SomalilandPass Privacy Policy

Effective Date: September 2026 | Version 2.5

Sahal Tech Solutions, in collaboration with the Somaliland Identity Department, is committed to protecting your privacy and managing your personal information with the highest standards of security and transparency. SomalilandPass is designed as a secure national Digital ID that enables citizens and residents to access digital government and private sector services, sign documents digitally, and verify official credentials. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you use the SomalilandPass application and digital identity services (collectively, the "Services").

By downloading, registering with, or using the SomalilandPass app, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy.

1. Information We Collect

To provide secure digital identity verification, legal digital consent, document verification, and integration across public and private sector services, we collect the following categories of information:

• Personal Identity Information: Your full legal name, national identification number, passport details, date of birth, photo identification, gender, email address, phone number, and official residence details synchronized with or verified through the Somaliland National ID registry.
• Digital Verification & Transactional Data: Records of digital consent requests, authentication logs, digital signature activities, document verification requests, and service provider access history.
• Device & Technical Data: Internet Protocol (IP) address, mobile hardware model, unique device identifiers (e.g., IMEI, UUID, Android ID, or IDFA), operating system version, network provider details, and application diagnostic logs.
• Biometric Data (Local Authentication): Where facial recognition or fingerprint authentication is enabled on your mobile device, the app utilizes native mobile device frameworks to authorize logins, verify identities, or execute digital signatures. We never transmit or store raw biometric template metadata on external servers; local biometric verification is handled entirely within your mobile device’s hardware security module.

2. Mobile Application Permissions Requested

To deliver core identity features, SomalilandPass requests access to specific hardware capabilities on your mobile device. You can adjust or revoke these permissions in your device settings at any time:

• Camera Access: Used exclusively to scan encrypted QR codes on physical National IDs, scan authentication codes on third-party portals, and capture real-time photo verification during account setup.
• Push Notifications: Used to deliver real-time authentication prompts, digital consent authorizations, security alerts, and system notices.
• Storage / Files Access: Utilized to locally export and save verified digital document credentials, signed files, or official digital certificates.

3. How We Use Your Information

We process your personal and operational data exclusively for official digital identity management, service integration, and identity security purposes, including:

• Core Identity Services: Facilitating secure remote user authentication, generating valid digital signatures, enabling real-time digital consent, and displaying official digital ID credentials.
• Security & Anti-Fraud Protection: Detecting fraudulent identity claims, guarding against unauthorized service access, verifying document authenticity, and protecting digital assets through robust security protocols.
• Government & Regulatory Compliance: Ensuring compliance with official Somaliland identity verification rules, legal authentication standards, and national regulatory mandates.
• Customer Care & Support: Assisting with account activation issues, troubleshooting technical defects, and responding to user support inquiries.
• Platform Optimization: Reviewing aggregated system performance statistics to ensure high system uptime, security compliance, and application efficiency.

4. Information Sharing & Disclosure

We do not sell, rent, trade, or lease your personal identity data to third parties for commercial or marketing purposes. Information sharing occurs strictly under the following conditions:

• Somaliland Identity Department: In partnership with the Somaliland Identity Department, data synchronization occurs with official identity verification channels to validate citizen identity credentials.
• Integrated Service Providers & Partners: When you choose to log in or authorize services with external partner applications (government portals or authorized private entities), identity attributes are shared strictly upon your explicit real-time digital consent.
• Authorized Infrastructure Providers: We work with trusted technology infrastructure vendors (e.g., secure cloud hosting, encrypted communication gateways) bound by strict non-disclosure contracts and statutory security standards.
• Legal Mandates & Law Enforcement: Personal data may be disclosed when required by valid court orders, official legal proceedings, or statutory regulatory directives in accordance with Somaliland law.

5. Data Security

SomalilandPass employs rigorous enterprise- and government-grade security controls to protect your identity data against unauthorized access, loss, alteration, or misuse:

• End-to-end data encryption for all network communications using TLS 1.3 / SSL standards.
• AES-256 bit encryption for sensitive digital credentials stored in databases and mobile secure enclaves.
• Multi-Factor Authentication (MFA) and biometric consent requirements for authentication and signature actions.
• Regular vulnerability scanning, automated security audits, and strict role-based access control policies.

6. Data Retention and Account Deletion

Your digital identity profile and service verification records are maintained for as long as your SomalilandPass account remains active, or as mandated by applicable national identity regulations.

Account Deletion Requests: You may submit an account closure or data deletion request via the app settings or by contacting our support team. Non-regulatory identity metadata will be deleted, while mandatory national identity logs will be preserved in compliance with government identity record laws.

7. Your Rights

In relation to your personal identity data, you maintain the following rights:

• Access: Request details of the personal identity records held in your SomalilandPass account.
• Correction: Request corrections to inaccurate or outdated personal details stored within the service.
• Deletion: Request deletion of your digital account credentials, subject to statutory identity retention laws.
• Consent Management: Review, grant, or revoke real-time consent permissions given to third-party integrated services.
• Objection & Restriction: Object to or request limitations on specific secondary processing activities.

To exercise any of these rights, please contact our support team using the contact information below.

8. Children's Privacy

SomalilandPass services are designed for eligible citizens and residents in accordance with national identification issuance laws. We do not knowingly collect or issue independent digital identity profiles to minors without appropriate legal guardian authorization or official government registry provisions.

9. Policy Amendments

Sahal Tech Solutions and the Somaliland Identity Department reserve the right to update this Privacy Policy to reflect technological developments, platform updates, or legal changes. Users will be notified of material changes through in-app alerts or website announcements. Continued use of SomalilandPass following an update signifies acceptance of the revised policy.

10. Contact Us

For questions, data protection inquiries, or support requests regarding SomalilandPass, please contact our central support department: