DOCUMENT 1: PRIVACY POLICY

Unlike traditional identity providers, Powm is designed to know nothing about you. We have architected our system so that we technically cannot access your personal data, even if we wanted to.

To be absolutely clear, when you use the Powm App or verify your age:

NO Personal Identity Information (PII): We do not collect your name, date of birth, address, phone number, or government ID scans.

NO IP Addresses: We do not log or store your IP address.

NO Browser Fingerprints: We do not collect data about your browser, screen size, or battery level to track you.

NO Usage History: We do not know which websites you visit. We only process a cryptographic "Yes/No" signal.

We store only one piece of data to make the service function:

Device Identifier (Security Key):

What it is: A unique, random cryptographic ID generated on your mobile device.

Why we need it: This allows your specific phone to "sign" a proof of age without revealing who you are. It ensures that a proof cannot be faked or replayed by hackers.

Can it identify you? No. It is not linked to your email, phone number, or Apple/Google account. It is just a random string of numbers linked to this specific installation of the app.

Your Identity Wallet (including your age attestation) is stored locally on your device.

It is encrypted in your phone's Secure Enclave.

Powm's servers do not hold the decryption keys.

If you delete the app without a backup, your data is gone forever. We cannot restore it because we never had it.

Verification Logs: When you prove your age, we generate a temporary technical log (Success/Fail timestamp). This log contains no destination URL and no user identity.

Deletion: These technical logs are automatically purged every 30 days.