Gataca Attest
Index
What is Gataca Attest?
Gataca Attest is a service that lets you obtain verified digital credentials about your identity — such as your age, identity document, email, or phone number — and use them online in a secure and privacy-friendly way.
These credentials can be stored in a digital wallet and shared with third parties when you need to prove something about yourself, without oversharing unnecessary data.
What kind of credentials can I get?
With Attest, you may request credentials such as:
Legal Age Credential Proves that you are above a certain age without revealing your date of birth.
Verified Identity Document Credential Confirms details from an official identity document.
Email Credential Verifies ownership of an email address.
Phone Credential Verifies ownership of a phone number.
Each credential is issued only after the required information has been verified.
How does Attest work?
You request a credential.
You provide the information needed to verify it.
Once verified, the credential is issued to you.
You store it in a compatible digital wallet (such as the Gataca Wallet).
You decide if, when, and with whom to share it.
Attest is integrated into the Gataca Wallet, but it can also work with other compatible wallets.
How does identity verification work?
When you request certain credentials (like a verified ID or age proof), Attest needs to confirm that you are who you say you are.
This happens through a secure, automated identity verification process that may include:
Scanning an official identity document
Taking a selfie or short video (liveness check)
Matching the document with the person completing the process
This helps ensure credentials are issued to the right person and cannot be forged or reused by others.
Once verification is complete:
Attest creates one or more Verifiable Credentials, such as:
Verifiable ID
Age Over 14 / 16 / 18 / 21
These credentials are:
Digitally signed
Tamper-resistant
Sent directly to your identity wallet
From that point on, only you can access and use them.
Who controls my credentials?
You do.
You choose when to share a credential.
You can stop using it at any time.
You can delete it from your wallet.
You can request updates if information changes.
Credentials have an expiration date, so you may need to renew them to keep using them.
Where are my credentials stored?
Your credentials are stored:
On your mobile device, inside your identity wallet
Under your control — no one else can access them without your consent
Some supporting data may be securely retained by Attest for compliance and verification purposes, but credentials themselves are not accessible to Gataca or third parties once issued.
Will all services accept my credentials?
Not necessarily.
Each third-party service decides whether to accept a credential and what requirements it must meet. Having a credential issued does not automatically guarantee it will be accepted everywhere.
When can a credential be suspended or revoked?
A credential may be suspended or revoked if, for example:
It was issued based on incorrect or outdated information
It is used unlawfully or fraudulently
The law requires it
Security risks are detected
Technical or standards updates require reissuance
If possible, we’ll notify you and explain next steps.
What data is involved?
To issue a credential, Attest processes the minimum personal data necessary for verification.
For some credentials (such as identity or age), this may include:
Scanning an official identity document
Performing a liveness check
Your data is processed in line with our Privacy Policy. Deleting a credential from your wallet removes it from your device, but you may need to contact us to request deletion from Attest systems.
Why does Attest use biometric data?
Biometric data (such as a selfie or facial scan) is used only to:
Confirm that the person holding the identity document is its rightful owner
Prevent identity fraud and impersonation
Biometric data is not used for profiling, tracking, or surveillance.
What happens to my data over time?
Different types of data are handled differently:
Credentials Stored in your wallet. You control them.
Verification evidence Stored securely for a limited time to justify why a credential was issued.
Request data Used only to complete the issuance process.
You can request data deletion or exercise your privacy rights at any time.
Where is my data processed?
If you’re in Europe: your data stays in Europe
If you’re outside Europe: your data is processed on secure servers located in Europe
What should I be careful about as a user?
Make sure the information you provide is accurate and up to date
Use credentials only for lawful purposes
Protect your device and wallet access
Review credentials and request corrections if needed
Where can I learn more or get help?
Privacy & data protection: Privacy Policy
Security practices: Trust Center
Questions or support: [email protected] or [email protected]
Last updated