← Back to Identrifi

Privacy Policy

Identrifi · Last updated August 8, 2026

Identrifi confirms that a person is real, of age, and who they say they are — then returns a signed pass or fail to the platform that asked. This policy explains what Identrifi collects to do that, how briefly it is kept, and who it is (and isn't) shared with.

The core idea: the identity document and the face never leave Identrifi. The platform that sent you here learns only that you passed or failed — never your ID, your date of birth, your video, or your face data.

Who we are

Identrifi is an age- and identity-verification service operated by Vylaline Inc., a corporation in Alberta, Canada. For verification, Identrifi acts as a separate, independent data controller from the platforms that use it. Questions or requests: office@vylaline.com.

What we collect

When you complete a verification, Identrifi processes:

Why we collect it

Solely to answer one question for the platform you're joining: is this a genuine, of-age person who matches their ID? Your face data is used only to perform that match. It is never used to identify you elsewhere, build a profile, train unrelated systems, or for advertising.

Biometric consent

Face verification runs only after your express, informed consent, obtained before any face data is captured, on its own screen. You may decline — in which case verification cannot be completed — and you may withdraw consent afterward by contacting us. Withdrawing consent triggers deletion of the associated biometric data, subject to any short retention required to complete or dispute the verification you initiated.

What we share — and what we don't

On a pass, Identrifi returns to the requesting platform a signed, short-lived verification token that says the check passed, pinned to that platform and carrying no personal data. The platform never receives your ID images, your date of birth, your video, or your face data. Platforms are separate data controllers for whatever they do with the pass/fail result and their own accounts.

Identrifi does not sell personal or biometric data, and does not share it with third parties except service providers strictly necessary to operate the verification (bound by confidentiality) or where required by law.

How long we keep it

Verification video and face vectors are held only as long as a verification needs them and are deleted within 30 days of the verification completing. Audit records — the result, timestamps, and token metadata, containing no biometric content — are kept for a longer defined period for security, fraud-prevention, and compliance. When a retention period ends, data is deleted.

How we protect it

Data is encrypted in transit and at rest, access is restricted to what's needed to run and review verifications, and the verification environment is isolated from the platforms that call it.

Your rights

Under Alberta's Personal Information Protection Act (PIPA) and Canada's PIPEDA, you may request access to the personal information Identrifi holds about you, ask for correction, request deletion, and withdraw consent. Where your verification is subject to other regions' biometric laws, Identrifi applies the stricter standard. To exercise any right, email office@vylaline.com; we may need to confirm your identity to act on the request.

Children

Identrifi exists in part to confirm that a person meets a minimum age. It is not directed at children and does not knowingly retain the data of anyone found to be under the required age beyond what is needed to complete and record the failed check.

Changes

We may update this policy as the service or the law evolves; the "last updated" date above will change. Material changes affecting how biometric data is handled will be made conspicuous.

Contact

Vylaline Inc. (operating Identrifi), Alberta, Canada — office@vylaline.com.