1. Introduction

Congowetu Identity (“Congowetu”, “we”, “our”, or “us”) is a national digital identity platform designed to provide secure identification and digital services for citizens and members of the diaspora of the Democratic Republic of the Congo. This Privacy Policy explains how we collect, use, process, and protect personal data when individuals register for and use Congowetu Identity services.

2. Information We Collect

2.1 Personal Identification Data

Full legal name
Date of birth
Place of birth
Gender
Nationality
Residential address
Phone number
Email address

2.2 Identity Documentation

Passport or national ID numbers
Driver's license information
Birth certificate data

2.3 Biometric Data

To prevent identity fraud and duplication we may collect biometric identifiers such as:

Facial image
Fingerprint templates
Biometric verification data

Biometric data is stored securely and encrypted.

2.4 Technical Data

IP address
Device information
Browser information
Login timestamps

2.5 Payment Information

If a registration fee is required, payments are processed through Stripe or other authorized payment processors. Congowetu does not store full credit card numbers.

3. How We Use Your Information

Register and verify your identity
Prevent duplicate or fraudulent identities
Issue your Congowetu Digital Identity
Provide authentication services
Enable access to government and partner services
Communicate important account information

4. Data Sharing

We may share identity data with:

Government agencies authorized by law
Financial institutions for identity verification
Telecommunications providers for SIM registration
Public service providers requiring digital identity authentication

All data sharing is performed in accordance with applicable law.

5. Data Security

Congowetu applies strong security measures including:

End-to-end encryption
Hardware security modules (HSM)
Secure biometric storage
Multi-factor authentication
Continuous monitoring and fraud detection

6. Data Retention

Personal identity data is retained as long as necessary for:

National identity registry purposes
Legal and regulatory compliance
Security and fraud prevention

Certain records may be retained permanently as part of the national civil registry.

7. Your Rights

Users may have the right to:

Access their personal data
Correct inaccurate information
Request data updates
View identity usage logs

Requests may be submitted through the Congowetu Identity portal.

8. International Users (Diaspora)

Citizens living outside the Democratic Republic of the Congo may register through the diaspora registration system. Data transfers across borders are protected using secure encryption and legal safeguards.

9. Changes to This Policy

Congowetu may update this Privacy Policy from time to time. Users will be notified of significant changes.

10. Contact

For privacy inquiries:

Congowetu Identity Authority

Email: privacy@congowetu.cd

Website: www.congowetu.cd

Citizen Data Consent Agreement

1. Purpose

This Citizen Data Consent Agreement explains how individuals provide consent for the collection, processing, and use of personal data when registering for the Congowetu Digital Identity system. By registering for Congowetu Identity, you acknowledge and consent to the processing of your personal information as described in this agreement.

2. Data Collected With Your Consent

Personal Identification Data

Full name, date of birth, place of birth
Gender, nationality, residential address

Contact Information

Phone number
Email address

Identity Documents

Passport, national identity card, birth certificate

Biometric Data

Facial image, fingerprint template, biometric verification identifiers

3. Purpose of Data Processing

Registering and verifying your Congowetu Identity
Preventing duplicate or fraudulent identities
Issuing a digital identity credential
Enabling access to public and private services

4. Data Sharing With Trusted Entities

With your consent, Congowetu Identity may share verified identity data with authorized organizations including government agencies, banks, telecommunications providers, and public service providers. Data sharing is restricted to verified entities and governed by strict security controls.

5. Withdrawal of Consent

You may request to withdraw consent for certain types of data processing, except where retention is required for legal or national identity registry purposes.

6. Consent Confirmation

By clicking "I Agree" during registration, you confirm that:

You understand how your personal data will be used
You voluntarily provide your data
The information provided is accurate

Biometric Data Protection Policy

1. Introduction

Biometric data is a sensitive category of personal data used to uniquely identify individuals. This policy defines how biometric information collected by Congowetu Identity is protected and managed.

2. Types of Biometric Data Collected

Facial recognition templates
Fingerprint templates
Biometric verification scores

Raw biometric images may be converted into encrypted biometric templates before storage.

3. Biometric Encryption

All biometric data is protected using:

End-to-end encryption
Biometric hashing
Hardware security modules (HSM)
Secure key management systems

Biometric templates cannot be reverse engineered into original images.

4. Biometric Storage

Biometric data is stored in secure infrastructure within the national identity system and separated from general personal identity data. Access is restricted to authorized services and monitored continuously.

5. Biometric Use

Biometric data may be used for identity verification, fraud detection, and duplicate identity prevention. Biometric data is never sold or shared with unauthorized parties.

6. Data Retention

Biometric templates may be retained for the lifetime of the identity record to ensure long-term uniqueness and security of the national identity system.