Privacy Policy
Last updated: August 2026
Your photo never leaves your device
IDKit's face detection, cropping, and background processing all run locally in your browser. The photo you upload is never transmitted to, or stored on, any IDKit server — we have no copy of it at any point, before or after processing.
What we do collect
When you pay for a compliant photo download, checkout is handled directly by Stripe — IDKit never sees or stores your card details. We keep a record of the order itself: your email address (if provided at checkout), the Stripe payment identifiers, the amount charged, and the date, so we can confirm purchases and provide support if something goes wrong.
What we don't do
We don't use advertising trackers, we don't sell or share your data with third parties, and we don't retain your photo in any form. (See “Analytics” below for the one exception on tracking-adjacent tools we do use, and why it's different from a tracker.)
Analytics
We use Vercel Analytics to see aggregate traffic to the site — things like how many people visited a page. It's cookieless: it doesn't set cookies, doesn't use tracking identifiers or device fingerprinting, and can't follow you across other sites. It never has any access to the photo you upload — that never leaves your device in the first place, regardless of analytics.
How long we keep order records
Order records (your email address and Stripe payment identifiers — never your photo) are retained for 7 years, in line with standard tax and accounting record-keeping practice.
Server access logs
Like any website, our hosting provider (Vercel) keeps standard server access logs — IP address, timestamp, and the page or path requested — as ordinary web server operation. Your photo is never part of these logs; it's processed entirely in your browser and is never sent to our servers, so there's nothing photo-related for a server log to capture.
Deleting your data
You can request that your order record be deleted by emailing support@idkitapp.com. This is currently a manual process handled by a real person, not an automated self-service flow — we'll confirm with you once it's done.
Service providers
We rely on Stripe to process payments and on standard hosting and database infrastructure to run the site and store order records. These providers process data only as needed to deliver the service.
Questions
This is an early version of IDKit and this policy will be updated as the product evolves.