Privacy Policy for RelayID

Last Updated: October 4, 2025
Effective Date: October 4, 2025

1. Introduction

Refugees United USA (“we,” “us,” or “our”) operates the RelayID mobile application and website at https://relayid.refunite.org/ (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy applies to all users of RelayID.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account with RelayID, we collect:

Email address OR Phone number - Used for account creation and authentication

Biometric Authentication (Optional):

Face ID or other biometric data - If you enable biometric sign-in, this authentication is handled by third-party authentication providers. The biometric data is processed and stored by these providers according to their security standards and is not directly accessed or stored by RelayID. We only receive a confirmation token that authentication was successful.

2.2 Automatically Collected Information

Device Information - We use ua-parser-js to collect device type, operating system, browser type, and version for analytics and support

2.3 Cookies and Tracking Technologies

Our infrastructure providers may use cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

3. How We Use Your Information

We use the information we collect for:

Account Management - Creating and managing your RelayID account
Authentication - Verifying your identity for sign-in
WhatsApp/SMS Integration - Enabling wallet operations and verification through accessible channels
Service Improvement - Analyzing usage patterns to enhance functionality
Technical Support - Responding to inquiries and providing assistance
Security - Protecting against unauthorized access
Aid Distribution - Facilitating humanitarian aid through your self-custodial wallet

4. Purpose of RelayID

RelayID is a decentralized identity system developed by Refugees United USA in collaboration with human.tech that empowers refugees, internally displaced persons, and vulnerable communities.

What RelayID Provides:

Self-Sovereign Digital Identity - Persistent identity without government documents or centralized institutions
Financial Access - Direct access to stablecoin-based aid, donations, and remittances through self-custodial wallets
Privacy-Preserving Technology - Cryptographic tools enabling selective disclosure of identity information
Community-Based Verification - Peer-to-peer validation through trusted community leaders
Transparent Aid Distribution - Blockchain-based tracking ensuring funds reach intended recipients while maintaining privacy

How It Works:

RelayID operates through simple, accessible interfaces (WhatsApp, SMS, Face ID) in low-connectivity environments. Community leaders create self-custodial Human Wallets using email or phone, receive and distribute stablecoin-based aid, and coordinate resources - all without traditional infrastructure.

Built on Refunite’s network of 100,000+ community leaders reaching 135 million people across Africa, RelayID enables direct humanitarian aid delivery while protecting user data and dignity.

5. How We Share Your Information

5.1 Service Providers and Infrastructure

We share your email/phone with:

Account Infrastructure Providers - For authentication and account management
Biometric Authentication Providers - Third-party services handling Face ID/fingerprint (they process biometric data; we only receive confirmation tokens)
human.tech Network - Decentralized infrastructure powering cryptographic identity and self-custodial wallets
Blockchain Networks - Your public blockchain address (unlinkable to email/phone) is recorded on Ethereum-based blockchains for transparency

Privacy Protections:

Blockchain address is cryptographically unlinkable to your email/phone
Biometric data processed by third parties, never accessed by RelayID
Human Network derives keys without seeing your original information
Zero-knowledge cryptography minimizes data exposure

5.2 Legal Requirements

We may disclose information if required by law or valid requests by public authorities.

5.3 What We Don’t Do

We do NOT sell your personal information
We do NOT share with advertisers or marketing companies
We do NOT maintain PII beyond authentication needs

6. Data Storage and Security

6.1 Data Location and Architecture

Off-Chain Data:

Database with pseudonymous onboarding invites stored in the European Union
Email/phone stored only for authentication

On-Chain Data:

Public blockchain address and transactions on Ethereum-based blockchains
Records are pseudonymous and unlinkable to your identity
Immutable and transparent by design
No personally identifiable information on blockchain

6.2 Cryptographic Privacy

RelayID uses advanced cryptography:

Key Derivation - Keys derived through collaborative Human Network process without seeing your data
Zero-Knowledge Proofs - Verification without revealing underlying data
Multi-Party Computation - No single party has complete information
Biometric Privacy - Device-based biometrics never leave your device; provider-based biometrics processed per their standards

6.3 Data Access

Only authorized Refugees United USA staff and contractors access off-chain data. Blockchain data is publicly viewable but consists only of pseudonymous addresses unlinkable to identity.

6.4 Security Measures

We implement appropriate technical and organizational security measures. However, no internet transmission or electronic storage is 100% secure.

7. Data Retention

We retain email/phone while your account is active. Upon deletion, we remove authentication credentials from active systems.

Pseudonymous usage data may be retained for analytics to improve the Service.

Note: Blockchain transaction records are permanent due to blockchain immutability, but contain only pseudonymous addresses unlinkable to your identity.

8. Your Rights and Choices

Depending on your location, you may have rights including:

Access - Request a copy of your personal information
Correction - Request correction of inaccurate information
Deletion - Request deletion of your account and off-chain data
Objection - Object to certain processing
Portability - Request data transfer to another service

Important: Off-chain data can be deleted, but blockchain records are permanent (though pseudonymous and unlinkable to you).

9. Children’s Privacy

RelayID has no age restrictions but protects all users’ privacy, including minors. Parents/guardians concerned about children’s data should contact us.

10. International Data Transfers

If accessing from outside the EU, your information may be transferred to and processed in the EU where our database is located. By using the Service, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes are effective when posted. We encourage periodic review.

12. Third-Party Services and Blockchain Transparency

12.1 Third-Party Links

Our Service may link to third-party sites. We recommend reviewing their privacy policies. We’re not responsible for their practices.

12.2 Public Blockchain Disclosure

Important: RelayID uses public blockchain technology (Ethereum-based networks):

Your wallet’s public address and transaction history are visible on public blockchain explorers
Anyone can view transactions associated with your blockchain address
However, your blockchain address is cryptographically unlinkable to your email, phone, or real-world identity
No personally identifiable information is recorded on blockchain

Public blockchains provide transparency and immutability essential for humanitarian aid accountability. Your privacy is protected through pseudonymity and cryptographic separation.

12.3 Stablecoin Transactions

Stablecoin transactions (USDC/USDT):

Recorded on public blockchains for transparency
Viewable by anyone using your public wallet address
Cannot be linked to your personal identity by third parties
Provide proof of aid distribution for donor accountability

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

Refugees United USA

Email: gb@refunite.org

Address:
Refugees United Foundation USA
548 Market St
San Francisco, CA 94194-5401

Website: https://relayid.refunite.org/

14. Legal Basis for Processing (GDPR)

If you’re an EEA resident, we process your personal information based on:

Consent - You’ve given permission for specific purposes
Legitimate Interests - Processing necessary for our interests (improving Service, facilitating humanitarian aid) without overriding your rights
Legal Obligation - Processing necessary to comply with law

You may withdraw consent anytime by deleting your account or contacting us.

15. California Privacy Rights (CCPA)

California residents have specific rights:

Right to know what personal information we collect, use, disclose, and sell
Right to request deletion (note: blockchain records cannot be deleted)
Right to opt-out of data sales (Note: We do NOT sell personal information)
Right to non-discrimination for exercising CCPA rights

16. Data Protection Officer

For data protection and privacy questions:

Email: gb@refunite.org

For Users

By using RelayID, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

Version: 1.0
Document ID: RelayID-Privacy-Policy-2025