KeyU: Privacy-First Digital Identity & Authentication
KeyU is an identity authentication app built on a simple principle: users own their data. Sensitive identity information is stored only in the device's secure storage on Android and iOS, never on the server. The server holds only non-sensitive metadata.
Relying parties such as banks, food delivery companies and logistics providers can send an authentication request to a user. Once the user approves it, KeyU returns verified identity information and logs the user into the relying party's app. The flow works like OAuth, but with a much stronger privacy and security model.
Role
Lead Software Engineer / Architect
Company
uTrust SA
Market
International
Highlights
- Users register with a government-issued National ID, Resident ID or passport.
- The Identity Assurance Level (IAL) is set by the registration method, so relying parties know how strongly each identity has been verified.
- The zero-knowledge-style design keeps the server from ever storing sensitive personal data.
Tech stack
Android & iOS Secure StorageNode.jsExpress.NET 10 Minimal APIsPostgreSQLDockerNginx