Privacy Policy
Last updated August 26, 2026
Who this covers
IDPro24 ("we," "our," "us") operates a digital membership ID card platform used by professional organizations and their members, accessible via the IDPro24 mobile app and the admin console at app.idpro24.com. This policy explains what data we collect, why, and how it's handled — whether you're a member carrying a digital card, an organization administrator managing them, or someone who scans a card's QR code to verify it.
What we collect
What's collected depends on how you interact with IDPro24:
| If you're a member | Full name, email address, profile photo, membership/professional number, profession title, membership status and validity dates, and your account password (stored as a irreversible cryptographic hash — we never store or can see your actual password). |
|---|---|
| If you're an organization admin | Email address, hashed password, and the branding assets you upload for your organization (logo, primary color, institutional signature image). |
| If you scan/verify a card's QR code | Only the timestamp of the scan and the card's public identifier are recorded. We do not collect or request your location for this or any other purpose. |
We don't collect data beyond what's listed above. We don't run advertising, analytics trackers, or any behavioral profiling.
Why we collect it
- To create and display your digital membership card, and let your organization manage it.
- To authenticate you when you log into the app or admin console.
- To let anyone — an employer, a counterpart, a member of the public — verify that a card is genuine and currently active by scanning its QR code.
- To send account-related emails: activation invites, password resets. We don't send marketing email.
Who holds and can see your data
IDPro24 operates the platform and stores your data directly on our own servers — we are not a neutral pass-through between you and your organization, we collect and hold this data ourselves in order to run the service. Within that, your membership data is also visible to administrators of the organization that issued your card, the same as a physical ID card issued by that organization would be recorded by them. It is not visible to other organizations on the platform, and IDPro24 does not sell, rent, or share your personal data with third parties for their own marketing purposes.
We use a small number of service providers to operate IDPro24, each acting under our instruction:
- Cloudinary — stores uploaded photos and organization branding images.
- Resend — delivers account emails (invitations, password resets) on our behalf.
- Hetzner — hosts our servers and database (EU-based infrastructure).
How long we keep it
We keep your data for as long as your account is active with your organization. If an organization removes a member or stops using IDPro24, associated member data is deleted from active use; verification-scan records (timestamp and card identifier only) are kept in aggregate for the organization's own records.
Your rights
You can ask us to access, correct, or delete your personal data, or ask your organization's administrator to do so on your behalf, by writing to contact@idpro24.com. We'll respond within a reasonable time and, where legally required, within 30 days.
Security
All traffic to and from IDPro24 is encrypted (HTTPS/TLS). Passwords are hashed with bcrypt and never stored or logged in plain text. Access to the admin console requires authentication scoped to your own organization's data.
Children
IDPro24 is intended for use by adult members of professional organizations and is not directed at children under 16.
Changes to this policy
If this policy changes materially, we'll update the date above and, where appropriate, notify organization administrators directly.