Terms and Conditions

These general terms of use (the “terms of use”) apply to the use of the Yivi app and its services. These terms of use constitute the agreement between you as the user of the Yivi app and Yivi B.V. (“Yivi”), the entity operating the Yivi app and responsible for offering the service. The publisher, Stichting Privacy by Design, under whose name the Yivi app is listed in various app marketplaces, is not a party to the agreement and bears no liability or responsibility for the operation or content of the Yivi app.

Upon your first use of the Yivi app, you must agree to these terms of use before you can proceed. If you (at any time) do not agree to the general terms of use, refrain from installing and using the Yivi app. As long as you use the Yivi app, these terms (including amendments) remain applicable.

Yivi app: (mobile) application offered by Yivi, allowing the user to retrieve attributes from Issuers. These attributes are securely and confidentially stored on the mobile device and can then be shared with parties that use Yivi to request such attributes.

Attributes: a small piece of data typically containing a statement about the attribute owner (e.g., ‘> 18 years old’). Examples of attributes include your bank account number, name, home address, email address, mobile number, or Citizen Service Number (BSN).

Issuer: an entity that issues attributes.

Verifier: a party that wants to verify someone’s attributes in order to provide a service or product to the user.

Yivi B.V.: legally registered in Utrecht, listed with the Dutch Chamber of Commerce under number 94861412.

Yivi is an app you can install on your mobile phone. You can think of Yivi as a digital wallet for your personal data—also known as an identity wallet. With your data in Yivi, you can log in to organizations or prove who you are. You share only the data necessary: for instance, prove you’re over 18 without revealing your date of birth or show that you live in a specific neighborhood without disclosing your exact address. As a user, Yivi lets you decide which data to share from your wallet and with whom. The Yivi app is available via the Apple App Store, Google Play Store, and F-Droid App Store. You can also digitally sign documents with Yivi, using only the relevant characteristics—like a digital stamp. You can, for example, sign as a doctor, as a citizen using your BSN, or from another role.

Yivi operates on a decentralized model. This means that you, the user, retrieve attributes in your own Yivi app from an Issuer and then share data with a Verifier. The retrieved attributes are stored only on your phone and can only be accessed and shared through your Yivi app. No one else can see from which Issuer you retrieved attributes or with whom you shared them. Nor can they see which attributes were retrieved or shared. The entire system is based on privacy by design.

You can use Yivi for things like: logging in, verifying certain personal information (e.g., age or place of residence), auto-filling forms, and signing documents.

Yivi runs on open source software, making everything it does and how it handles your data fully transparent.

Yivi is a ‘partially open system’. Anyone can become a Verifier and request your data through Yivi. Yivi cannot restrict which parties act as Verifiers in the Yivi system and does not oversee them. It is therefore always your responsibility to verify with whom you are sharing your data and whether you want to share it.

Not everyone can become an Issuer. Joining the system as an Issuer only occurs through an agreement with Yivi describing which data the Issuer issues. Retrieving data from an Issuer is a transaction between you and the Issuer. Whether you are permitted to request the data and whether it is correct is a matter between you and the Issuer. Yivi plays no role in this.

The attributes you retrieve via the Yivi app from Issuers are stored only on your phone and encrypted so they can only be accessed and shared via the Yivi app on that phone. This has the following consequences if you lose your phone, reset it, switch to a new phone, or forget your PIN: – If your phone is lost or stolen, the app remains protected by the PIN. If you added an email address in the app, you can block the app remotely to prevent unauthorized access. – If you start using a new phone, reset your current one entirely, or reset everything from the app settings, you’ll need to activate the app again. All your attributes will be lost and must be re-retrieved from the Issuers. – If you forget your PIN, you will lose access to the attributes. You must reinstall and activate the app, and re-collect the attributes from the Issuers.

Downloading and using the Yivi app is free of charge for users.

In many cases, retrieving attributes from Issuers is also free. However, some Issuers may charge for issuing information. This is at the Issuer’s discretion.

The attributes you collect in the Yivi app are stored only in the app on your own phone (or tablet) and are not stored elsewhere by Yivi. They are not stored in the cloud or centrally in Yivi’s systems or those of any third party.

When using Yivi to retrieve data from an Issuer or share it with a Verifier, the Yivi app communicates directly with their systems. Yivi cannot see what data you retrieve or share, nor which Issuer or Verifier you interacted with.

Only when Yivi itself is an Issuer (e.g., for phone number or email address), will Yivi use that data to provide the attribute in the app.

To help users understand their app usage, Yivi receives timestamps from the app that are stored by Yivi. These show when the app was used. Yivi cannot see what was done, where, or who used the app. This information is used solely to help you view your activity or terminate use in case of misuse.

Timestamps are kept as long as data exists in the app. After deleting your data, timestamps remain for 14 days, allowing you to view activity history. After that, they are permanently deleted. If you do not use the app for one year, your data is automatically deleted from Yivi infrastructure.

For proper functioning and transaction security, Yivi hosts a central component: the Keyshare server. It securely stores the user’s PIN and a cryptographic key linked to the user’s phone. Every PIN-related action (e.g., unlocking the app, approving transactions) involves consulting this server.

The Keyshare server is accessed only for PIN verification and is not involved in transactions. Yivi cannot read or access your PIN.

If you provide an email in the app, Yivi stores it. For more details on how your data is handled, refer to the Yivi Privacy Statement (https://yivi.app/privacy/).

When you delete the app, all stored attributes are permanently erased.

All intellectual property rights regarding the Yivi app, including but not limited to copyrights, trademark rights, database rights, and trade name rights, belong to Yivi or its licensors.

Users receive a limited, non-exclusive, non-transferable, and revocable right to use the Yivi app for personal purposes, strictly in accordance with these terms of use.

It is not permitted to (i) use the official Yivi app or parts thereof for commercial or unlawful purposes; (ii) modify or distribute it under the name Yivi; (iii) use it in ways contrary to the open-source license or these terms.

The Yivi app source code is available under an open-source license. Within its terms, you may view, reuse, or adapt the source code (see: https://github.com/privacybydesign/irmamobile/blob/master/LICENSE). However, it is not permitted to offer modified versions under the name ‘Yivi’ or to suggest your version is from or endorsed by Yivi B.V.

You may not use the app in ways that: a. violate laws or regulations; b. harm the app, infrastructure, or users; c. enable unauthorized access to systems/data (e.g., manipulation, spoofing, interception); d. aim to test, probe, or undermine app security/integrity (e.g., scanning, reverse engineering); e. are misleading, fraudulent, or unlawful (e.g., sharing false attributes). Violation entitles Yivi to terminate access and claim damages. Yivi may block or remove accounts or features without prior notice.

Yivi may unilaterally modify or update the terms of use at any time. Changes will be announced in the app within a reasonable period before they take effect. You’ll be informed of material changes in advance. To continue using the app, you must agree to the updated terms. If the terms have changed, you’ll see this upon opening the app. If you disagree, you can no longer use the app.

As a user, you are required to install the latest version (updates) of the app. If you do not agree, your right to use the app will eventually expire.

The Yivi app is provided “as is”, without any express or implied warranties regarding functionality, availability, suitability, accuracy, completeness, or reliability. While we aim to keep it functioning, safe, and available, we cannot guarantee that everything will work flawlessly at all times. Outages or unavailability due to maintenance or external causes may occur. Use is at your own risk.

Yivi does not guarantee the app will always function uninterrupted, error-free, or securely, nor that it is free from viruses, vulnerabilities, or other harmful elements.

Yivi aims for availability but may suspend parts of the app temporarily for maintenance, updates, or other reasons. It is also not liable for disruptions caused by force majeure, third-party failures, or factors beyond its control.

To the extent permitted by law, Yivi excludes all liability for damage of any kind, including direct, indirect, incidental, consequential, or punitive damages, or losses due to profit, data, or reputation, arising from or related to:

• use or inability to use the Yivi app;
• errors or inaccuracies in attributes;
• acts of Issuers or Verifiers;
• unauthorized use of the app or your device;
• or your failure to comply with these terms.

You indemnify Yivi against third-party claims arising from your use of the app in violation of these terms or the law.

This limitation does not apply where exclusion of liability is prohibited by law, such as intentional misconduct or gross negligence by Yivi.

Yivi is not responsible for how third parties (e.g., Verifiers) handle attributes you share. You are responsible for what you share and with whom. Yivi has no control over or responsibility for third-party use, processing, or protection of your data.

If this limitation is found unenforceable in any case, Yivi’s total liability is limited to the minimum amount permitted by law.

If something goes wrong or you are dissatisfied with the app, you may stop using and delete it. No other remedies are available unless legally required.

Yivi reserves the right to modify or terminate the functionality of the Yivi app at any time.

Yivi may decide to stop releasing updates or discontinue the app altogether.

If Yivi decides to discontinue the app, this will be announced in the app 6 months in advance.

These terms of use are governed exclusively by Dutch law.

Except as otherwise stipulated in consumer law, disputes related to these terms or the app will be submitted to the courts in Amsterdam.

Translations of these Dutch terms (e.g., English) may be offered. In case of discrepancies, the Dutch version prevails.

If any provision of these terms is wholly or partially void or invalidated, the remaining provisions remain fully in force. The invalid provision will be replaced by one that most closely reflects the original intent.