No accounts, no analytics, no tracking SDKs, no servers. All verification runs on your iPhone only.
This Privacy Policy governs your use of the mobile application ICAO ePassport Inspector (the “App”, “we”, “our”) for iOS mobile devices, published by VIATREE BOT.
By downloading, installing, or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.
1. No Personal Data Collection
- No user accounts. The App does not require registration, sign-in, or authentication.
- No analytics or tracking. No analytics SDKs, advertising SDKs, crash reporting SDKs, or third-party tracking frameworks.
- No network communication. The App performs all verification entirely on-device and does not make network calls for verification purposes.
- No data sharing. We do not share, sell, rent, or trade any information with third parties.
2. How Passport Data Is Handled
When you use the App to verify an ICAO 9303 electronic passport:
- NFC chip data groups (DG1 text, DG2 portrait, DG7 signature where present) are read into the device's volatile memory via iPhone's built-in NFC reader.
- The embedded ICAO PKD trust chain bundled within the App (
hybrid_masterList.pem, containing 584 CSCA certificates) is used locally to verify the Document Security Object (EF.SOD) signatures. - Verification results (INTEGRITY VERIFIED / VERIFICATION FAILED) are displayed on-screen only.
- All passport data is released from memory when you leave the verification screen or close the App.
- No passport data is persisted to device storage, cached, or transmitted off the device.
3. Permissions Used
| Permission | Why | Required |
|---|---|---|
| NFC Reader Core NFC |
Read ICAO 9303 electronic passport chips | Yes |
| Camera | Offline MRZ OCR (optional, to avoid manual typing) | No — fully optional |
No camera images are saved or transmitted; OCR runs on-device and is discarded. No location, contacts, photos, microphone, or other data permissions are requested.
4. On-Device Cryptographic Material
The App contains the following trust material bundled within the App binary:
- ICAO PKD CSCA certificates (public keys published by national passport issuing authorities, 583 certificates from the ICAO Public Key Directory).
- One developer test CSCA certificate used for internal integration testing.
None of this material is collected from the user. It is static read-only data compiled into the App binary.
5. Children's Privacy
The App is not directed to children under the age of 13. Since the App does not collect any personal information from any user, no data is collected from children.
6. Data Retention
Because the App does not collect or store personal data, there is nothing to retain, export, or delete. You can uninstall the App at any time; no residual data about you exists on our servers (we do not operate any servers for this App).
7. Security
All passport chip communication follows ICAO 9303 Basic Access Control (BAC) and/or PACE secure messaging protocols, including:
- Mutual authentication with the chip before any data group is read
- Encrypted secure messaging for all APDU command/response pairs
- Local signature verification using the embedded trust chain
No data leaves the device, so there is no transmission security risk external to the user's own device.
8. International Users
The App is available globally. Since no personal data is collected, international data transfer provisions (GDPR Article 44, CCPA, etc.) do not apply — there is no data to transfer.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Updates will be indicated by the “Last updated” date at the top of this document. Continued use of the App after changes constitutes acceptance of the updated policy.
10. Contact
For questions, concerns, or inquiries about this Privacy Policy, please contact:
VIATREE BOT
Email: 303@viatreebot.com
Website: https://viatreebot.com
隐私政策
无账户、无分析、无追踪、无服务器,所有验证在您的 iPhone 本地完成。
本隐私政策适用于由 VIATREE BOT 发布的 iOS 应用 ICAO 电子护照验证器("本应用")。下载、安装或使用本应用,即表示您同意本隐私政策。
1. 不收集任何个人数据
- 无账户体系,无需注册登录
- 无分析、无广告、无崩溃收集、无第三方追踪
- 无服务器通信 — 所有验证在设备本地完成
- 不与任何第三方共享数据
2. 护照数据处理方式
- NFC 芯片数据组(DG1 文本、DG2 头像、DG7 签名)读入手机临时内存
- 应用内置的 ICAO PKD 信任链(584 张 CSCA 证书)本地验证签名
- 结果("已验证真实" / "验证失败")仅屏幕显示
- 您离开验证页或关闭应用后,所有数据从内存释放
- 不落盘、不缓存、不传输
3. 权限
| 权限 | 用途 | 是否必需 |
|---|---|---|
| NFC 读卡 | 读 ICAO 9303 电子护照芯片 | 必需 |
| 相机 | MRZ 文字识别(可选,免手动输入) | 可选 |
相机图像不保存、不上传,OCR 完后即丢弃。不请求定位、通讯录、相册、麦克风等其他权限。
4. 适用儿童
本应用不面向 13 岁以下儿童。由于本应用不收集任何用户个人信息,自然也不收集儿童数据。
5. 数据保留
本应用不收集任何个人数据,因此没有任何可供保留、导出、删除的数据。您可随时卸载本应用,我们不运营任何与本应用相关的服务器,您的设备之外不存在任何您的数据。
6. 安全性
护照芯片通信遵循 ICAO 9303 BAC / PACE 安全消息协议:读取数据前与芯片互相认证,所有 APDU 加密,本地验证数字签名。所有数据不离开设备,不存在传输安全风险。
7. 隐私政策变更
本政策可能随法规或运营需要更新,更新通过顶部"最后更新"日期体现。继续使用即视为接受新政策。
8. 联系方式
VIATREE BOT
邮箱:303@viatreebot.com
网站:https://viatreebot.com