Privacy Policy

How RwandaTrust handles personal and biometric data

RwandaTrust processes identity, consent, and verification data only to deliver requested trust services, enforce explicit consent, operate fraud controls, and maintain auditable compliance records.

What we collect

Depending on the flow, we may process document images, extracted document fields, biometric session results, phone-based consent signals, and verification outcomes returned by approved providers and local data sources.

How we use it

Data is used to validate identity claims, issue or revoke consent, run approved verification checks, route cases for review, and produce audit trails required for security and compliance.

Security and retention

Sensitive identifiers are encrypted or hashed where appropriate. Access is scoped by organization and permission. Biometric and verification records are retained only as long as required for active consent, fraud controls, legal obligations, and configured retention policies.

Questions

For privacy questions, contact hello@rwandatrust.com.