Amie Vouch

Index

• What is Amie Vouch?

• When do I use Vouch?

• How does Vouch work?

• Who is involved in a Vouch interaction?

• What information does Vouch access?

• What happens after the information is shared?

• Age Assurance Methods

  • Age Verification with ID Wallet (Gataca App)

  • Facial Age Estimation

• What if age estimation doesn’t work for me?

• Who controls what gets shared?

• How is my privacy protected?

• What are my responsibilities as a user?

• How is my data secured?

• Where is my data processed?

• Where can I learn more or get help?

What is Amie Vouch?

Amie Vouch is a service that helps you securely prove things about yourself — like your age — when accessing third-party services online.

Vouch acts as a trusted intermediary between you and the service you’re trying to access, so you can authenticate or prove eligibility without sharing more personal information than necessary.

When do I use Vouch?

You use Vouch when you access a website or service that needs to confirm something about you, for example:

• Signing in securely

• Proving you meet a minimum age requirement

• Accessing age-restricted content or services

You’ll be asked to approve what information is shared before anything happens.

How does Vouch work?

1. You try to access a third-party service that uses Vouch.

2. Vouch asks for your permission to respond on your behalf.

3. You see exactly what information is needed and why.

4. You explicitly approve (or reject) the request.

5. Vouch sends only the minimum required response to the third party.

Nothing is shared without your consent.

Who is involved in a Vouch interaction?

There are always three parties:

1. You — the person who decides what to share

2. The service you’re accessing — the one requesting proof (for example, age or contact info)

3. Vouch — the trusted intermediary that securely handles the exchange

Vouch exists to make sure the exchange is:

• Secure

• Privacy-preserving

• Based on your explicit consent

What information does Vouch access?

Only information you explicitly approve can be shared, and only for that specific request. Depending on the situation, Vouch may temporarily access:

• A credential from your wallet (for example, a legal age credential), or

• Specific personal information needed to complete the request

We only request:

• The minimum credentials

• The minimum data

• For the specific purpose you approved

The requesting service never receives more information than it needs.

What happens after the information is shared?

Once Vouch sends the response to the third party:

• All credentials and personal data used for the request are automatically deleted from Gataca systems

• The only thing we keep is proof that you consented to the sharing for compliance reasons (this may include your decentralized identifier)

We do not keep:

• Your credentials

• Your facial images

• Your browsing history

• Your location or IP address

• Your relationship with the third party

Usage and technical logs used to keep the service running smoothly are kept only for a short, limited period and never contain the personal data you shared.

Age Assurance Methods

Vouch can be used to prove your age in two different ways:

Age Verification with ID Wallet (Gataca App)

You may be asked to share a Legal Age Credential (e.g. “over 18”) from your wallet.

• The credential is processed temporarily

• It is not shared with the third party

• The third party only receives a yes/no answer

Facial Age Estimation

Vouch may estimate your age using facial images.

Important to know:

• Images are processed temporarily

• No biometric templates are created

• No facial recognition is used

• Images are not stored or shared

• Images are not linked to your identity

The third party only receives an anonymous authorization result.

What if age estimation doesn’t work for me?

Age estimation is an approximate method and may not work equally well for everyone.

If it fails or rejects you:

• We offer Age Verification as an alternative

• This ensures you can still complete the process

To improve accuracy, Vouch may apply age thresholds slightly above the legal minimum.

Who controls what gets shared?

You do.

• You’re always asked for consent

• You see what will be shared before approving

• You can cancel the process at any time

Vouch cannot share anything without your explicit approval.

How is my privacy protected?

Vouch is built using decentralized identity principles, which means:

• You decide what to share

• Data is exchanged only when needed

• Information isn’t reused for other purposes

• There’s no central user database tracking your activity

We also use anonymous tokens so services can’t trace or correlate your activity across different platforms.

Any personal data processed by Vouch is handled according to our Privacy Policy and applicable data protection laws, including GDPR.

What are my responsibilities as a user?

We ask that you:

• Provide accurate and truthful information

• Use Vouch only for lawful purposes

• Keep your device secure

• Don’t attempt to misuse or bypass the service

Misuse may result in access being suspended.

How is my data secured?

We protect Vouch with strong organizational and technical security measures, including:

• Industry-standard encryption

• Automated processes (no manual handling of your data)

• Continuous security monitoring

• Independent security testing

• ISO 27001-certified security practices

While no online service can guarantee zero risk, security and privacy are core design principles of Vouch.

More details are available in our Trust Center.

Where is my data processed?

• Vouch runs on secure infrastructure located in Europe

• Data is processed in line with GDPR and other applicable privacy laws

• Any service receiving your data is responsible for handling it according to their own privacy practices

Where can I learn more or get help?

• Privacy & data protection: Privacy Policy

• Security practices: Trust Center

• Questions or feedback: [email protected]