ID to Wallet

Privacy policy and support · Last updated 5 October 2026

Support

Questions, problems or requests (including deleting your data): email idtowallet@orxon.co. We usually reply within a few days.

Tips for a clean scan

ID to Wallet makes a personal copy of your document for convenience. It is not an official identity document and is not accepted as one.

Privacy policy

ID to Wallet is made by Orxon LLC ("we"). This policy explains what the app does with your documents. In short: your ID stays on your iPhone, and the only copy that leaves it is encrypted with a key we never receive.

On your iPhone

Photos of your documents and the details read from them (name, numbers, dates and similar) are processed and stored only on your iPhone, in the app's protected storage, encrypted by iOS while your phone is locked and behind Face ID. Text recognition and image clean-up run on the device.

Making a Wallet pass

To create a signed Apple Wallet pass, the app sends the front image and the details you choose to show to our server, which signs the pass and returns it. This data is held in memory only for that request and is not stored or logged.

The page behind the QR code

The pass's QR code opens a page showing both sides of your document and its details. Before uploading, the app encrypts this card on your iPhone (AES-256-GCM) with a new random key. The key is placed only in the QR link after the "#", a part of a link that browsers never send to a server. We store only the encrypted data, which we cannot read. Anyone who scans the QR code can view your document, so share it as you would the card itself.

The encrypted copy is deleted automatically when the document expires (or after one year if it has no expiry date), when you add the pass again, or when you delete the document in the app.

App verification

To stop others misusing our server, the app proves it is a genuine copy using Apple's App Attest. This involves a device-specific key created by your iPhone; it contains no personal data.

What we don't do

Service providers

Our server runs on Vercel, and the encrypted cards are kept in Vercel Blob storage in the EU (Frankfurt). Apple provides Wallet and App Attest.

Your choices

Delete a document in the app to remove it from your iPhone and delete its encrypted copy from our server. Remove the pass from Apple Wallet at any time. For anything else, email idtowallet@orxon.co.

Children

The app is not directed at children under 13.

Changes

If this policy changes, we'll update this page and its date.