IDGate - Privacy Policy

Effective date: October 12, 2026

This Privacy Policy explains how Furkan Kaya, trading as Kaya Apps ("Developer", "we", "us" or "our"), handles information when you use the IDGate – ID Scanner & Age Check mobile application (the "App").

IDGate is private by design: identity data read from an ID is processed on your iPhone and is never sent to us. The App has no accounts and no servers of its own. We do not sell personal information and we do not use it for advertising or tracking.

In this policy, "you" means the person or business using the App, and "guest" means a person whose identity document is scanned with the App.

By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

Summary

• ID barcodes, passport and ID card code lines (MRZ) and photos are decoded on your device. We never receive names, dates of birth, document numbers or any other ID data.
• By default, no scan is saved. Only anonymous counts for the current night are kept on your device.
• Optional features that keep data on your device (the scan log, the ban list and the VIP list) are controlled by you and can be deleted at any time.
• The only information that leaves your device through the App is subscription and purchase information handled by Apple and our subscription provider, Adapty. It never includes ID data.
• The App contains no advertising SDK and no third-party analytics SDK, and it does not collect the Advertising Identifier (IDFA).

1. Information processed only on your device

1.1 ID barcode and passport data

When you scan the PDF417 barcode on the back of a driver's license or identification card, the App decodes the data stored in that barcode. Depending on the issuer, this can include name, date of birth, expiration and issue dates, issuing state or province, license or document number, sex, height, eye color, address and vehicle class.

When you scan a passport or an identity card that has a machine-readable zone (MRZ — the two or three lines of "<" characters), the App reads those lines with Apple's on-device text recognition. The MRZ contains the document type, issuing country, name, document number, nationality, date of birth, sex and expiry date.

The App uses this data in memory on your device to calculate the guest's age, check expiry against your age rule and show the result. It is not sent to us or to anyone else.

1.2 Camera frames and photos

The camera is used only to read ID barcodes and passport / ID card MRZ lines and, if you use Front check, the front of an ID. Camera frames are analyzed in memory on your device with Apple's built-in frameworks and are never recorded, saved or uploaded. Front check reads the text printed on the front of the ID on your device with Apple's Vision framework, compares it with the barcode, and does not save the image. If you choose to scan from a photo, the photo you pick is read on your device and is not copied or uploaded.

1.3 Manual checks

If you type a date of birth to check an age manually, the date is used on your device to show the result and is not saved.

1.4 What the App keeps by default

Without any optional feature turned on, the App keeps only:

• anonymous counts for the current night and past nights (number of IDs checked, results such as allowed, refused or couldn't read, age ranges and the hour of each check);
• the people-inside counter and your venue capacity;
• your settings and onboarding answers (venue type, age rule, mixed-venue setting, typical volume, language and similar preferences).

These counts do not contain names, dates of birth, document numbers or any other information that identifies a guest.

1.5 Re-entry detection

To warn you when the same ID is scanned twice in one night, the App creates an irreversible fingerprint of the ID: a SHA-256 hash of the issuer and the document number combined with a random value that is unique to your installation. The fingerprint cannot be turned back into the document number and cannot be matched across other devices. Unless the scan log is turned on, fingerprints are held only in the App's memory for the current night and are discarded when the App is closed.

1.6 Scan log (optional, off by default)

If you turn on the scan log, each row stores the time, result, age, sex, issuing state or province, your admit or deny decision, VIP and re-entry flags, and the ID fingerprint described above. The scan log never stores the document number, the address or the full date of birth. The guest's name is stored only according to the "Show names" setting you choose (hidden, masked initials or full name). Rows are deleted automatically after the retention period you select (24 hours, 7 days or 30 days), and you can turn the log off or clear it at any time.

1.7 Ban and VIP lists (optional)

If you add a guest to your ban list or VIP list, the App stores the name and note you enter, the duration of a ban, who added the entry (if you type it) and either the ID fingerprint (when added from a scan) or the date of birth you type (when added manually). These lists exist only on your device and are used only to show an alert when a listed ID is scanned.

1.8 Exports

If you use CSV export, the App creates a report on your device (night totals and, if the scan log is on, the scan log rows) and opens the iOS share sheet. The file leaves your device only if you choose a destination, such as Mail, Files or AirDrop. You are responsible for where you send it and for protecting it after it is shared.

1.9 Face ID lock (optional)

If you turn on the Face ID lock, authentication is performed by iOS. The App receives only a success or failure result and never has access to your face data, Touch ID data or device passcode.

1.10 Storage and deletion

All of the information in this section is stored in the App's private storage on your device. It is not uploaded to us. Like other app data, it may be included in your device backups (iCloud Backup or a computer backup) according to your iOS settings. You can delete it at any time in Settings → Delete all data, or by deleting the App. Because we do not hold a copy, deleted data cannot be recovered by us.

One exception: the number of free scans already used on this device is also kept in the iOS Keychain, so that deleting and reinstalling the App does not reset the free trial scans. It is a single number, contains no ID data, is not linked to you or sent anywhere, and is not removed by "Delete all data" or by deleting the App. It is removed if you erase your device.

2. Information that leaves your device

2.1 Purchases and subscriptions (Apple and Adapty)

Purchases are processed by Apple. We never receive your payment card details or your Apple ID. We use Adapty (Adapty Tech Inc.) to manage subscriptions, validate purchases, restore purchases and measure the performance of our subscription screens. To do this, Adapty receives:

• an anonymous Adapty profile identifier and your device's identifier for vendors (IDFV);
• technical information such as device model, operating system version, App version, language, and country or region derived from your IP address;
• subscription screen views and purchase events;
• purchase and subscription information from Apple (for example product, price, currency, free trial, renewal, cancellation, refund and expiry dates).

This information never includes ID data, guest information, your name or your email address. The App is configured so that Adapty does not collect the Advertising Identifier (IDFA).

2.2 Ratings

The App may ask you to rate it using Apple's built-in rating prompt. Ratings and reviews are handled by Apple under Apple's privacy policy.

2.3 Support requests

If you contact us, for example from Settings → Help & scanning tips, your email app opens a draft addressed to us. We receive only what you choose to send, and we use it only to answer you. Please do not send us images of identity documents or other guests' personal information.

2.4 No analytics, advertising or tracking

The App does not contain advertising SDKs or third-party analytics SDKs, does not show ads, and does not track you across apps or websites owned by other companies. If we add privacy-preserving usage analytics in a future version, we will update this policy and the App's privacy label first, and analytics will never include ID data.

3. How we use information

We use the limited information we receive only to:

• provide, maintain and improve the App;
• manage subscriptions, free trials, special offers and purchase restoration;
• measure the performance of our subscription screens and fix problems;
• prevent fraud and abuse;
• respond to your support requests;
• comply with legal obligations and enforce our Terms of Use.

Legal bases (EEA, UK, Türkiye and similar laws). We process information to perform our contract with you (providing the App and your subscription), for our legitimate interests (security, fraud prevention and improving the App, balanced against your rights), on the basis of your consent where required (for example camera and photo access, which you can withdraw in iOS Settings), and to comply with legal obligations.

4. Sharing of information

We do not sell, rent or trade personal information, and we do not "share" it for cross-context behavioral advertising. We disclose information only:

• to service providers that help us run the App — Apple (App Store, payments and ratings) and Adapty (subscription management) — under their own terms and privacy policies, and only as needed to provide their services;
• if required by law, regulation, court order or a valid request by public authorities;
• to protect the rights, property or safety of the Developer, our users or others, or to investigate fraud or abuse;
• in connection with a merger, acquisition or sale of the App, in which case this Privacy Policy will continue to apply.

Third-party privacy policies:

• Apple: https://www.apple.com/legal/privacy/
• Adapty: https://adapty.io/privacy

5. Information about guests whose IDs are scanned

IDGate is a tool used by businesses. When a venue, store or event scans a guest's ID with the App, the ID data is processed on that business's device, and any information it chooses to keep (scan log, ban list or VIP list) is controlled by that business, not by us. We never receive it and cannot access, correct or delete it.

If your ID was scanned by a business using IDGate and you have a question about your information, please contact that business directly.

Notice for businesses. Laws in some places limit how information read from an ID may be collected, used or kept. For example, California Civil Code §1798.90.1 and Texas Transportation Code §521.126 restrict how businesses may use and retain information obtained by scanning a driver's license, and Canadian privacy regulators have published guidance on scanning IDs at bars and other venues. Optional features that keep data are off by default. Before turning them on, make sure your use is lawful where you operate, give guests any notice the law requires, keep data only as long as necessary and protect your device. Our Terms of Use describe these responsibilities in more detail.

6. International transfers

Apple and Adapty may process the information described in section 2 in countries other than your own, including the United States and the European Union. Where required, these transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Data retention

• On-device data (night counts, settings, scan log, lists): kept on your device until you delete it, until the scan log retention period you choose expires, or until you delete the App. Re-entry fingerprints that are not in the scan log are discarded when the App closes.
• Free-scan counter (iOS Keychain): kept on the device until the device is erased (see section 1.10).
• Subscription records: kept by Apple and Adapty for as long as needed to provide your subscription and to meet legal, tax and accounting obligations.
• Support emails: kept only as long as needed to answer you and keep a record of the request.

8. Security

We use reasonable technical and organizational measures to protect information, including keeping ID data on your device, storing only irreversible fingerprints instead of document numbers, offering an optional Face ID lock and using encrypted connections for all network requests. Your device's passcode and iOS data protection also protect the App's storage. No method of storage or transmission is 100% secure, so please keep your device locked and up to date.

9. Children

The App is intended for businesses and their staff. It is not directed to children, and we do not knowingly collect personal information from children under 13 (or the minimum age required in your country). The App may be used to check the IDs of guests who are minors; as described above, that data is processed on the business's device and is never sent to us. If you believe a child has contacted us and provided personal information, please contact us and we will delete it.

10. Your rights and choices

Depending on where you live — for example under the EU and UK GDPR, the Turkish Personal Data Protection Law No. 6698 (KVKK), the California Consumer Privacy Act as amended by the CPRA and other US state privacy laws, Canada's PIPEDA or Quebec's Law 25 — you may have the right to know what personal information we hold about you, to access, correct or delete it, to receive a copy, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. We will not discriminate against you for exercising these rights.

Because the App has no accounts and keeps ID data on your device, you can exercise most of these rights directly:

• Delete your data: Settings → Delete all data, or delete the App.
• Turn off optional storage: turn off the scan log and remove list entries at any time.
• Camera and photos: manage permissions in iOS Settings.
• Subscriptions: manage or cancel them in your Apple ID settings.

For requests about the subscription information described in section 2, email us at furkan18688@gmail.com. We may ask for information needed to locate and verify your records, such as an Apple purchase receipt, and we will respond within the time required by applicable law. You may use an authorized agent where the law allows it. Because we do not track users, we do not respond differently to "Do Not Track" or Global Privacy Control signals; there is no tracking to opt out of.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Where changes are material, we may also notify you in the App. Your continued use of the App after the changes take effect means you accept the updated Privacy Policy.

12. Contact

If you have questions about this Privacy Policy or our privacy practices, please contact the data controller:

Furkan Kaya (Kaya Apps)
Email: furkan18688@gmail.com