Security & Privacy
Token Safety
How do I export and use my private key?
Before exporting your private key, it’s important to understand what it is and how it works.
A private key is an alphanumeric code used to authorize transactions and prove ownership of a blockchain asset, mainly blockchain wallets. In simpler terms, a private key is like the master password to your cryptocurrency account —it’s what gives you control over your funds.
Your cryptocurrency itself is always stored on the blockchain, not within a wallet app. Instead, the wallet on your phone securely holds your private key, which allows you to manage your funds.
- 🔑 Think of it as the key to a safe: whoever has the private key can access the assets inside.
- 🔐 The private key represents the ownership of the wallet and should always be kept private. Sharing the private key means allowing anyone else to control your wallet.
- 💡 It’s different from a public key – your wallet address is also called a public key (you can share it to receive blockchain assets, like cryptocurrency), while the private key is your PIN (only you should have it).
- ⚠️ If you lose your private key, you lose access to your funds forever! There’s no "forgot password" option with self-custodial crypto wallets. Just like if you lose the key to your safe, you won’t be able to access the assets inside. As crypto wallets are secured by the latest cryptography, there won’t be a keysmith to help you out.
You can export your private key to your World Wallet. We recommend only exporting your private key if you fully understand what you are doing.
-
What are the uses of a private key?
1. Access Your Public Wallet
If you lose access to your World App account, your private key can help you regain access to the funds in your public wallet address, but not to your World App account. What you can do: Access your public wallet address and manage your funds. What you won’t be able to do: Access a World App account or World App features like Mini Apps. Some wallets allow you to import a wallet using the private key.
Example:
In MetaMask or Trust Wallet, you can go to Import Wallet, enter your private key, and gain access to a wallet. However, after importing the private key, you will see an EOA (Externally Owned Account) address—this is not your World App address. This additional step was taken for extra security.The EOA address is generated by your World App, but it is not where your funds are stored. To access and manage your funds, you must link your MetaMask wallet to a Safe UI wallet. For step-by-step instructions, see the Frequently Asked Questions section at the end of this article.
2. Sign Transactions
When you send crypto, your private key is used to digitally sign the transaction. This proves that you own the funds and authorizes the transfer.
You don’t manually enter your private key—your wallet application does this in the background.
3. Connect to Decentralized Apps (DApps)
Some platforms allow you to sign in using your wallet address and require signing by your private key. Please make sure that the DApp in question uses a public-private key pair to authenticate you without exposing your private key.
Use your private key only when necessary (like wallet recovery), and keep it offline to protect your assets.
Follow the instructions described below to find and export your private key.
-
Where do I find my private key in World App?
- Tap the Gear icon (⚙️) at the top of the screen to access the Settings menu
- Select Privacy & Legal (iOS) or Privacy (Android).
- Open Private Key
-
How can I unlock and export my private key?
Once you perform the steps listed above to find its location, proceed as follows:
- To initiate the unlocking process, tap Unlock private key
- Once you read and acknowledge the risk warnings, select the Understood button
- Follow the prompts to confirm your request to unlock the key
- Once confirmed, an unlocking period will begin
- A countdown timer will show you the time left to unlock the key
- This period is set to prevent potential attackers from stealing your private key
- When the private key is unlocked, it will be available for display for 72 hours
- You’ll see the options to either copy or reveal the key. Select your desired action
After 72 hours have passed, the key will be locked again. If needed, a new unlocking process must be performed.
REMEMBER: Any action involving your private key is risky. Never share it with anyone, or you could lose your wallet funds to theft. World App Support will never ask you for your private key.
-
Frequently Asked Questions
1. Why is there an unlocking period for my private key?
The unlocking period is set as a security feature, not a limitation. If someone steals your phone or gains access to your account, they cannot immediately export your private key and drain your wallet. This period is fixed and cannot be shortened or bypassed by anyone, including our Support team.
2. Can I access my private key even if some features are blocked in my World App?
Yes, you can tap the Export Private Key option as shown in this example:
3. How can I keep my private key safe?
The best way to keep your private key safe is to never export it.
Since there is only one private key linked to your account, it is essential to store it securely. Losing it may mean losing access to your funds permanently.
To prevent this, we recommend:
Never sharing your private key with anyone. Storing it in a safe place, such as a secure password manager or offline storage. Using a trusted and secure cryptowallet that protects your private key.
By keeping your private key safe, you ensure that only you have control over your cryptocurrency.
4. Can I generate a new private key?
No. only one private key exists per account.
5. How do I import my private key into a wallet?
Below is an example using MetaMask, but any non-custodial wallet that supports the Ethereum protocol can be used.
Step 1: Import the private key into MetaMask
Copy the private key from World App Go to MetaMask (App or browser extension) Tap on “Account” on the upper part of the screen Choose “Add Account or Hardware Wallet” Press on “Import Account” Paste the World App private key Tap on “Import”
Note: The address shown in MetaMask as imported is the EOA address of your World App, not the World wallet address (where the funds are).
Example:
To gain access to your World wallet address, you’ll need to link MetaMask (or other non-custodial wallet) to Safe. See Step 2 below for more details.
Step 2: Navigate to Safe and link your MetaMaskGo to Safe Tap on “Connect” Select the “WalletConnect” wallet icon Select “MetaMask” Safe will redirect you to MetaMask (or your wallet) to confirm Tap on “Connect” Navigate back to Safe The World wallet address will be shown under Accounts Tap on “World Chain” The World wallet address will show up in Safe
Example:
If you’re having trouble navigating MetaMask or any other external platform, please reach out to their support team here: https://support.metamask.io/
Step 3: Network Fees - Deposit and bridge native ETH to the EOA address
When performing crypto transactions with a non-custodial wallet, users need to hold sufficient native tokens of the blockchain network to cover the network fees needed to perform transactions.
World App sponsors network fees for its users when performing crypto transactions on World Chain. However, once a user imports the private key into another non-custodial wallet, the user will sign transactions through that wallet and World App will no longer sponsor these fees.
To cover the network fees and perform transactions like sending or swapping tokens, users will need to deposit ETH to their EOA address (the one imported into the non-custodial wallet).
To bridge native ETH to World Chain, you can use:
World Chain Superbridge provided by Superbridge, a website-hosted user interface (the "Interface") provided by Blob Engineering Pte. Ltd.: Withdraw ETH to the EOA address on any of the networks presented on Superbridge ( ETH network would be the preferred option).
To bridge native ETH to the EOA address, please follow these actions:
Using the Ethereum network, deposit ETH to the EOA address imported into MetaMask (or other non-custodial wallet) When your ETH reaches your wallet on the ETH network, navigate to https://world-chain.superbridge.app/ Connect your non-custodial wallet (MetaMask) to the World Chain Superbridge World Chain Superbridge will send an authorisation request to your MetaMask wallet; navigate back to MetaMask and approve the wallet connection to Safe Return to World Chain Superbridge and select the networks: From ETH To World Chain Fill in the amount Check the bridge order preview and ensure it corresponds to the amount you’ve chosen Tap on “Review Bridge” Review the bridging details one more time before tapping on “Continue” Acknowledge that the receiving wallet address (your imported EOA) supports World Chain Start the bridge
Example:
IMPORTANT: World App does not have access to your private key, and does not maintain control over your wallet, digital tokens, or private keys. Users are responsible for the risk of loss of their private keys and neither TFH nor World App is able to recover such keys.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
How can I avoid Orb scams?
At Orb verification sites
World Operators are independent contractors who help people verify their unique humanness at an Orb.
Operators and members of their teams should NEVER:
- Ask for money, cryptocurrency, or gifts.
- Request for any personal information, such as a phone number, address, or email address.
- Offer money in exchange for your crypto.
- Handle your personal device or ask you to hand it over during verification.
Important: Verification must always be completed with you handling your own device. The Operator should guide you verbally but must not touch your phone at any point.
If an Operator or a member of their team tries to scam or deceive you, does not explain the project openly and transparently, or attempts to handle your device, stop interacting with them and submit a report via World App.
Orb verifications at other locations
Only verify your World ID at authorized Orb locations listed in World App.
- Be aware of impostor World representatives.
Do not trust individuals offering verification outside of locations shown in the app.
Do not verify in unofficial or unlisted places.
- If individuals are not at a location with working Orbs (the sphere used to verify proof of personhood) and are not wearing World-branded clothing, do not trust them and submit a report via World App immediately.
For more details, you can see our article What should I expect when getting my World ID verified at an Orb location?
-
Safety tips when verifying with an Orb
World emphasizes the importance of users following the instructions provided in World App when verifying themselves. Each user is responsible for ensuring their own safety and privacy to avoid scams or misuse.
To ensure a safe experience, consider the following recommendations:
- Use your own phone and keep it secure: Complete the process only with your personal device and do not share it with others. After verification, keep your cell phone secure to ensure that only you can access your World ID, along with all of the benefits associated with being able to demonstrate your humanity and uniqueness.
- You must be over 18 years old to complete the verification.
- Verify only at authorized locations: Follow directions from official World Operators and ensure the site appears in World App. Avoid people offering verification nearby or in unlisted places.
- About token transfers: After verification, you can find instructions on how to transfer your WLD tokens in the World Help Center. People offering exchanges around activation centers are not part of the World Team. They will not pressure you to act immediately or to transfer or redeem tokens.
- Legitimate World Operator Partners and representatives will never ask you to share your password, two-step verification codes, phone number, or private keys. If someone claiming to be from World asks you for this information, it is a scam.
Privacy commitment
World was conceived and is fully committed to protecting individual privacy. World does not want to know who you are; only that you are human. To be part of the World community and network, no personal information is required, such as email, phone number, address, name, etc. If you see that this is happening, please report it.
The project does not seek to collect and store data; participation is completely voluntary and aims to give people control over their own information.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
How can I stay safe with my World wallet?
Keeping your World Wallet secure is essential. As a self-custodial wallet, you are responsible for protecting your device, your backups, and your credentials.
Follow these best practices to stay safe:
1. Protect your phone
Your phone is the key to your wallet.
NEVER allow strangers to handle your phone.
Orb Operators should never ask to handle your phone. If anyone does, stop interacting with them and report the encounter through World Money App.
Always keep your phone locked when not in use.
Keep your operating system updated to the latest version.
Do not jailbreak (iOS) or root (Android) your device.
Only download apps from official stores such as the Apple App Store or Google Play Store.
2. Enable biometric authentication
Adding biometric protection helps prevent unauthorized access.
-
On iOS (Face ID)
Tap your profile picture to open Settings.
Select the Privacy & Security option.
Enable Require Face ID.
-
On Android (Fingerprint or device biometrics)
Tap your profile picture to open Settings.
Select the Privacy & Security option.
-
Enable biometric authentication (such as fingerprint), depending on your device settings.
Note: Biometric options may vary depending on your device model.
3. Backup and recovery
- It is recommended that you add an available login method to your World Money App as soon as possible. This allows you to recover your account if your phone is lost, stolen, or replaced. You can find more details about login methods in this article: How do I sign in to my account?
- NEVER share your login credentials with anyone, including customer support. This may result in loss of access to your account and revocation of many World Money App features.
4. How can I safely make deposits or withdrawals using World Money App
- You should always default to depositing and withdrawing via the options provided within World Money App.
- You should NEVER send local currency or cryptocurrency to an individual who offers deposit or withdrawal services unless they are promoted as a service provider within World Money App in select countries.
-
Red flags for scams:
- Urgent requests for sensitive information
- Threats about account closure
- Requests to visit external links
- Anyone asking for recovery phrase or private key
- If you feel an individual is trying to scam or deceive you, you should stop interacting with them and submit a report to us via World Money App support.
5. Frequently Asked Questions (FAQ)
How do I identify fake or scam tokens?
Red flags for scam tokens:
- Tokens you do not recognize appearing in your wallet
- Tokens with names similar to legitimate ones (slight misspellings)
- Tokens claiming free airdrops from unknown sources
- Tokens requiring you to visit external websites to claim them
What to do if you see suspicious tokens:
- Do NOT interact with them (no swapping, sending, or clicking links)
- Do NOT visit websites they direct you to
- Do NOT connect your wallet to unknown sites
- Safe tokens in World App: Legitimate tokens supported in World App are displayed in your wallet. These include WLD, USDC, and supported Local Stablecoins
- If you received suspicious tokens: You can safely ignore them. Interacting with scam tokens can sometimes trigger malicious smart contracts. When in doubt, contact our Support team before taking any action
I think I was scammed, what should I do?
Immediate steps:
- Stop all communication with the suspected scammer
- Do not send any more funds
- Document everything - screenshots of messages, transaction hashes, wallet addresses
-
Report the scam: Contact our Support team and submit a report with all the details you have. Include:
- How they contacted you
- What they promised
- What you sent and when
- Any wallet addresses or transaction hashes
- Important: Blockchain transactions cannot be reversed, so we cannot recover sent funds. However, your report helps us investigate the situation.
What information should I not share with the World Support team?
For your security, never share certain sensitive information - even with support. Never share these details when getting in touch with the Support team:
- Your full name
- Home address
- Government-issued IDs
- Your login details, passwords, or your private key
- Your credit card or bank account numbers
- Selfies or photos of humans
Our Support team will never ask for these, as they can help you without this information.
The Support team may ask for the following details:
- Your public wallet address
- Public transaction hashes
- Screenshots of error messages
- General description of your issue
Protect yourself going forward: Never share your login details or private key with anyone. Be suspicious of guaranteed returns or urgent requests, and always verify any World App communications through official channels as listed here: How can I connect with World on Social Media?
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What are phishing scams and how can I avoid them?
What is phishing?
-
- Phishing is a method for scammers to gain fraudulent access to your account or personal information.
- Avoid sharing personal information on Discord, Twitter, or any social network, not even with what appear to be official World or Tools for Humanity social media accounts. Only interact with World through support in World App.
- If you have been the victim of a phishing attack, please contact support. Also, please report suspicious messages via World App so that we may assist you and conduct an investigation.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What are best practices to avoid airdrop scams?
An airdrop is when a project distributes free tokens directly to users’ crypto wallets. While legitimate projects use airdrops for promotions, they are also commonly exploited in scams.
Scammers create fake airdrops to trick users into connecting their wallets and approving transactions. If the smart contract behind the airdrop is malicious, this can put your funds at risk or allow unauthorized access to your wallet.
Best practices to avoid airdrop scams
Only interact with verified projects: Before claiming an airdrop, confirm the project is legitimate by checking its official website and multiple verified social media channels.
Be cautious when connecting your wallet: Avoid connecting your wallet to unfamiliar or unverified smart contracts. If something doesn’t feel right, do not proceed.
Double-check links and URLs: Always review the URL carefully before clicking or tapping on it. Make sure it leads to the official website and has been shared through an official announcements channel.
Do your own research: Look for feedback from other users and community discussions to help determine whether the airdrop is legitimate.
Important: Only accept airdrops from verified profiles and sources you absolutely trust. If you are unsure, do not interact with the airdrop.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
User Data
How does the Periodic Data Deletion Process work?
To protect your privacy and ensure we do not retain your information longer than necessary, we run a daily Periodic Data Deletion Process. This automated process identifies inactive accounts and removes personal data that is no longer needed to provide our services.
This article explains when an account becomes eligible for deletion, what data is removed, and what you need to do if you want your account included in this process.
When is an account considered inactive?
For an account to be eligible for automatic deletion, it must meet specific inactivity criteria.
An account is considered inactive if:
- The account has not been used for 24 months or more.
- The World ID has not been verified through an Orb.
- The account is not currently blocked due to fraud investigations.
- The account does not hold any funds (tokens).
Important: You must withdraw your funds first.
We cannot delete your data if your account still holds funds. If your account is inactive but still has a balance, it will not be included in the deletion process to protect your assets. If you would like your account data to be deleted, you must first withdraw your balance. You can do this by following the instructions in this article: How do I withdraw tokens?
What information is deleted?
Once an account meets the criteria above, our system permanently removes personal data that is not essential for legal compliance.
This includes:
- Profile information: Username, phone numbers used for backup or account recovery.
Please note: Once this information is deleted, the phone number can no longer be used for account recovery.
- Activity logs: User activity records and communication history.
- Support history: Previous support tickets and chat history.
- Device data: Device fingerprint data.
- Marketing data: Information used for marketing communications.
- Analytics data: Optional analytics events stored in our systems.
What information is retained?
We retain a limited amount of data only when required by law or for fraud prevention purposes. For example, we may retain certain records to comply with:
- Tax regulations
- Financial reporting obligations
- Investigations related to violations of our Terms of Service
How long does the process take?
The deletion process runs daily. Once your account becomes eligible (inactive for 24 months or more and holding no funds), the deletion of data across our systems is typically completed within 15 business days.
Can I request deletion sooner?
Yes. You do not need to wait 24 months for this automatic process. If you would like your data to be deleted sooner, follow these steps:
- Make sure your funds have been withdrawn.
-
Contact our Privacy Support Team through the in-app Support Chat or through our Privacy Portal.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
How can I opt-in to share my data with Tools for Humanity?
We're excited to announce our new Data Opt-In feature! By participating, you can help us train our AI models and keep World ID safe for every human. This feature is entirely optional and you can enable it or disable it anytime from your World App settings (where available).
Why Opt-In?
- The data you share with us helps improve fraud detection.
Occasionally, authentication processes such as face or Orb captures might not work as intended due to factors like unique facial features, environmental conditions, or system limitations. Sharing your data helps us quickly identify and resolve these issues, ensuring our services remain secure and accessible.
What Data Is Shared?
When you opt in, we securely collect and analyze relevant data, which might include:
- Photos taken by the Orb.
- Images from authentication attempts.
- Metadata helpful for troubleshooting and improvements.
Note: Sharing your Orb and Face Authentication photos trains our AI models with real-world examples, enhancing their accuracy and inclusiveness in ways synthetic data cannot match.
-
Ensuring Your Privacy
Your privacy is our top priority:
- Participation is completely voluntary.
- You can revoke your consent at any time from the settings.
- Data will never be shared externally or used for purposes other than improving authentication reliability.
- All data is securely stored and promptly deleted upon opting out.
We process your personal information under the highest security standards. After 90 days, we’ll check if you still want to participate in improving World ID for everyone.
For more details on data sharing and privacy, please visit our Privacy Notice – Research and Development.
-
How To Participate
You have complete control over your data sharing preferences, and you can opt in through three convenient ways:
1. Settings Toggle (Where available)
Navigate to the Privacy (Android) or Privacy & Legal (iOS) menu in your app Settings and turn on the "Data Opt-In" toggle by tapping on Help Improve World ID for everyone. You can opt out at any time.
When enabled, the photos taken by the Orb (normally stored only on your device) will be securely sent to our servers to train the AI models powering World ID.
2. Proactive Pop-Up Invitations
We may occasionally prompt you with a pop-up asking if you'd like to opt in. These prompts appear when:
- You've encountered repeated issues with authentication (face or Orb captures).
- You're part of specific test groups aimed at improving system performance.
- Your experiences could significantly help address unique challenges (e.g., issues arising from unusual facial features or iris authentication years after initial enrollment).
Accepting these invitations will automatically enable data sharing in your settings.
3. Automatic Prompts After Authentication Issues
If you repeatedly encounter authentication issues, you might see an automated pop-up inviting you to share your data. Accepting this prompt automatically enables data sharing.
-
Proof of Ownership Identifier
To further streamline troubleshooting, we provide you with a unique Proof of Ownership identifier. If you need support, sharing this identifier helps us quickly locate relevant technical details without compromising your privacy.
You can simply open the Privacy (Android) or Privacy & Legal (iOS) menu in your Settings, and tap on Proof of Ownership to reveal the identifier.
Thank you for helping us improve our service and make the experience better for everyone!
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What happens with my data after deletion?
You can choose to either delete your entire account or only delete optional data.
Difference between account deletion and optional data deletion
- Account deletion removes your full World App account, including any private keys and will make your World App, World ID, and any WLD unusable.
- Data deletion removes optional data from the World App backend, but allows you to continue using World App with less data.
-
Option A - Deleting your account
- Closing your World App and World ID is permanent and cannot be undone. Once deleted, you will lose access to your World App, World ID, and any associated WLD.
- Before deleting your account, make sure you have a backup method configured. If you delete your account without first setting up a backup, it cannot be recovered later. We strongly recommend reviewing our login methods guide to ensure your backup is properly set up.
- If you’re unable to access your account or experience issues while attempting to delete your World ID, please contact World App Support for help.
Before deleting your account, make sure you complete the following steps:
- Back up any important information you might need later (e.g., username, app settings).
- Cash out or transfer any balances if they apply to you through future World App financial features.
- Review any pending activity in the app and ensure it’s completed or canceled.
- Turn off optional features like push notifications if you want to stop receiving messages immediately.
Once you request deletion, the following happens:
- World App Profile: Your username and phone number will be permanently deleted.
- Orb Verification: Proof of ownership for your World ID will be deleted.
-
Device Data: NFC identifiers and device IDs tied to your World ID are removed.
- NFC (Near Field Communication) is a wireless technology that allows your phone to read information from a compatible card, device, or document located in close proximity — for example, when you tap your phone on your passport during verification. Most modern smartphones have NFC built in, and it needs to be turned on in your phone’s settings.
- Local Storage: All app data saved on your phone, iCloud, or Google Drive will be erased.
- Analytics Data (Optional): If you opted into app analytics, your data will be cleared, and tracking will be disabled.
- Push Notifications: All notification tokens and history will be deleted, and push notifications will be disabled.
- AI Training Opt-in: If you contributed data to help train AI models, that information will be permanently deleted.
Important information:
- Risk-flagged users: If your account is risk-flagged, your backend data will not be deleted, but you can still delete your app and cloud-stored data.
- Anonymized data: Fully anonymized data that cannot be tied back to you may still be retained.
- Blockchain data: If you have published data on a public blockchain (e.g., by doing a blockchain transaction), it is not technically possible to delete this data, nor are we legally obligated to do so. This pertains to your public wallet key and the transaction history associated with that public key.
- Legally required data: If we are legally required to retain certain data, e.g., for tax purposes, we will also retain such data.
- You can find further details in our Privacy Notice.
How to delete your account:
Open the World App
Tap the World ID icon at the bottom of the screen.
Go to Settings (⚙️ icon).
-
Scroll down and:
On Android, tap Privacy.
On iOS, tap Privacy & Legal.
Tap Delete account.
- Follow the prompts to confirm your deletion.
- Once confirmed, your account and World ID data will no longer be accessible.
For more information regarding this, please check our Account Deletion article.
-
Option B - Clear optional data
If you do not want to delete your account, you can choose to only remove your optional data. Upon doing so, the following information will be removed:
- Your username.
- Your phone number.
- Push Notifications: All notification tokens and history will be deleted, and push notifications will be disabled.
- AI Training Opt-in: If you contributed data to help train AI models, that information will be permanently deleted.
Important information:
- Risk-flagged users: If your account is risk-flagged, your backend data will not be deleted, but you can still delete your app and cloud-stored data.
- Necessary World App data: All data required to keep World App functioning for you will still be retained.
- You can find further details in our Privacy Notice.
How to clear your optional data:
Open the World App
Tap the World ID icon at the bottom of the screen.
Go to Settings (⚙️ icon).
-
Scroll down and:
On Android, tap Privacy.
On iOS, tap Privacy & Legal.
Tap Clear optional data
Select the type of data you want to remove.
- Follow the on-screen steps to confirm deletion.
For more information, please check our article on Optional data.
Why do I still see some data after requesting optional data deletion?
When you request deletion of optional data in World App, the respective data collected is immediately deleted. This affects the following data:
- Your username.
- Your phone number.
- Push Notifications: All notification tokens and history will be deleted, and push notifications will be disabled.
- AI Training Opt-in: If you contributed data to help train AI models, that information will be permanently deleted.
Other data will continue to be stored until you request account deletion.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
Where do I reach out for personal data requests?
What is considered a privacy request and what is not?
A privacy request is related specifically to your personal information and any concerns regarding its security. If you have questions about account access, lost passwords, changing phone numbers, or issues with operators, please contact our Support Team.
Additionally, if you have concerns about scams or fraud, these should also be directed to the Support Team, unless they involve the deletion of your personal information. For instance, if you wish to delete your World App data because you were under 18 when you opened the account, or if you were pressured to perform the iris verification and now you wish to delete your information, our Privacy Team can assist you with your rights in those situations.
Should I provide any personal information when contacting Privacy Support?
Generally, no, you don’t need to provide any additional personal information upfront. The only information the Privacy Team requires is your email address to communicate with you. In very rare cases, they may ask for additional details such as the time and location of your verification. Additionally, the Privacy team may request the wallet address or username to help locate your account.
IMPORTANT: Please remember that you should not share sensitive information such as photos, social security numbers, ID numbers, addresses, wallet private keys, or financial details with us. Keeping your information safe is our priority!
Updating Personal Data
You can update your username or phone number directly from the Settings in your World App profile. For more details, visit our Help Center Article: How do I update my account settings?
Note: At this time, only usernames and phone numbers can be updated in the World App. Email addresses cannot be changed through the app.
Deleting Personal Data
If you'd like to delete your personal data, you can do so in World App by following our guide. Once you've deleted your data in the app, if you'd like, you can go ahead and delete the app and any backup data that you may have.
You can visit the Tools for Humanity Personal Data Request Form, where you can submit a request form for the Privacy Team to review. Make sure to fill in as much detail as possible, and to input a correct email address and phone number if the request is related to your account.
For more details and information about how we use and protect your personal information, please visit our Privacy Overview and Privacy Notice.
Other Privacy Requests
If you're a user, the best way to submit a privacy request is through our Privacy Portal. Our dedicated Privacy Support Team is ready to assist you with any questions about your personal information. They can provide guidance on the following:
- How to obtain a copy of your personal information
- How to delete your personal information
- How to modify your profile information (like your phone number)
The Privacy Team cannot assist with:
- Login or account access issues
- App functionality problems
- Reporting scams or fraud (unless your request involves deletion of personal data)
You can also access the Privacy Portal through your World App by following these steps:
On Android:
1. On the World ID tab, open Settings (gear icon)
2. Tap on Privacy
3. Select Privacy portal
On iOS:
1. On the World ID tab, open Settings (gear icon)
2. Tap on Privacy & Legal
3. Select General Requests
Please remember to only submit requests related to privacy through the portal. If your inquiry is about something else, the Privacy Team won’t be able to help you through that channel. If your issue is not related to exercising your privacy rights, please contact our Support Team instead.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What personal user data does World collect and what does the organization do with my data?
Your privacy and data security are top priorities for the World project.
Data collection and control
All information collected by World App is detailed in the Tools for Humanity (TFH) Privacy Policy. TFH is a project contributor and the controller of this data.
Do you share my data?
We do not share any personal user data with anyone who is not working on or assisting with the World project — and we never will. Both Tools for Humanity and the World Foundation have clear Privacy Statements ensuring your data is protected.
Do you sell my data?
We do not and will never sell personal data.
Neither Tools for Humanity nor the World Foundation engages in the sale of user information under any circumstances.
Is my data secure?
All data is encrypted both in transit and at rest. To keep your information and assets safe:
- Never let others handle your device.
- Never share your wallet address.
- People working on the World project and Orb Operators will never ask you for your device or wallet address.
To learn more about how the World project approaches privacy, visit world.org/privacy.
Is my data safe if the Orb is stolen?
Your data remains safe even if an Orb is stolen. No personal data is stored on the Orb itself — all information, including images, is deleted once it has been securely transferred to the person’s device.
For more information, read the Orb FAQs and the World White Paper.
Technology Behind Iris Code Processing
If you would like to know more about the technology used for the processing of your iris code, please visit:
- https://world.org/privacy
- https://world.org/how-the-launch-works
- www.world.org/blog/announcements/worldcoin-foundation-unveils-new-smpc-system-deletes-old-iris-codes
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
How can I stay safe on social media sites?
As scammers may approach you to try and gain access to your account, we recommend following these safety tips on social media sites:
- NEVER provide personal information, even if the requester claims to be part of the World project. The World Foundation and/or Tools for Humanity will never ask you to provide personal information of any kind.
- As a standard practice, legitimate projects will not send you direct messages. Think about turning off Direct Messages (DM) settings to avoid these types of attacks.
- You may see social media accounts posing as World or Tools For Humanity. For more details on official accounts, please visit this Help Center article: How can I connect with World on Social Media?
- If you feel you have been the victim of fraud by someone claiming to be affiliated with World or Tools for Humanity, please report this to us immediately.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.