Privacy notice

Tuesday Markets Ltd, Kigali, Rwanda, is the controller. Pangolin KYC is our service. The company that asked you to verify is our customer, and they are a controller of the result in their own right.

Write to privacy@tuesday.africa about anything on this page.

• Photographs of your identity document, front and back, and everything printed on it that we can read: your name, date of birth, document number, issuing country, and the dates it was issued and expires.
• The photograph printed on your document, cut out of it.
• Photographs of your face taken while you move your head, one still photograph, and the first few seconds of that as video.
• A set of numbers your face reduces to. This is biometric information. It is used to compare your face with the photo on your document, and to notice when the same face appears on two different records belonging to the same customer of ours.
• Your proof of address, as you uploaded it, and the address and date read from it.
• Your IP address, and from it roughly where you are connecting from and which network provider carries you. We work this out from the address your request arrives from, and your browser also asks ipapi.co (a third-party location service) about its own address, which therefore sees your IP address. We compare the two answers, because they differ when someone is behind a VPN or proxy.
• Details of your browser and device: its type and language, time zone, screen size, graphics card, processor and memory figures, and whether it looks like an emulator or an automated browser.
• A device fingerprint: a code computed in your browser from about forty of those traits, so the same device can be recognised on another network or another attempt. It is computed on your device and sent to us; it is used to notice fraud and is not used for advertising or shared with advertisers.
• The public address your device uses for internet calls (WebRTC). To find it, your browser sends one small request to a STUN server (stun.l.google.com:19302), which sees your public IP address and nothing else. We compare it with the address you connect from, because the two differ when someone is hiding behind a VPN or proxy.
• The result of each check, and the reasons for it.

The company that sent you here gave us your name, date of birth, country and, where an address check was asked for, your address. Those are what your document is checked against. Nothing you type on our pages reaches that comparison.

The company that sent you here has a legal duty to know who its customers are, and this check is how it meets that duty. For your face, we rely on your explicit consent, which you give when you tick the box before the camera opens, and you can stop at any point.

If you would rather not be checked this way, tell the company that asked you. They can usually check you another way. We cannot make that decision for them.

Photographs of your identity document

2 years after your check ends

The photo taken of your face

2 years after your check ends

The few seconds of video from the movement check

12 months

Your proof of address

2 years after your check ends

The result, and the reasons for it

2 years after your check ends

Once that period ends, you may be asked to verify some steps again.

The company that asked for the check sees the result, the reasons for it, and the details your document proved. They can fetch your evidence through our API with their own key.

Your files are stored with Google, in a private Drive that only our service account and our own staff can reach. Nothing is ever made public, no file is shared, and no link to one is handed out.

Two outside services see your IP address as part of the check: ipapi.co, which your browser asks where it is, and the STUN server named above (run by Google unless we have replaced it with our own). Neither is sent anything else about you.

We do not sell anything, and we do not use your photographs to train models.

Our check of whether a proof of address has been tampered with is limited. Where we cannot be sure a document is genuine, we say so in the result and pass it to a person to look at, instead of reporting it as passed.

Our face comparison is not perfect. It is set from a small number of real measurements, not from a measured error rate over a whole population, which is why a close call goes to a person rather than being decided by a number.

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, and object to a decision reached automatically. Where a check is refused, you can ask for a person to look at it.

A request to delete may be refused where the company that checked you has to keep the record by law. We will tell you which, and why.