Privacy Policy

GuyID Inc. — Ottawa, Canada·Last updated: July 20, 2026·Canadian privacy practices

Our privacy commitment

Government-ID images are processed by Didit. GuyID does not store the raw images in its own database or storage. GuyID does not sell personal data. Numeric trust scores are internal — only tier names are shown publicly. Voice vouch recordings are controlled by the voucher. Product analytics use pseudonymous session identifiers; infrastructure providers may process network addresses in operational and security logs.

1. Who we are

GuyID Inc. ("GuyID", "we", "us", or "our") is a Canadian corporation headquartered in Ottawa, Ontario, Canada. GuyID operates a trust verification platform that enables users to build and share trust evidence profiles for dating and personal safety. This Privacy Policy applies to users of guyid.com and its associated services. GuyID is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies and to other applicable Canadian privacy laws.

2. Data we collect

We collect the following types of information when you use GuyID: Account information: Full name, username, email address, date of birth, gender (optional), city and province/state (optional). Password authentication is handled by Supabase Auth; GuyID does not store plaintext passwords. Profile information: Profile photo, social media connections you choose to add, height (optional), and extended profile fields you choose to provide. Verification data retained by GuyID: Verification status, verification type (basic or enhanced), verification date, and the provider session reference while verification is pending. Didit may process a government ID, selfie, liveness result, age signal, device or connection data, and facial-match information as part of the selected workflow. GuyID does not store raw government-ID images or the provider's raw verification payload in its own database or storage. After a final decision is recorded, GuyID requests deletion of the Didit verification session. Vouch data: Text vouches, voice vouch audio recordings, voucher name, relationship type, duration of relationship, character traits, and superpower selections. Profile view analytics: View counts, session-level activity such as section visibility and scroll depth, device type, and referral source. The GuyID product database uses pseudonymous session identifiers rather than raw viewer IP addresses. Infrastructure providers may process network addresses in their operational and security logs under their own policies. Subscription data: Subscription status, billing period, and Stripe customer ID. Full payment details are processed by Stripe; GuyID does not receive or store your full credit card number. Usage data: Operational log data, device information, browser type, and interactions with the service.

3. Voice vouch recordings

GuyID allows users to submit voice vouch recordings (5–60 seconds) as part of the vouch process. These recordings are: • Stored in encrypted cloud storage (Supabase Storage) with public read access for playback on trust profiles • Only playable on Premium subscribers' public profiles — free users' voice vouches are stored but locked from public playback • Controlled by the voucher — they can re-record or remove their voice note before submitting • Retained as long as the associated vouch is active on the platform • Deleted when the vouch is deleted or the vouchee's account is closed Voice vouches are voluntary. Vouchers are informed that their recording will be associated with their vouch and may be played on the vouchee's public profile.

4. Profile view tracking

When someone views a public trust profile (guyid.com/u/username), GuyID may collect profile-view analytics to help the profile owner understand engagement: For viewers: • A page-view event is associated with a pseudonymous session identifier • Heartbeat events may be used while the tab is active to estimate view duration • Section visibility and scroll depth may be recorded • Device category and referral source may be recorded GuyID does not use these events for cross-site advertising or device fingerprinting. The GuyID analytics tables are designed not to retain raw viewer IP addresses, although infrastructure and security providers may process network addresses in their operational logs. Self-views are intended to be excluded. If a registered GuyID user views a profile, account information may be visible to the profile owner where the product clearly discloses that behavior. Visitors who are not signed in are represented through limited location context, when available, and a pseudonymous session identifier.

5. Trust Directory

GuyID operates a public Trust Directory (guyid.com/discover) that lists verified user profiles. By creating a GuyID account and meeting minimum listing criteria (profile photo uploaded, minimum trust tier achieved), your profile may appear in the Trust Directory. Information displayed in the Trust Directory includes: display name, age, city, trust tier (not numeric scores), profile photo, verification status, vouch count, and voice vouch indicator. Numeric trust scores are internal to GuyID and are never displayed publicly — only tier names (Starter, Builder, Trusted, Elite) are shown. You can control your visibility by adjusting your profile settings or removing your profile photo, which will de-list you from the directory.

6. How we use your data

We use your information to: • Provide and maintain the GuyID service, including your public trust profile • Process identity verification requests through our verification partner (Didit) • Display your trust credential at guyid.com/u/[username] • Enable vouch and voice vouch features • Provide profile view analytics to profile owners • List your profile in the Trust Directory • Process Premium subscription payments through Stripe • Send service-related emails (verification confirmations, vouch notifications, account updates) • Improve our service through aggregated, anonymized analytics • Prevent fraud, abuse, and security threats • Comply with legal obligations under PIPEDA and applicable law

7. Verification handling

Identity verification is processed through Didit. GuyID currently offers two workflows: Basic verification (free): A government-ID check that confirms selected identity signals. Enhanced verification (Premium): May include government ID, liveness, age, device or connection analysis, and facial matching, depending on the configured workflow. In both cases: • Didit processes the verification inputs under its privacy terms and GuyID's configured workflow • GuyID does not store raw government-ID images or the provider's raw verification payload in its own database or storage • GuyID records the final verification decision, verification type, and timestamp • After a final decision is safely recorded, GuyID requests deletion of the Didit verification session • Verification confirms selected identity signals; it is not a background check and does not guarantee safety, character, or intent Provider-side processing and retention after that request remain subject to Didit's configured retention settings and applicable legal obligations described in its terms.

8. Cookies and analytics

We use cookies and similar technologies to: • Maintain your login session (Supabase auth tokens) • Remember your preferences • Track profile view analytics (session-level, not cross-site) • Provide Cloudflare Turnstile bot protection on the vouch form We do not use third-party advertising cookies. We do not sell data to advertisers. You can control cookies through your browser settings, though disabling them may limit your ability to use authenticated features.

9. Third-party services

GuyID integrates with the following third-party services: • Supabase: Database, authentication, and cloud storage • Stripe: Payment processing for Premium subscriptions • Didit: Identity verification processing; GuyID requests session deletion after a final decision is recorded • Cloudflare: CDN, DNS, security, analytics, and Turnstile bot protection • Netlify: Static site hosting and deployment • Google and other configured OAuth providers: Optional sign-in or account linking These providers may process data in multiple jurisdictions and each service has its own privacy policy. By linking a social account, you authorize GuyID to access the account data described in the provider consent screen and permitted by your settings.

10. Data sharing

We do NOT sell your personal data to third parties. Ever. We may share your information only in the following circumstances: • With your consent: When you explicitly authorize data sharing • Service providers: Third-party vendors who help us operate our service (under strict confidentiality agreements and data processing agreements) • Legal requirements: When required by law, court order, or government request under Canadian law • Business transfers: In the event of a merger, acquisition, or sale of assets (users will be notified in advance) • Public profile data: Information you choose to make public on your trust profile and Trust Directory listing

11. Public profile visibility

Your GuyID trust profile is publicly accessible at guyid.com/u/[username]. Public information includes: • Display name and username • Profile photo • Age (if provided) • City and province/state (if provided) • Trust tier (Starter, Builder, Trusted, or Elite) — numeric scores are never shown publicly • Verification status and verification type badges • Approved vouches (text and voice — voice playback requires Premium) • Connected social platform indicators Private profile reports and reporter contact details are not included in public profile data. You can control what other information is displayed through your profile settings and privacy controls in your dashboard.

12. Premium subscription data

Premium subscribers ($12.99/month) have additional data processed: • Stripe processes and stores all payment information — GuyID only stores your Stripe customer ID and subscription status • Premium analytics data (detailed viewer information) is generated from the same anonymous tracking data collected for all profiles, but surfaced with more detail to Premium subscribers • Voice vouch audio playback is unlocked on your public profile • Enhanced verification data (liveness, age, IP) is processed through Didit When you cancel Premium, your subscription remains active until the end of the billing period. After expiration, Premium-only features are deactivated but your trust profile, vouches, and earned tier remain.

13. Data retention and deletion

We retain personal data while it is needed to provide the service, meet security or fraud-prevention needs, or satisfy legal obligations. Current retention rules: • Account and profile data: Retained while your account is active • Verification decision: May be retained after account deletion where needed for fraud prevention or legal obligations • Government-ID images and raw provider payloads: Not stored in GuyID's own database or storage; GuyID requests deletion of the Didit session after a final decision • Vouches and voice recordings: Retained while the associated account and vouch remain active, subject to deletion workflows • Profile-view analytics: Event-level data is intended to be retained for up to 90 days; aggregated, de-identified statistics may be retained longer • Subscription and transaction records: Retained as required for accounting, tax, dispute, and legal obligations You may request deletion of your account and associated data by emailing ceo@guyid.com. GuyID aims to process verified deletion requests within 30 days, subject to security, fraud-prevention, billing, and legal retention requirements.

14. Facebook data deletion instructions

According to Meta Platform terms, GuyID provides the following instructions for users who wish to disconnect the application: 1. Go to your Facebook Account's "Settings & Privacy" and click "Settings". 2. Navigate to "Apps and Websites" in the left-hand menu. 3. Locate "GuyID" in the list of active apps. 4. Click "Remove" to disconnect the application. You may also request deletion of GuyID account or stored social-connection data by emailing ceo@guyid.com with the subject line "Data Deletion Request". GuyID aims to complete verified requests within 30 days, subject to security, billing, fraud-prevention, and legal retention requirements. For detailed instructions, visit: guyid.com/facebook-data-deletion-instructions

15. Security measures

GuyID uses layered safeguards appropriate to the service and the sensitivity of the data, including: • Encryption in transit and at rest provided by GuyID's infrastructure providers • Password authentication and hashing handled by Supabase Auth • Payment-card processing handled by Stripe • Cloudflare network, DDoS, and web-application protections • Row-Level Security on reviewed Supabase product tables, with sensitive writes routed through server-side functions • Turnstile and rate limiting on selected public or abuse-sensitive flows • Pseudonymous session identifiers in the GuyID analytics database • Secret scanning, dependency review, and focused security testing • Provider-session deletion requests after final identity-verification decisions No method of storage or transmission is completely secure. Safeguards and provider configurations are reviewed as the product changes.

16. Your privacy rights (PIPEDA)

Depending on the law that applies and the circumstances of the request, you may ask GuyID to: • Explain whether GuyID holds personal information about you and how it is used or disclosed • Provide access to personal information GuyID holds about you • Correct inaccurate or incomplete information • Withdraw consent for optional processing, subject to legal or contractual limits • Delete or de-identify information that is no longer required, subject to security, fraud-prevention, billing, and legal retention requirements • Provide information about how to challenge GuyID's privacy practices You may also contact the Office of the Privacy Commissioner of Canada or another applicable regulator. To make a request, contact ceo@guyid.com. GuyID may need to verify your identity before responding.

17. Children's privacy

GuyID is not intended for users under 18 years of age. We do not knowingly collect personal information from children. Our identity verification process includes age confirmation. If we become aware that a user is under 18, we will immediately delete their account and all associated data. If you believe a minor has created an account, please contact us at ceo@guyid.com.

18. International data transfers

GuyID and its service providers may process information in Canada, the United States, and other jurisdictions where those providers operate. Data processed in another jurisdiction may be subject to that jurisdiction's laws and lawful-access requirements. GuyID reviews provider safeguards and limits the information shared to what is needed for the service. Contact ceo@guyid.com if you need more information about a specific provider or processing location.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on our platform. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of GuyID after changes constitutes acceptance of the updated policy. Previous versions of this policy are available upon request.

20. Contact us

If you have questions or requests about this Privacy Policy or GuyID's data practices, contact: GuyID Inc. Ottawa, Ontario, Canada Email: ceo@guyid.com GuyID may ask for information needed to verify and process a privacy request. You may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.