User Data & Privacy
How does the Periodic Data Deletion Process work?
To protect your privacy and ensure we do not retain your information longer than necessary, we run a daily Periodic Data Deletion Process. This automated process identifies inactive accounts and removes personal data that is no longer needed to provide our services.
This article explains when an account becomes eligible for deletion, what data is removed, and what you need to do if you want your account included in this process.
When is an account considered inactive?
For an account to be eligible for automatic deletion, it must meet specific inactivity criteria.
An account is considered inactive if:
- The account has not been used for 24 months or more.
- The World ID has not been verified through an Orb.
- The account is not currently blocked due to fraud investigations.
- The account does not hold any funds (tokens).
Important: You must withdraw your funds first.
We cannot delete your data if your account still holds funds. If your account is inactive but still has a balance, it will not be included in the deletion process to protect your assets. If you would like your account data to be deleted, you must first withdraw your balance. You can do this by following the instructions in this article: How do I withdraw tokens?
What information is deleted?
Once an account meets the criteria above, our system permanently removes personal data that is not essential for legal compliance.
This includes:
- Profile information: Username, phone numbers used for backup or account recovery.
Please note: Once this information is deleted, the phone number can no longer be used for account recovery.
- Activity logs: User activity records and communication history.
- Support history: Previous support tickets and chat history.
- Device data: Device fingerprint data.
- Marketing data: Information used for marketing communications.
- Analytics data: Optional analytics events stored in our systems.
What information is retained?
We retain a limited amount of data only when required by law or for fraud prevention purposes. For example, we may retain certain records to comply with:
- Tax regulations
- Financial reporting obligations
- Investigations related to violations of our Terms of Service
How long does the process take?
The deletion process runs daily. Once your account becomes eligible (inactive for 24 months or more and holding no funds), the deletion of data across our systems is typically completed within 15 business days.
Can I request deletion sooner?
Yes. You do not need to wait 24 months for this automatic process. If you would like your data to be deleted sooner, follow these steps:
- Make sure your funds have been withdrawn.
-
Contact our Privacy Support Team through the in-app Support Chat or through our Privacy Portal.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
How can I opt-in to share my data with Tools for Humanity?
We're excited to announce our new Data Opt-In feature! By participating, you can help us train our AI models and keep World ID safe for every human. This feature is entirely optional and you can enable it or disable it anytime from your World App settings (where available).
Why Opt-In?
- The data you share with us helps improve fraud detection.
Occasionally, authentication processes such as face or Orb captures might not work as intended due to factors like unique facial features, environmental conditions, or system limitations. Sharing your data helps us quickly identify and resolve these issues, ensuring our services remain secure and accessible.
What Data Is Shared?
When you opt in, we securely collect and analyze relevant data, which might include:
- Photos taken by the Orb.
- Images from authentication attempts.
- Metadata helpful for troubleshooting and improvements.
Note: Sharing your Orb and Face Authentication photos trains our AI models with real-world examples, enhancing their accuracy and inclusiveness in ways synthetic data cannot match.
-
Ensuring Your Privacy
Your privacy is our top priority:
- Participation is completely voluntary.
- You can revoke your consent at any time from the settings.
- Data will never be shared externally or used for purposes other than improving authentication reliability.
- All data is securely stored and promptly deleted upon opting out.
We process your personal information under the highest security standards. After 90 days, we’ll check if you still want to participate in improving World ID for everyone.
For more details on data sharing and privacy, please visit our Privacy Notice – Research and Development.
-
How To Participate
You have complete control over your data sharing preferences, and you can opt in through three convenient ways:
1. Settings Toggle (Where available)
Navigate to the Privacy (Android) or Privacy & Legal (iOS) menu in your app Settings and turn on the "Data Opt-In" toggle by tapping on Help Improve World ID for everyone. You can opt out at any time.
When enabled, the photos taken by the Orb (normally stored only on your device) will be securely sent to our servers to train the AI models powering World ID.
2. Proactive Pop-Up Invitations
We may occasionally prompt you with a pop-up asking if you'd like to opt in. These prompts appear when:
- You've encountered repeated issues with authentication (face or Orb captures).
- You're part of specific test groups aimed at improving system performance.
- Your experiences could significantly help address unique challenges (e.g., issues arising from unusual facial features or iris authentication years after initial enrollment).
Accepting these invitations will automatically enable data sharing in your settings.
3. Automatic Prompts After Authentication Issues
If you repeatedly encounter authentication issues, you might see an automated pop-up inviting you to share your data. Accepting this prompt automatically enables data sharing.
-
Proof of Ownership Identifier
To further streamline troubleshooting, we provide you with a unique Proof of Ownership identifier. If you need support, sharing this identifier helps us quickly locate relevant technical details without compromising your privacy.
You can simply open the Privacy (Android) or Privacy & Legal (iOS) menu in your Settings, and tap on Proof of Ownership to reveal the identifier.
Thank you for helping us improve our service and make the experience better for everyone!
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What happens with my data after deletion?
You can choose to either delete your entire account or only delete optional data.
Difference between account deletion and optional data deletion
- Account deletion removes your full World App account, including any private keys and will make your World App, World ID, and any WLD unusable.
- Data deletion removes optional data from the World App backend, but allows you to continue using World App with less data.
-
Option A - Deleting your account
- Closing your World App and World ID is permanent and cannot be undone. Once deleted, you will lose access to your World App, World ID, and any associated WLD.
- Before deleting your account, make sure you have a backup method configured. If you delete your account without first setting up a backup, it cannot be recovered later. We strongly recommend reviewing our login methods guide to ensure your backup is properly set up.
- If you’re unable to access your account or experience issues while attempting to delete your World ID, please contact World App Support for help.
Before deleting your account, make sure you complete the following steps:
- Back up any important information you might need later (e.g., username, app settings).
- Cash out or transfer any balances if they apply to you through future World App financial features.
- Review any pending activity in the app and ensure it’s completed or canceled.
- Turn off optional features like push notifications if you want to stop receiving messages immediately.
Once you request deletion, the following happens:
- World App Profile: Your username and phone number will be permanently deleted.
- Orb Verification: Proof of ownership for your World ID will be deleted.
-
Device Data: NFC identifiers and device IDs tied to your World ID are removed.
- NFC (Near Field Communication) is a wireless technology that allows your phone to read information from a compatible card, device, or document located in close proximity — for example, when you tap your phone on your passport during verification. Most modern smartphones have NFC built in, and it needs to be turned on in your phone’s settings.
- Local Storage: All app data saved on your phone, iCloud, or Google Drive will be erased.
- Analytics Data (Optional): If you opted into app analytics, your data will be cleared, and tracking will be disabled.
- Push Notifications: All notification tokens and history will be deleted, and push notifications will be disabled.
- AI Training Opt-in: If you contributed data to help train AI models, that information will be permanently deleted.
Important information:
- Risk-flagged users: If your account is risk-flagged, your backend data will not be deleted, but you can still delete your app and cloud-stored data.
- Anonymized data: Fully anonymized data that cannot be tied back to you may still be retained.
- Blockchain data: If you have published data on a public blockchain (e.g., by doing a blockchain transaction), it is not technically possible to delete this data, nor are we legally obligated to do so. This pertains to your public wallet key and the transaction history associated with that public key.
- Legally required data: If we are legally required to retain certain data, e.g., for tax purposes, we will also retain such data.
- You can find further details in our Privacy Notice.
How to delete your account:
Open the World App
Tap the World ID icon at the bottom of the screen.
Go to Settings (⚙️ icon).
-
Scroll down and:
On Android, tap Privacy.
On iOS, tap Privacy & Legal.
Tap Delete account.
- Follow the prompts to confirm your deletion.
- Once confirmed, your account and World ID data will no longer be accessible.
For more information regarding this, please check our Account Deletion article.
-
Option B - Clear optional data
If you do not want to delete your account, you can choose to only remove your optional data. Upon doing so, the following information will be removed:
- Your username.
- Your phone number.
- Push Notifications: All notification tokens and history will be deleted, and push notifications will be disabled.
- AI Training Opt-in: If you contributed data to help train AI models, that information will be permanently deleted.
Important information:
- Risk-flagged users: If your account is risk-flagged, your backend data will not be deleted, but you can still delete your app and cloud-stored data.
- Necessary World App data: All data required to keep World App functioning for you will still be retained.
- You can find further details in our Privacy Notice.
How to clear your optional data:
Open the World App
Tap the World ID icon at the bottom of the screen.
Go to Settings (⚙️ icon).
-
Scroll down and:
On Android, tap Privacy.
On iOS, tap Privacy & Legal.
Tap Clear optional data
Select the type of data you want to remove.
- Follow the on-screen steps to confirm deletion.
For more information, please check our article on Optional data.
Why do I still see some data after requesting optional data deletion?
When you request deletion of optional data in World App, the respective data collected is immediately deleted. This affects the following data:
- Your username.
- Your phone number.
- Push Notifications: All notification tokens and history will be deleted, and push notifications will be disabled.
- AI Training Opt-in: If you contributed data to help train AI models, that information will be permanently deleted.
Other data will continue to be stored until you request account deletion.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
Where do I reach out for personal data requests?
What is considered a privacy request and what is not?
A privacy request is related specifically to your personal information and any concerns regarding its security. If you have questions about account access, lost passwords, changing phone numbers, or issues with operators, please contact our Support Team.
Additionally, if you have concerns about scams or fraud, these should also be directed to the Support Team, unless they involve the deletion of your personal information. For instance, if you wish to delete your World App data because you were under 18 when you opened the account, or if you were pressured to perform the iris verification and now you wish to delete your information, our Privacy Team can assist you with your rights in those situations.
Should I provide any personal information when contacting Privacy Support?
Generally, no, you don’t need to provide any additional personal information upfront. The only information the Privacy Team requires is your email address to communicate with you. In very rare cases, they may ask for additional details such as the time and location of your verification. Additionally, the Privacy team may request the wallet address or username to help locate your account.
IMPORTANT: Please remember that you should not share sensitive information such as photos, social security numbers, ID numbers, addresses, wallet private keys, or financial details with us. Keeping your information safe is our priority!
Updating Personal Data
You can update your username or phone number directly from the Settings in your World App profile. For more details, visit our Help Center Article: How do I update my account settings?
Note: At this time, only usernames and phone numbers can be updated in the World App. Email addresses cannot be changed through the app.
Deleting Personal Data
If you'd like to delete your personal data, you can do so in World App by following our guide. Once you've deleted your data in the app, if you'd like, you can go ahead and delete the app and any backup data that you may have.
You can visit the Tools for Humanity Personal Data Request Form, where you can submit a request form for the Privacy Team to review. Make sure to fill in as much detail as possible, and to input a correct email address and phone number if the request is related to your account.
For more details and information about how we use and protect your personal information, please visit our Privacy Overview and Privacy Notice.
Other Privacy Requests
If you're a user, the best way to submit a privacy request is through our Privacy Portal. Our dedicated Privacy Support Team is ready to assist you with any questions about your personal information. They can provide guidance on the following:
- How to obtain a copy of your personal information
- How to delete your personal information
- How to modify your profile information (like your phone number)
The Privacy Team cannot assist with:
- Login or account access issues
- App functionality problems
- Reporting scams or fraud (unless your request involves deletion of personal data)
You can also access the Privacy Portal through your World App by following these steps:
On Android:
1. On the World ID tab, open Settings (gear icon)
2. Tap on Privacy
3. Select Privacy portal
On iOS:
1. On the World ID tab, open Settings (gear icon)
2. Tap on Privacy & Legal
3. Select General Requests
Please remember to only submit requests related to privacy through the portal. If your inquiry is about something else, the Privacy Team won’t be able to help you through that channel. If your issue is not related to exercising your privacy rights, please contact our Support Team instead.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What personal user data does World collect and what does the organization do with my data?
Your privacy and data security are top priorities for the World project.
Data collection and control
All information collected by World App is detailed in the Tools for Humanity (TFH) Privacy Policy. TFH is a project contributor and the controller of this data.
Do you share my data?
We do not share any personal user data with anyone who is not working on or assisting with the World project — and we never will. Both Tools for Humanity and the World Foundation have clear Privacy Statements ensuring your data is protected.
Do you sell my data?
We do not and will never sell personal data.
Neither Tools for Humanity nor the World Foundation engages in the sale of user information under any circumstances.
Is my data secure?
All data is encrypted both in transit and at rest. To keep your information and assets safe:
- Never let others handle your device.
- Never share your wallet address.
- People working on the World project and Orb Operators will never ask you for your device or wallet address.
To learn more about how the World project approaches privacy, visit world.org/privacy.
Is my data safe if the Orb is stolen?
Your data remains safe even if an Orb is stolen. No personal data is stored on the Orb itself — all information, including images, is deleted once it has been securely transferred to the person’s device.
For more information, read the Orb FAQs and the World White Paper.
Technology Behind Iris Code Processing
If you would like to know more about the technology used for the processing of your iris code, please visit:
- https://world.org/privacy
- https://world.org/how-the-launch-works
- www.world.org/blog/announcements/worldcoin-foundation-unveils-new-smpc-system-deletes-old-iris-codes
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.