofs (ZKPs): Prove attributes without revealing full data.
- Quantum-resistant cryptography: Protects against future threats.
- Multi-Factor Authentication & MPC recovery: Prevents unauthorized access.
6. Sharing With Third Parties
Identity.io integrates with third-party applications, verifiers, and DAOs. When you share your data with them:
- They are responsible for their handling of your information.
- We are not liable for third-party policies or actions.
We recommend reviewing each partner’s privacy terms before sharing data.
7. Compliance
Identity.io is designed to comply with:
- GDPR and other global privacy regulations.
- AML/KYC requirements where applicable.
We balance privacy with assurance to make your identity usable both in decentralized and regulated contexts.
8. Data Retention
- Identity data is stored locally on your device until you choose to delete it.
- Verifiers may retain KYC/verification data in accordance with local laws.
- Blockchain records are immutable and cannot be altered once written.
9. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access and review your data.
- Correct or update identity attributes.
- Revoke data-sharing consents.
- Delete your local identity profile.
Since data is stored locally, you are in direct control of exercising these rights.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via official channels.
11. Contact
For privacy-related inquiries, contact us at: hi @ ice . io