Privacy Statement for Digital Wallet and Mobile Verifier App

1. Introduction

2. Information stored in the Digital Wallet

User Information: The integrity and accuracy of the data within the Digital Wallet are assured through direct synchronization with relevant digital document databases like the Mauritius National Identity Card database. Stringent measures are in place to ensure the confidentiality and security of the transferred data, maintaining compliance with regulatory standards and preserving the privacy of holders of the Digital Wallet.

By leveraging the data already present in for example the physical ID card through its database, we ensure efficiency, accuracy, integrity and compliance with regulatory mandates, while safeguarding the privacy and security of the holders’ information.

Onboarding Data: The onboarding process require verification via MauPass User Account, 2-Factor authentication details (OTP via mobile or email, or through the MauPass Mobile application), or, for users without 2FA, a selfie and the front and back images of the National ID card for verification of the digital identity and proof of possession of a valid National Identity Card. The date of issuance, denoting the activation date of the digital document and a Mobile Security Object, a digital signature that guarantees the integrity and security of the digital document, are embedded within the digital document.

Security Preferences: Collection of user-selected security methods (pattern, PIN, Touch ID, or Face ID) are based on the users device capabilities.

3. Use of Information

3.1 Use of Information in Digital Wallet  

The information we collect is used in several ways:

Identity Management: Personal and onboarding data collected is used to manage and facilitate the storage and sharing of Mobile ID and other digital documents and provide related services, ensuring a seamless user experience.

Security Assurance: Security preference data, like PIN or biometrics, is used solely to enhance the security of your Digital Wallet or Mobile Verifier App.

Verification Processes: Information verified by agencies using the Mobile Verifier App is utilized to facilitate the verification of the data of the Mobile ID and other digital documents, maintaining the integrity and reliability of the digital documents and this information is not retained by the Mobile Verifier App.

Operational Effectiveness: Verification logs help in monitoring and improving the App’s verification functions.

4. Data Security

We take the security of your data very seriously. To protect your information, we employ a range of security measures:

Data Encryption: The applications employ strong encryption to protect your personal and sensitive data during transmission and storage.

Access Control: We implement stringent access controls to ensure that only authorized personnel can access user data, maintaining its confidentiality and integrity.

Security Audits and Compliance: Regular security audits are conducted to assess and improve our data protection measures. We comply with relevant data security regulations to ensure the highest standards are met.

User-End Security: We encourage you to maintain the security of your devices and use the security features provided in the apps (like PINs or biometric authentication) to safeguard your accounts.

5. User Consent for Data Verification and sharing

Your personal information is treated with utmost confidentiality. We only share your data in the following circumstances:

Verification and Sharing: Information of the Digital Wallet is verified through the Verifier app or shared with other entities only as per the provision of law and upon consent of the holder.

6. User Rights

As a user of the Digital Wallet and Mobile Verifier App, you have certain rights regarding your personal data:

Access and Review: Users have the right to access and review the personal information stored in the applications.

Data Deletion: Users have the option to request the deletion of their personal data under certain conditions.

Privacy Settings Management: Users are encouraged to regularly review and manage their privacy settings within the Apps.

Changes to Privacy Statement: We reserve the right to update or modify this privacy statement at any time without prior notice. Any changes will be effective immediately upon posting the revised version on the MNIC portal. We encourage you to periodically review this statement to stay informed about how we are safeguarding your information.

7. Contact Information

For any queries or concerns regarding your privacy in the Mobile Apps, or to exercise your data rights, please contact us:

         Designated Contact: Head, National Identity Card Unit

         Email: mnic@govmu.org

         Phone: 4681594/4681595

          Postal Address: 3rd Floor, Atal Bihari Vajpayee Tower, Ebene

We are committed to addressing your privacy-related concerns swiftly and transparently.