How verification works, how we use AWS Rekognition, and your data rights.
We offer two levels: Age-only (selfie) and Full ID (selfie plus photo ID). You start from Settings → Verification or the Verify page, choose a level, and upload a selfie (and for Full ID, a photo of your ID). We process the images and store only the result (e.g. verified or rejected, method, confidence). Full ID is required for payouts and some higher-risk features.
We use Amazon Web Services (AWS) Rekognition to run verification. For age-only, we use face detection to estimate age from your selfie; we do not keep the image. For Full ID, we compare the selfie to the face on your ID and read relevant text (e.g. date of birth, nationality) from the ID. Images are sent to AWS only for the time needed to process them; we do not retain the photos. AWS acts as a subprocessor; see our Privacy Policy for more on subprocessors and data transfers.
We store only the verification outcome: status (e.g. verified, rejected), method (age-only or full ID), confidence, and a reference. We may also store date of birth or nationality if we detected them from your ID. We do not store raw selfies, ID images, or face templates. Images are deleted after processing.
We process verification data on the basis of contract performance and legal obligation. You have the usual UK GDPR rights: access, rectification, erasure, restriction, portability, and the right to object or complain to a supervisory authority (e.g. the ICO in the UK). You can request deletion of your data; for provider-level deletion of biometric data, you can contact the provider as described in our Age & ID policy. For our Data Protection Officer and full legal detail, see the Privacy Policy.