Privacy Policy of Innovatrics Mobile SDKs

Innovatrics, s.r.o. (hereinafter “Innovatrics”, “we”, or “us”) provides this Privacy Policy to inform users and integrators (hereinafter “You”) of our mobile Android Software Development Kits (SDKs) about our practices regarding the collection and processing of non-personal data.

This Privacy Policy applies exclusively to the following SDKs provided by Innovatrics, intended for integration into third-party mobile applications:

Innovatrics Android SDKs: Document, Face, Face Lite, NFC, Palm

Innovatrics iOS SDKs: Document, Face, Face Lite, NFC, Palm

This Privacy Policy does not apply to any other Innovatrics applications or services. If You are using other Innovatrics products, please refer to the relevant Privacy Policy for those products.

This document provides information on the following:

• Our practices for collection of non-personally identifiable information during SDK use
• Data security and Your rights
• Contact details for data protection inquiries

I. Non-Personal Transactional and Analytical Data

Innovatrics SDKs are designed with privacy by design and by default, ensuring that:

• No personally identifiable information (PII), biometric data, or document images are collected, stored, or transmitted by the SDKs to Innovatrics servers or any third-party server.
• All biometric processing (e.g., face matching, document analysis, liveness detection) performed by the SDKs takes place locally on the device. The SDKs do not transmit, store or process any data externally.
• The SDKs return all outputs directly to the integrating application. The SDKs operate in a self-contained manner and do not influence or control how the integrating application subsequently processes data.
• Innovatrics SDKs do not receive, store, or access any user-generated content, biometric templates, or document data during or after SDK use.
• The responsibility for handling personal data (if any) lies solely with the entity integrating the SDKs into their application, who acts as the data controller under applicable laws.

The only data collected by Innovatrics from SDK usage is transactional and analytical metadata, which is fully anonymized and cannot be used to identify any natural person.

This data includes, for example:

• SDK version and build
• Timestamps and status of verification pipeline steps
• Performance metrics (e.g., document detection time, face capture frame rate)
• Success/failure codes for transactions

This information is used strictly for:

• Technical monitoring
• Performance analytics
• SDK optimization and debugging
• Feature usage analysis
• Licensing and billing purposes

For more details, see our Transaction tracking reference.

II. Data Security and Your Rights

While Innovatrics SDKs do not collect or process personal data, we implement strict internal safeguards to protect all metadata against unauthorized access, modification, or misuse.

Any data exchanged with Innovatrics infrastructure (e.g., license validation, telemetry) is encrypted and transmitted over secure channels in compliance with industry standards.

Since Innovatrics does not process any personal data via the SDKs, no data subject rights (as defined under GDPR) are triggered through SDK usage alone.

If the SDKs are integrated into a solution that processes personal data, data subjects may exercise their rights by contacting the relevant data controller (e.g. You as a system integrator).

III. Data Controller and Contact Information

The Data Controller is Innovatrics, s.r.o., with its registered office at Pri vinohradoch 82, 831 06 Bratislava, Slovak Republic, Company ID: 36 280 712, registered in the Commercial Register of the District Court Bratislava I, Section Sro., Insert No. 39481/B.

For inquiries regarding data protection, please use the following contact details:

• Email: gdpr@innovatrics.com
• Address: Innovatrics, s.r.o., Pri vinohradoch 82, 831 06 Bratislava, Slovak Republic.

If You believe that the processing of personal data violates Your rights or the Data Protection Act or GDPR, You may submit a complaint to Innovatrics, s.r.o. at Pri vinohradoch 82, 831 06 Bratislava, Slovak Republic; www.innovatrics.com, gdpr@innovatrics.com or to the Slovak Republic’s Office for Personal Data Protection at Hraničná 12, 820 07 Bratislava 27, Slovak Republic; www.dataprotection.gov.sk, statny.dozor@pdp.gov.sk.