World ID Photo
Loading...
Please wait a moment while we prepare everything for you.
World ID Photo
Initializing biometric workspace...
Initializing biometric workspace...
Updated October 2026
Your photos belong to you. We do not sell your data, we do not build facial recognition databases, and your processed photos are automatically deleted: 7 days after a paid order, or right after download for free web copies. When you upload a photo, you accept that it is temporarily sent to our AI service to check for unwanted objects such as glasses, jewelry, or head coverings. If you do not agree, you are free to leave the app at any moment.
• Photos you upload or capture: images you provide to be formatted as ID, passport, or visa photos. Camera access runs in your browser; video is not recorded or sent to our servers. • Account and contact data: your email address and sign-in details, used to manage your account, deliver your order, and send order notifications. • Order data: selected formats, products, and, for home delivery, the shipping address you enter at checkout. • Payment data: payments are processed by Stripe. We do not store card numbers or security codes; we receive only order and payment status information. • Partner applications: businesses that apply to become photo-lab partners provide company details and a business license document. • Technical data and cookies: device, browser, and usage information, and preferences stored in your browser (see Cookies below).
Face measurements (head size, position, and framing) in the V3 flow are calculated on your device and are not uploaded. To check for unwanted objects and other compliance items, the photo is temporarily sent to our AI service, a Google Gemini model, which returns a result shown to you on screen. We use your photo only to provide the service you requested: formatting, compliance screening, print sheets, and delivery. We do not use it for identification, facial recognition databases, advertising, or selling to third parties. Results are technical guidance, not a guarantee of acceptance by an issuing authority. Biometric notice: face geometry (landmarks used to measure and frame your photo) is a form of biometric data. We use it only for this purpose, never to identify you, perform mass identity matching, or build recognition or surveillance databases. Our legal basis is your explicit consent, given when you upload a photo (GDPR Art. 9, Illinois BIPA, and similar laws). Face landmarks are transient mathematical coordinates discarded when processing ends; photos follow the retention period in Section 5.
• To perform our contract with you: process photos, fulfil digital and print orders, and provide support. • For legitimate interests: security, fraud prevention, service improvement, and troubleshooting. • To comply with legal obligations such as tax, accounting, and payment rules. • With your consent where required, for example optional analytics or marketing cookies. You can withdraw consent at any time.
We do not sell or rent your personal data. We share it only with service providers that help us run the service, under agreements limiting their use of it: • Stripe, for payment processing. • Google (Firebase / Google Cloud and the Gemini AI service), for authentication, database, hosting, and the AI object and compliance check. • Cloudinary, for temporary storage and processing of images. • Email and notification providers, to send order and account messages. • Photo-lab partners, when you choose pickup or delivery, limited to what they need to fulfil your order. We may also disclose data when required by law or to protect our rights and users.
Paid orders: processed images (single photo, print sheet, and thumbnails) are automatically deleted from our servers 7 days after your order, and you may download each file up to 3 times during that period. We send an email before deletion to let you know it is coming. The deletion date is not extended, so please back up your photos before then if you still have downloads available. Free web-ready photos: deleted right after you download them. Photos temporarily sent for the AI check are used only to produce the result. Order records (such as order ID, amounts, and delivery details) are kept as long as needed for accounting, legal, and dispute purposes. Partner business documents are kept for legal compliance. You can request earlier deletion at any time.
We use necessary cookies and local storage for sign-in, your cart, and session security. Analytics and marketing cookies are optional and only used with your consent. You can change your choice at any time. See our Cookie Policy for details.
Read the Cookie PolicyDepending on where you live (including under GDPR, UK GDPR, and CCPA/CPRA), you may have the right to access, correct, delete, or export your data, to object to or restrict processing, to withdraw consent, and to lodge a complaint with your data protection authority. We do not sell or share personal data for cross-context advertising. To exercise any right, contact us below; we will respond within the period required by law and will not discriminate against you for doing so. Mexican users may exercise ARCO rights (Access, Rectification, Cancellation, Opposition). Requests to delete your photos and records before the automatic deadline are handled within 24–48 hours: send your order ID or email and we will delete all photos and records within 24 hours of confirming it is you. You can also request a copy of your transaction receipts and license records.
We use encryption in transit, access controls, and automatic deletion to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.
Our service is not directed to children under 13 and we do not knowingly collect their data for account purposes. Photos of minors for official documents should be uploaded by a parent or legal guardian, who confirms they have authority to do so.
We may update this policy from time to time. The date at the top shows the latest revision, and we will notify you of material changes where required.
Face geometry (landmarks such as the crown, chin, eye centers, and head tilt) is analyzed only to verify that your photo meets the head-size, eye-line, headroom, lighting, and background requirements of the selected format. We aim to align with the strictest biometric privacy frameworks at once, including Illinois BIPA (740 ILCS 14), Texas CUBI, Washington RCW 19.375, California CPRA sensitive-data rules, GDPR and UK GDPR Art. 9 (EDPB Guidelines 3/2019), Mexico LFPDPPP, Brazil LGPD Art. 11, Canada PIPEDA and Quebec Law 25, the Australian Privacy Principles, Singapore PDPA, and Japan APPI. You receive notice and give explicit consent before your photo is analyzed.
• No facial recognition: we do not create identity vectors to identify who you are. • No database matching: your photo is never compared against police, commercial, or government databases. • No AI training by us: we do not use your photos to train AI models. • No sale or commercial transfer: biometric measurements are never sold, rented, or handed to data brokers or advertisers.
World ID Photo is a private, independent technology tool operated by Viva Villa Productions. We are not a government agency, embassy, or consulate. Final authority to issue travel and identity documents rests solely with the competent government entity.
For privacy questions or to exercise your rights, email support@worldidphoto.com. We respond within 24–48 hours.