Draft pending review by counsel. This text has not yet been reviewed by a lawyer and may change before it takes effect.
The short version
- We never receive or store your fingerprint or face data. Your phone keeps it.
- We store only a public key. It cannot be turned back into your fingerprint or face, and it cannot sign you in on its own.
- For patients, passkeys are optional. You can sign in with a one-time code instead.
What a passkey is
When you choose "Sign in with fingerprint or face", your phone (or computer) creates a passkey for Veripres. A passkey is a pair of matching keys:
- a private key, which stays on your device, protected by your fingerprint, face or screen lock; and
- a public key, which your device sends to us.
Each time you sign in, your device asks for your fingerprint, face, PIN or pattern. If that check passes, your device uses the private key to answer a one-time challenge from Veripres, and we check the answer with the public key. The check of your fingerprint or face happens on your device. It is never sent to us.
A passkey works only with the real Veripres, so a fake website cannot use it to sign in as you.
What we store
For each passkey, we store:
- the public key;
- an ID for the passkey;
- a name, so you can tell your passkeys apart;
- when it was added and when it was last used; and
- technical details your device shares, such as how it connects and whether the passkey is backed up.
We never receive your fingerprint, your face, a photo of you, or your phone's PIN or pattern. Because your fingerprint and face never leave your device, Veripres does not collect biometric data, which Indian law treats as sensitive.
Your device and your password manager
Your device's own security system stores and checks your fingerprint or face. Your passkey may also be saved in a password manager, such as Google Password Manager or iCloud Keychain, and synced to your other devices. That is between you and the company that provides your device or password manager. Veripres cannot see it.
Do not add a passkey on a device that other people can unlock. Anyone who can unlock that device could sign in to Veripres as you.
Who uses passkeys
- Patients: optional. You can sign in with a passkey, or with a one-time code sent to the mobile number or email address on your account.
- Doctors and pharmacists: required, together with your password. Veripres admin staff must use one too.
How to remove a passkey
- In the Veripres app, go to Profile & security.
- Under Passkeys, choose the one you no longer want and remove it.
Removing it in Veripres stops it working for your account straight away. To delete it from your device as well, remove it in your device's settings or password manager.
If you remove all your passkeys, you can still sign in with a one-time code.
Doctors and pharmacists: ask the Veripres pilot team to remove a passkey. You will be asked to set up a new one the next time you sign in.
If you lose your phone
- Sign in another way. On another phone or computer, sign in with a one-time code. We send it to the mobile number or email address on your account. If it goes to your mobile number, you will need a SIM with that number. Your mobile operator can replace a lost SIM.
- Remove the lost phone's passkey in Profile & security, and sign the lost phone out if it is still signed in.
- Check your access log for anything you do not recognise, and tap "I don't recognise this" if you need to.
- Tell our Grievance Officer at grievance@veripres.example if you think someone has used your account.
Someone who finds your phone cannot use your passkey unless they can also unlock the phone.
Doctors and pharmacists: if you lose the device that holds your passkey, contact the Veripres pilot team straight away, or write to grievance@veripres.example. We will check that it is really you before we help you sign in again.