A trusted human identity and authorization layer, without storing reusable biometric data.
Engineered in
Trust, security and privacy by design.
Most identity products ask you to trust that your biometrics are safe somewhere. biometricQ removes the somewhere. Trust, security and privacy aren't policies here; they're properties of how the system is built.
Trust
Every verification is a fresh, provable event. A person proves they are present, right now, not that a copy of them once matched a record. There is no honour system and no shared secret to leak.
Security
Identity proofs and the data bound to them are sealed with quantum-resistant encryption. Even a full compromise of our systems reveals nothing usable, there is no face, no template, and no key sitting in the open to steal.
Privacy
The face is measured in the moment and immediately discarded. biometricQ keeps an irreversible face key, never an image, never a biometric. What isn't kept can't be subpoenaed, sold, or breached.
The difference
Why biometricQ?
Traditional identity depends on secrets and stored biometrics that can be copied, reused, or breached. biometricQ removes them entirely.
Traditional identity
Secrets you have to protect
Passwords
Stored biometrics
Reusable credentials
Extra Authentication Steps
biometricQ
Nothing to steal in the first place
Live biometric verification
No stored biometrics
No reusable secrets
One Step 2FA Authentication
By eliminating stored biometrics and reusable credentials, biometricQ dramatically reduces the attack surface , while improving both security and user experience.
How it works
How biometricQ works.
A one-way face key is derived from a live face, sealed, and stored, then matched on the fly. No biometric data is ever saved.
1
Generate biometricQ
A one-time process turns the user's live face into a one-way face key. No biometric data is saved at any point.
2
Seal the face key
Every biometricQ verification is cryptographically sealed with a defined scope and expiration time, giving users full control over how and when it can be used.
3
Store one-way face key
The system keeps only the irreversible face key. It can't be reversed back into a biometric.
4
Authenticate on the fly
Access is granted in real time by comparing irreversible face keys, never raw biometrics.
Use cases
One verified face. Every high-stakes decision.
Wherever a moment needs to be tied to a real, present person, biometricQ seals it. No passwords to phish, no bearer tokens to steal, no biometric to breach.
Biometric authentication
Prove a real, present person, not a stolen secret.
Authentication comes down to one question: is the right person here, right now? biometricQ answers it with a living face instead of a credential that can be phished, intercepted, or replayed, and stores nothing that could ever leak.
Passwordless login
Sign in with a living face instead of a password, nothing to guess, reuse, phish, or leak. Every login is a fresh proof that the real person is present, then the face is discarded, leaving only an irreversible face key.
Two-factor that can't be intercepted
Replace one-time codes and push prompts with a live face. There's no SIM to swap, no code to relay, and no notification to fatigue someone into approving, the second factor is the person, right there.
Access control
Open doors, systems and rooms only for the right present person, and log exactly who, and when. Access is bound to a live face, never a badge, swipe card or PIN that can be lent, lost, or lifted.
Biometric encryption
Seal and sign documents with a live face.
A verified face becomes a key that exists only in the moment, so a document stays sealed against everything, even a full system breach, and can only be opened or signed by the right, present person.
Encrypt a file
Lock any file to personal biometrics. Only a live, matching person can ever open it, the biometrics never rests anywhere, on any server or device.
Document exchange
Send a document only one named person can open, sealed to their face before it ever leaves you, and useless to anyone else who intercepts it.
Document signing
Sign the exact bytes of a document with an irreversible face key. Anyone can verify the signature; no one can forge it, and nothing about your biometrics is stored to do so.
Ready when you are
See a live person become verified proof.
Book a demo and we'll walk you through 2FA login, access control, sealed files and signed agreements, on your own terms, with your own scenarios.
Privacy
Privacy policy
Effective 1 August 2026 · Last updated 1 August 2026
biometricQ is built on one idea: your biometrics should never leave your control. Privacy here isn't a policy bolted on top, it's a property of how the system is built.
This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights regarding your information. By using our website, applications, APIs, or services (collectively, the "Services"), you agree to this policy.
1. Face recognition and biometric processing
Because our Services involve biometric processing, we set out here exactly what happens to a facial image.
How a verification works
Your device camera captures an image of your face at the moment of verification.
That image is transmitted over an encrypted connection to a third-party key derivation service, which derives a face key from it.
The face key is a value derived from the image. It is not an image and it is not a stored biometric template.
The image exists only in server memory for the duration of that processing. It is not written to disk, not stored in any database, and not retained after the request completes.
What we do not store
We do not store photographs or video of your face.
We do not store biometric templates, face geometry maps, or biometric identifiers.
We do not build a searchable library of faces.
There is no biometric database to breach, because there is no biometric database.
Consent and alternatives
Face processing takes place only after you agree to it, and only for the purpose for which you provided it. You may withdraw consent at any time by contacting us. If you would prefer not to use face verification, contact the organisation you are dealing with for an alternative.
Third-party key derivation
The key derivation service acts on our instructions and only for the purpose of deriving a face key during your verification. It is contractually restricted from retaining, reusing, or disclosing the image.
2. Information we collect
We collect only the information necessary to provide and improve our Services.
Information you provide: full name, email address, phone number where applicable, encrypted or hashed password, account preferences, and information you voluntarily submit through forms, support requests, or communications.
Information generated through your use: user ID, account settings, authentication events, login timestamps, device identifiers where required for security, the IP address used during authentication, security and error logs, and service usage necessary for operation. These records are used solely for security, reliability, fraud prevention, and providing the Services.
3. Information we do not collect
Government identification numbers
Financial information, unless specifically required by a separate service
Credit card information, unless processed through an integrated payment provider
Sensitive personal information unrelated to providing our Services
4. How we use your information
We use your information only to create and manage your account, authenticate users, provide requested Services, secure your account, respond to support requests, prevent fraud and abuse, maintain system integrity, comply with applicable laws, and communicate important service notices. We do not use your personal information for advertising or profiling.
5. We never sell or share your data
We do not sell, rent, trade, or share your personal information with anyone, for any purpose. No data brokers, no advertisers, no "partners." Ever. We do not build advertising profiles.
6. No tracking, no analytics
We run no third-party analytics, advertising, tracking pixels, or tracking cookies, including Google Analytics, Meta Pixel, Mixpanel, Hotjar and Amplitude. We don't profile you and we don't follow you around the web.
Where we rely on third-party infrastructure providers, for example cloud hosting, biometric key derivation, email delivery, or payment processing, those providers act only on our instructions and only to the extent necessary to provide the service.
7. Cookies
We use only essential cookies and similar technologies required for signing users in, maintaining authenticated sessions, security, preventing fraud, and remembering basic preferences. We do not use advertising or behavioural tracking cookies.
8. Password security
Your password is never stored in plain text. Passwords are securely hashed using industry-standard cryptographic methods before storage. Our staff cannot retrieve your password. If you forget it, it must be reset rather than recovered.
9. Data security
We take reasonable technical and organisational measures to protect your information, including encryption in transit (HTTPS/TLS), secure password hashing, restricted administrative access, firewalls, access controls, security monitoring, regular software updates, and backup procedures. Although we take appropriate measures, no system connected to the Internet can be guaranteed to be completely secure.
10. Data retention
We keep information only for as long as we need it to provide the Services, meet legal obligations, resolve disputes, enforce our agreements, and maintain security records where appropriate. When information is no longer required, it is securely deleted or anonymised where practicable. Facial images are not retained at all, as described in section 1.
11. Your rights
Subject to applicable law, you may access, correct, or update your personal information; request deletion of your account or your personal information where legally permissible; request a copy of your information; withdraw consent where processing is based on consent; and object to certain processing activities. You can ask us to remove your data at any time and we will.
12. Account deletion
Following verification of your request, we will delete or anonymise your personal information unless we are required to retain certain records for legal, security, or regulatory purposes. Some backup copies may remain for a limited period before being permanently removed.
13. Children's privacy
Our Services are not directed to children under the age required by applicable law without appropriate parental or guardian consent. We do not knowingly collect personal information from children in violation of applicable law. If we become aware that such information has been collected, we will take reasonable steps to delete it.
14. International users
If you access our Services from outside the country where our servers are located, your information may be transferred to and processed in that country. By using our Services, you acknowledge this transfer where permitted by law.
15. Legal disclosure
We may disclose personal information only if required to comply with applicable law, respond to valid court orders or lawful government requests, protect our legal rights, prevent fraud or criminal activity, or protect the safety of our users or others. We do not voluntarily disclose personal information beyond these circumstances.
16. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through our website or by email where appropriate. The updated policy becomes effective upon publication unless otherwise stated.
In simple terms
Your face is never stored. It becomes a face key during verification and the image is discarded.
We collect only what's needed to run your account.
We never sell your data or share it for advertising.
We use no third-party analytics or tracking.
You can ask for access, correction, or deletion at any time.
