Overview

Askuria is an application that verifies a person's identity before a sensitive operation within an organization (for example: confirming that a request really comes from the right person before carrying it out). This page describes the data the application processes, why, and how it is protected.

Data you provide

• Display name: used to identify you to the other members of your organization.
• Unique identifier: generated automatically when you sign up, to distinguish you within the organization.
• Session code: entered occasionally to validate an operation.

Data generated by the application

• A key that never leaves your device: generated at installation, it proves that you are the one validating an operation. It is never transmitted or copied.
• Verification history: the operations you have validated, kept to ensure traceability within the organization.
• Roles and permissions: what your organization allows you to do in the application.

Technical data

• The device type (iPhone, Android...), transmitted during exchanges with the server.
• A check that your device has not been modified to bypass its protections (optional, depending on the organization).

What Askuria does not collect

• Your geographic location
• Your contacts or address book
• Your browsing history
• Usage statistics or targeted advertising
• No third-party analytics tool is embedded in the application

Camera

The camera is used only to scan a QR code when signing up or connecting with another person. No photo or video is ever recorded or transmitted.

Face ID / fingerprint

If you enable it, biometrics are used solely to protect access to the application on your device. This data stays managed by your phone and is never transmitted to Askuria.

Where your data is stored

Your data is stored encrypted on your device, in the secure storage provided by your system (iOS or Android). Exchanges with the server go through an encrypted connection and are digitally signed to prevent an intercepted message from being replayed by someone else. No data is transmitted to any third party.

Data retention

Your data is kept as long as your account is active within your organization. The history of verifications already performed is kept beyond that, to guarantee its reliability.

Deleting your account and your data

If you administer your organization, you can request its deletion directly from the application: Configuration tab, "Supprimer mon compte" (Delete my account) button. If you are the only member, deletion is immediate and final. If the organization has other members, your request is sent to us and you can track its progress (and cancel it) from that same screen; we process it and then confirm the deletion to you.

If your account was created by your organization, its deletion is up to your organization's administrator: contact them. In any case, you can also write to us directly at tech@askuria.com. We handle every request individually and confirm once the deletion is done.

Your rights

In accordance with the GDPR, you may at any time:

• request a copy of your data,
• have inaccurate data corrected,
• request the deletion of your data,
• ask to receive your data in a reusable format.

To exercise these rights, write to tech@askuria.com.

Contact

Askuria SAS
tech@askuria.com