Prson app terms

1. Who we are and what these terms cover

Prson is run by Yumankind OÜ, Sepapaja 6, 15551 Tallinn, Estonia, registry code 16232402 ("Prson", "we", "us").

These terms cover the Prson wallet: the Prson app for iPhone and Android, and app.prson.net. With the wallet you can:

• keep a wallet of keys and identities on your phone;
• verify identity documents (passports and ID cards with a chip) and details such as your email address, phone number or website;
• make proofs and answer challenges: show a verified fact, detail, photo or video to someone, or ask someone else for one;
• sign in to websites with Prson ("Sign in with Prson");
• sign PDFs with a certificate in your name;
• receive notifications from websites you allow;
• answer verification and signature requests from organisations;
• buy credits and a Pro subscription.

Other Prson services have their own terms: the marketplace at prson.net (Terms of Service) and human agents at agents.prson.net (Agent terms). Businesses and developers using our verifications API agree to the Verifications API terms. How we use personal data is in the Privacy Policy.

2. Who can use the wallet

You must be at least 18. You must give true information and use only your own identity documents. Each verified document and each verified person can be held in only one wallet at a time.

3. Your wallet and keys

Your wallet's keys are made and kept on your phone. Your recovery phrase is the only way to restore your wallet on a new phone, unless you saved an encrypted backup with a passkey. We never see your private keys or your recovery phrase, so we can't recover them for you. Keep the phrase safe and private: anyone who has it can control your wallet.

If your phone is lost or stolen, or you think someone knows your phrase, restore your wallet on a new phone and revoke your signing certificate as soon as you can (section 7).

4. Verifying documents and details

When you verify a passport or ID card, the app reads its chip. We check that the issuing country signed the data, that the chip is genuine and that the document hasn't expired. The result is a verification level:

• levels 1 to 4: checks done on your phone (a live selfie, fingerprint or Face ID, a photo of a document);
• level 5: a chip we checked, with proof the chip is genuine;
• level 6: level 5 plus a match between a live selfie and the chip photo, done on your phone, with a liveness check.

The face match is optional and needs your explicit consent. You can withdraw it as the Privacy Policy explains. A verified detail (for example an email address) lasts until it lapses; then you can verify it again.

5. What a verification, a proof or a signature shows, and what it doesn't

A Prson verification shows that, at the time of the check, a document's chip was genuine and signed by its issuing country, and (at level 6) that the person holding the phone matched the chip photo. A proof shows that a fact or detail was verified by Prson, or that a photo or video was taken in the Prson app on a genuine phone at the time and, if asked, the place recorded.

They don't show:

• that the document hasn't been reported lost or stolen, or revoked by its issuer since (we don't check issuers' lost-and-stolen databases);
• that the person is who they say in any sense beyond the document they hold;
• that what a photo or video shows is true or complete;
• anything about a person's character, rights, authority or capacity (for example that they may sign for a company).

Anyone relying on a verification or proof decides for themselves whether it is enough for their purpose.

6. Sign in with Prson and website notifications

When you sign in to a website with Prson, the website receives only what you approve in the app. Each website gets a different identifier for you, so websites can't link you across each other.

If you allow a website to send you notifications, it can send short messages to your wallet's inbox. You can mute a website, turn its notifications off, or remove it at any time. Websites must follow our rules for notifications; we may stop a website that sends unwanted messages.

The website, not Prson, is responsible for its own service and what it does with what you share. Prson is not a party to your agreement with it.

7. Signing PDFs

With a level 5 or 6 identity you can sign PDFs in the app. Prson issues you a signing certificate with your name as your document's chip gives it. Your phone holds the key; Prson never does. Each signature carries a timestamp from Prson's timestamping service. How certificates are issued, used and revoked is in the certificate policy.

These are advanced electronic signatures under the EU's eIDAS Regulation, not qualified electronic signatures. A qualified signature has the same legal effect as a handwritten one throughout the EU. An advanced signature can be used as evidence, but a court or the other party may give it less weight, and some documents need a qualified or handwritten signature by law. Check what the document you sign needs.

Your certificate lasts until the identity document behind it expires, or until it is revoked. It is revoked when you remove the document, delete the identity or your account, or ask us to. If you revoke because your phone or phrase was compromised, signatures made before also stop being trusted; otherwise signatures already timestamped stay valid.

Don't sign a document you haven't read, or sign for someone else.

8. Requests from organisations

Organisations can ask you to verify something or sign a PDF. You decide whether to answer and what to share. The organisation receives what you share and an identifier made only for that organisation. Your agreement with the organisation, and its use of your answer, are between you and it.

9. Credits and Pro

Credits pay for some actions in the app, such as extra challenges, premium details (for example a verified phone number or address) and longer-lasting proof packages. Prices in credits are shown before you use them. Credits held for a challenge come back if nobody answers it or it is cancelled.

You can buy credits in packs, or get them with Pro, a monthly subscription that also gives you extra features (for example proof packages that last up to a year). Credits have no cash value, can't be transferred or withdrawn, and can only be used in the Prson wallet.

You buy credits and Pro through the App Store (Apple) or Google Play (Google). Their terms apply to the payment.

• Auto-renewal. Pro renews automatically each month until you cancel it in your App Store or Google Play subscription settings. Cancel at least 24 hours before the renewal date to avoid the next charge.
• When Pro ends, Pro features stop, and up to the credits granted by your last renewal are removed from your balance (never below zero).
• Right of withdrawal. As a consumer in the EU you normally have 14 days to withdraw from a contract made online. Credits and Pro are digital content supplied at once: when you buy, you ask us to supply them straight away and confirm you know that you lose the right of withdrawal once supply starts.
• Refunds go through Apple or Google under their policies. If a purchase is refunded, the credits it gave are removed.
• Price changes for Pro apply from the next renewal, with notice through the store.

Your statutory rights as a consumer are not affected.

10. Acceptable use

Don't:

• verify or use a document that isn't yours, or help someone else do so;
• make or share proofs that are false or misleading, or tamper with the app, its checks or the phone's attestation;
• use Prson to harass, defraud or impersonate anyone, or to collect people's data without a lawful reason;
• try to break, overload or get around our security or limits, or reverse engineer the app except where the law allows;
• break the law.

We may refuse, suspend or end your use of the wallet, revoke certificates and withdraw verifications if you break these rules or the law requires it. We tell you why, unless the law stops us, and you can ask us to review the decision.

11. Availability and changes

We work to keep Prson available but can't promise it will always work, or work with every phone or document. We may change or stop features. If a change matters to you, we tell you in advance in the app or by email. If we change these terms, we tell you at least 30 days before they apply (unless the law needs a change sooner), and you can stop using Prson before then.

12. Liability

Nothing in these terms limits liability that can't be limited by law, including for death or personal injury caused by negligence, fraud, gross negligence or wilful misconduct.

Otherwise, we are not liable for losses caused by: things outside our control; your phone, keys or recovery phrase being lost, stolen or shared; decisions others make relying on a verification, proof or signature; or websites and organisations you share data with.

13. Ending your use and deleting your data

You can stop using the wallet at any time. Delete all your data in the app's Settings, or write to [email protected]. We then delete your wallet, identities, documents, verified details, proofs and other data as the Privacy Policy explains, and revoke your certificates. Payment records we must keep by law stay, without your name. Deleting the app alone doesn't delete your data on our servers.

Deleting your account doesn't cancel a store subscription: cancel Pro in the App Store or Google Play.

14. Law, disputes and contact

These terms are governed by Estonian law. If you are a consumer, you keep the protection of the mandatory laws of the country where you live, and can bring a claim in its courts.

If something goes wrong, write to [email protected] first. If we can't settle it, you can turn to the Consumer Disputes Committee at the Estonian Consumer Protection and Technical Regulatory Authority (ttja.ee) or the consumer authority where you live.

Contact: [email protected] (help), [email protected] (your data), [email protected] (security). Company details are in the legal notice.