Effective date: October 21, 2026
The short version: We never permanently store your photos. For standard verifications, no photo ever reaches our servers — only a cryptographic proof. For guest verifications (where another Authentk user asks you to verify yourself), a small watermarked preview is stored for up to 24 hours then automatically deleted. We never store your phone number, name, email, or location.
Authentk ("we," "us," "our") is an iOS application that cryptographically verifies photos so anyone can confirm they are real, taken live, by the person sharing them. Authentk is a product of HSL Bedrock Holdings, LLC, and can be reached at [email protected].
When you enroll in Authentk, we store:
Your verification history — the list of verifications shown in the app — is built from the records described below, each tied to your account by the protected phone reference. You can delete any individual verification from the app, which permanently disables its shareable link.
If you post an idea on the feature board, we store the title and description you write. Approved posts are shown publicly, without your name or any account details. Votes are stored as an anonymous one-way hash so we can prevent double voting but cannot see who voted for what.
When you verify a photo, we store:
Checking a photo on a verification link. Anyone holding a verification link can upload the copy of the photo they were sent to confirm it matches. That upload is compared in memory and discarded as soon as the result is returned: it is not stored, not written to logs, and not linked to who uploaded it. Only a count of uploads per network address is kept briefly, to limit abuse.
Authentk users can send a guest verification request — a link inviting another person to take a live photo to prove they are real. If you receive and complete a guest verification request:
Completing a guest verification does not create a permanent record in your account and does not affect your free trial period. You must be an enrolled Authentk user to complete a guest verification request.
We are explicit about this because it is central to how Authentk works:
We use the data described above solely to:
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 6.
If you join our waitlist at authentk.com, your email address is collected and stored by Formspree, a third-party form processor. It is used solely to notify you when Authentk launches. We do not use it for marketing, and we do not share it with any third party beyond Formspree.
Following our launch announcement, all waitlist email addresses will be permanently deleted from our records and from Formspree. You will not receive further emails from us after the launch notification unless you separately sign up for communications.
You may request deletion of your email at any time before then by contacting [email protected].
To verify your phone number during enrollment, Authentk sends a one-time passcode (OTP) via SMS. By entering your phone number and proceeding with enrollment, you consent to receiving a text message from Authentk for the purpose of account verification.
SMS messages are delivered through Twilio, a third-party messaging provider. Your phone number is transmitted to Twilio solely for the purpose of delivering the verification code. Twilio's privacy policy is available at twilio.com/legal/privacy.
We do not send marketing, promotional, or recurring text messages. The only SMS you will receive from us is the one-time verification code at enrollment.
To opt out of SMS messages from Authentk, email [email protected]. Note that opting out of SMS will prevent you from enrolling or re-enrolling.
We use Amazon Web Services (AWS) to host our backend infrastructure in the United States. AWS acts as a data processor on our behalf and is bound by its own security and privacy commitments.
This website uses Cloudflare Web Analytics to count page views. It sets no cookies, stores nothing on your device, and does not identify you or track you across other sites. We do not use any advertising or tracking services, and the Authentk app contains no analytics or tracking.
Verification records are retained for as long as your account is active. Free-tier verifications expire after 30 days. Pro-tier verifications do not expire. You may request deletion of all data associated with your account at any time by contacting [email protected].
Guest verification records — including any preview photo — are automatically and permanently deleted within 24 hours of creation, regardless of subscription tier.
All data is encrypted in transit and at rest. Your private key is generated and stored entirely on your device — we have no ability to access it. Phone numbers are stored only as one-way hashes that cannot be reversed.
Authentk is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have inadvertently collected such data, please contact us immediately at [email protected].
Depending on your location, you may have rights regarding your personal data including the right to access, correct, delete, or export it. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
California residents: under CCPA, you have the right to know what personal information we collect, to delete it, and to opt out of its sale (we do not sell personal information).
European residents: under GDPR, our legal basis for processing your data is the performance of a contract (providing the verification service you requested). You have the right to lodge a complaint with your local supervisory authority.
We may update this policy as the service evolves. We will notify users of material changes via the app or by email if you have provided one. The effective date at the top of this page will always reflect the most recent version.
Questions, requests, or concerns about this policy:
[email protected]