Privacy notice

Tuesday Markets Ltd, Kigali, Rwanda, is the controller. Pangolin KYC is our service. The company that asked you to verify is our customer, and they are a controller of the result in their own right.

Write to privacy@tuesday.africa about anything on this page.

• Photographs of your identity document, front and back, and everything printed on it that we can read: your name, date of birth, document number, issuing country, and the dates it was issued and expires.
• The photograph printed on your document, cut out of it.
• Photographs of your face taken while you move your head, one still photograph, and the first few seconds of that as video.
• A set of numbers your face reduces to. This is biometric information. It is used to compare your face with the photo on your document, and to notice when the same face appears on two different records belonging to the same customer of ours.
• Your proof of address, as you uploaded it, and the address and date read from it.
• Your IP address, what browser and device you used, and the language it asked for. We record these to tell one attempt apart from another and to notice fraud.
• The result of each check, and the reasons for it.

The company that sent you here gave us your name, date of birth, country and, where an address check was asked for, your address. Those are what your document is checked against. Nothing you type on our pages reaches that comparison.

The company that sent you here has a legal duty to know who its customers are, and this check is how it meets that duty. For your face, we rely on your explicit consent, which is why you are asked for it before the camera opens and why you can stop at any point.

If you would rather not be checked this way, tell the company that asked you. They can usually check you another way. We cannot make that decision for them.

Photographs of your identity document

2 years after your check ends

The photo taken of your face

2 years after your check ends

The few seconds of video from the movement check

12 months

Your proof of address

2 years after your check ends

The result, and the reasons for it

2 years after your check ends

Once that period ends, you may be asked to verify some steps again.

The company that asked for the check sees the result, the reasons for it, and the details your document proved. They can fetch your evidence through our API with their own key.

Your files are stored with Google, in a private Drive that only our service account and our own staff can reach. Nothing is ever made public, no file is shared, and no link to one is handed out.

We do not sell anything, and we do not use your photographs to train models.

We do not check whether your proof of address has been tampered with. We have no reliable test for that, and a check reported as passed when it never ran would be worse than saying so. Your result will say plainly that it was not run.

Our face comparison is not perfect. It is set from a small number of real measurements, not from a measured error rate over a whole population, which is why a close call goes to a person rather than being decided by a number.

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, and object to a decision reached automatically. Where a check is refused, you can ask for a person to look at it.

A request to delete may be refused where the company that checked you has to keep the record by law. We will tell you which, and why.