XipID terms of service
Effective November 9, 2026.
Who we are, and what these terms cover
XipID is owned by XipHub Inc. and operated by Bryllyant Inc. These terms are between you and Bryllyant Inc. XipID is free for you; the organizations that use it pay for it.
What XipID does
XipID holds one identity for you, verified to a tier you choose, and answers one question for the organizations you consent to: are you present and consenting to a request, right now? You see each request in full and approve or decline it. The organization receives a signed answer and nothing more than the consent you gave names.
What XipID never does
- It never moves money or changes anything on your account with an organization.
- It never asks for a password, a PIN or a card number.
- It never asks you to approve or decline a request by text.
- It never puts account details in a text or in a link.
- It never shows an organization more about you than a consent you gave names.
Your XipID
You hold one XipID, and it is yours alone. You create it with a phone number and an email address you control, and you sign in with a code sent to your email address, on your own device. Keep your codes to yourself, and tell us when a channel changes.
Verification, and the biometric notice
Verifying with a selfie collects biometric identifiers: a short video checked to show a live person is there and, if the notice you agreed to said so, compared with your reference face. Your reference face is a photo from your own selfie, or one an organization gave XipID until your own selfie replaces it. A document you verify with has its portrait compared with your reference face too. The video is not kept. Up to four photos from each selfie are kept for 90 days only when the organization asking chose to have them kept and the notice you agreed to said so. A reference face is kept for three years after your last interaction with XipID and then destroyed, or sooner when you delete your XipID or the organization that enrolled the photo deletes it. The front and back of a document you verify with are kept for 90 days after XipID reads it, and its portrait for three years after that read. Each is then destroyed, or sooner when you delete your XipID. Biometric data is used only to verify you and is never sold. It is shared only with the organization whose request you approved, and only if that request is disputed, as the notice said. XipID records each time. You agree to this on the notice before each selfie, and you may decline instead.
Consent
Every organization's access is a grant you give, for named information and a named purpose, and you may revoke it at any time in your XipID. Revoking ends the organization's access from then on; it does not undo answers already given.
Text messages
Verification texts are sent under the text message terms, only to a number you verified and agreed to on XipID's own consent screen.
What you agree to
- To use XipID for your own identity only, and to give true information.
- To hold one XipID.
- Not to use XipID to defraud or impersonate anyone, or to interfere with the service.
Suspension, and how an account ends
We may suspend a XipID used for fraud, impersonation or abuse. Write to help@xipid.org and we tell you why, where the law allows. You may delete your XipID at any time in your XipID; what is deleted and what is kept is set out in the privacy policy.
What we promise, and what we do not
XipID answers whether you were present and consenting; the organization decides what to do with the answer. XipID is provided as is, without a warranty beyond what the law requires. As far as the law allows, Bryllyant is not responsible for indirect losses, such as lost profits or lost data, and its total responsibility to you for anything about XipID is no more than $100.
The law, and disputes
The laws of the State of Delaware govern these terms, without regard to their conflict-of-laws rules. The state and federal courts in Delaware decide any dispute about XipID or these terms, and you and Bryllyant both agree to their jurisdiction. If you have a concern, write to us first at help@xipid.org, and we will try to resolve it with you before either of us goes to court.
The whole agreement
These terms and the text message terms are the whole agreement between you and Bryllyant about XipID. If a court finds part of these terms unenforceable, the rest still applies. Not enforcing a term is not a waiver of it. You may not transfer these terms; we may transfer them to a company that takes over operating XipID. What these terms say about what we promise, the law and disputes still applies after your XipID ends.
Changes
When these terms change, the new version is published here with its effective date. If you keep using XipID after that date, you accept the new terms.
Contact
Bryllyant Inc., help@xipid.org.