1code ID
Privacy Policy
Last updated 26 August 2026
1code ID is a standalone authentication app. Your phone becomes your key: you approve every sign-in with your face or fingerprint, and that biometric never leaves your device. This policy explains, in plain language, what we collect and why.
- Your fingerprint and Face ID is checked by your phone, in secure hardware. 1code never sees, receives or stores it.
- The private key that signs your approvals stays on your device, protected by that biometric. We only ever hold the matching public key.
- We collect the minimum needed to run your account. We don't sell your data, show ads, or embed third-party trackers.
Who we are
1code ID is operated by 1code X (Pty) Ltd, a company registered in South Africa. We are the responsible party for your personal information under South Africa's Protection of Personal Information Act (POPIA). You can reach us any time at support@frontstore.co.za.
What we collect
Your account
An email address, and a username or display name you choose. We use your email to send the one-time codes that sign you in — 1code ID is passwordless, so we never ask for or store a password.
Your device key
When you set up a device, it generates a cryptographic key pair. The private half is created and kept inside your device's secure hardware — the Secure Enclave on iPhone, the Keystore on Android — and is unlocked only by your biometric. Only the public half is sent to us, together with basic device details you can see and name (for example, "iPhone 15") so you can recognise your own devices.
Face ID and fingerprint
Biometric matching happens entirely on your device, performed by its operating system. 1code ID asks the OS "is this the enrolled person?" and receives only yes or no. Your fingerprint and face data are never transmitted to us and never stored on our servers.
Identity verification — only if you use it
If a business asks you to verify your identity, you can photograph an identity document with your camera. Those images are uploaded so the verification can be completed, and are handled only for that purpose. If you never go through a verification flow, we never collect this.
Your recovery circle
1code ID lets you designate other 1code ID users as key holders who can help you recover your account if you lose your phone. We store these connections so recovery works. This uses only people you explicitly add inside the app — 1code ID does not read your phone's address book.
Security and activity
We keep a record of sign-ins and sensitive actions on your account — for example, adding a device or approving access to a business — so you can review them and so we can detect fraud and abuse.
How we use your camera
The camera is used for two things only: scanning QR codes to pair a device or approve a sign-in, and — if you choose to verify your identity — photographing an ID document. It is never used in the background.
What we share
When you sign in to a business that uses 1code ID, you approve exactly what is released — typically a stable identifier and only the specific details you consent to on that screen. Nothing is shared until you approve it with your biometric. Beyond that:
- We do not sell your personal information.
- We do not show advertising, and the app embeds no third-party analytics or tracking.
- We rely on a small number of infrastructure providers — for example, to deliver email and host the service — who process data only on our instructions.
- We may disclose information where the law requires it.
How long we keep it
We keep your account information for as long as your account is active. Security logs are kept for a limited period for fraud prevention. Identity-verification images are kept only as long as needed to complete the verification and to meet any legal record-keeping obligation, then removed.
Your rights
Under POPIA you can ask to see the personal information we hold about you, correct it, or have it deleted. To delete your account and its associated data, email support@frontstore.co.za from your account email and we will action it. You can also remove 1code ID from your device at any time.
Children
1code ID is not intended for children under 18, and we do not knowingly collect their information.
Changes to this policy
If we change this policy we will update the date above and, for significant changes, let you know in the app.
Contact us
Questions about your privacy? Email support@frontstore.co.za and we'll help. Postal enquiries can be addressed to 1code X (Pty) Ltd, South Africa.