When you complete Trust Passport Selfie verification in the TrustBridge mobile app, we use Smile ID SmartSelfie for identity verification and liveness (anti-spoofing). On supported Apple devices, that flow may use Apple’s TrueDepth camera and ARKit face APIs.
Using those APIs, the app may collect face related signals available on the device for liveness checks — for example facial geometry, depth information, and head orientation or facial expression signals — together with selfie and liveness camera images needed to verify that a real, present person is completing the selfie step.
We use this information only to confirm liveness, complete seller Trust Passport identity verification, prevent identity fraud and spoofing, and operate related compliance and platform safety controls. We do not use TrueDepth / ARKit face data for advertising, tracking across other companies’ apps or websites, Face ID device unlock, AR entertainment, or other unrelated purposes.
TrueDepth / ARKit face signal processing used for liveness may occur on your device. Selfie and liveness images required for verification are transmitted securely to our identity verification provider, Smile ID, so Smile ID can perform verification and return a result to TrustBridge. TrustBridge stores verification status, partner job references, and may store selfie upload artefacts in secured cloud storage (for example Amazon S3) as needed for your Trust Passport record. We do not sell this information.
We share this information with Smile ID as our identity verification provider, and with infrastructure and hosting providers (for example AWS) that support the Services, under confidentiality and security expectations. Smile ID’s handling of personal and biometric related data is also governed by Smile ID’s privacy policy at https://www.usesmileid.com/legal/privacy-policy. We do not sell face data or TrueDepth / ARKit face signals.
We retain this information only as long as needed for verification, fraud prevention, disputes, audit, legal obligations, and partner requirements described in this Policy. When retention is no longer required, we delete or anonymise where practicable, subject to legal holds and backup cycles. You may request deletion or ask privacy questions by emailing hello@trustbridgeplatform.com; we may need to verify your identity, and some records may need to be kept for legal, dispute, fraud, or partner obligations.