Effective date: May 14, 2026
The short version: We never permanently store your photos. For standard verifications, no photo ever reaches our servers — only a cryptographic proof. For guest verifications (where a Pro user asks you to verify yourself), a small watermarked preview is stored for up to 24 hours then automatically deleted. We never store your phone number, name, email, or location.
Authentk ("we," "us," "our") is an iOS application that cryptographically verifies photos so anyone can confirm they are real, taken live, by the person sharing them. Authentk is a product of HSL Bedrock Holdings, LLC, and can be reached at [email protected].
When you enroll in Authentk, we store:
When you verify a photo, we store:
Pro users can send a guest verification request — a link inviting another person to take a live photo to prove they are real. If you receive and complete a guest verification request:
Completing a guest verification does not create a permanent record in your account and does not affect your free trial period. You must be an enrolled Authentk user to complete a guest verification request.
We are explicit about this because it is central to how Authentk works:
We use the data described above solely to:
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 6.
If you join our waitlist at authentk.com, your email address is collected and stored by Formspree, a third-party form processor. It is used solely to notify you when Authentk launches. We do not use it for marketing, and we do not share it with any third party beyond Formspree.
Following our launch announcement, all waitlist email addresses will be permanently deleted from our records and from Formspree. You will not receive further emails from us after the launch notification unless you separately sign up for communications.
You may request deletion of your email at any time before then by contacting [email protected].
To verify your phone number during enrollment, Authentk sends a one-time passcode (OTP) via SMS. By entering your phone number and proceeding with enrollment, you consent to receiving a text message from Authentk for the purpose of account verification.
SMS messages are delivered through Twilio, a third-party messaging provider. Your phone number is transmitted to Twilio solely for the purpose of delivering the verification code. Twilio's privacy policy is available at twilio.com/legal/privacy.
We do not send marketing, promotional, or recurring text messages. The only SMS you will receive from us is the one-time verification code at enrollment.
To opt out of SMS messages from Authentk, email [email protected]. Note that opting out of SMS will prevent you from enrolling or re-enrolling.
We use Amazon Web Services (AWS) to host our backend infrastructure in the United States. AWS acts as a data processor on our behalf and is bound by its own security and privacy commitments. We do not use any analytics, advertising, or tracking services.
Verification records are retained for as long as your account is active. Free-tier verifications expire after 30 days. Pro-tier verifications do not expire. You may request deletion of all data associated with your account at any time by contacting [email protected].
Guest verification records — including any preview photo — are automatically and permanently deleted within 24 hours of creation, regardless of subscription tier.
All data is encrypted in transit and at rest. Your private key is generated and stored entirely on your device — we have no ability to access it. Phone numbers are stored only as one-way hashes that cannot be reversed.
Authentk is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have inadvertently collected such data, please contact us immediately at [email protected].
Depending on your location, you may have rights regarding your personal data including the right to access, correct, delete, or export it. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
California residents: under CCPA, you have the right to know what personal information we collect, to delete it, and to opt out of its sale (we do not sell personal information).
European residents: under GDPR, our legal basis for processing your data is the performance of a contract (providing the verification service you requested). You have the right to lodge a complaint with your local supervisory authority.
We may update this policy as the service evolves. We will notify users of material changes via the app or by email if you have provided one. The effective date at the top of this page will always reflect the most recent version.
Questions, requests, or concerns about this policy:
[email protected]