Digi Yatra Foundation has claimed in a press release that it puts user privacy first and all Digi Yatra users are safe and secure. This comes after an investigation by a technologist, published on X raised questions accusing Digi Yatra regarding data access and control over user information.
Digi Yatra Foundation’s (DYF) recently switched to its new app. Passengers are reportedly pressured to delete the old app and download a new one, citing system upgrades. It is not clear what happened to the old app and the user data associated with it.
This paperless “biometric boarding system” utilizes facial recognition technology (FRT) for passenger verification at Indian airports.
DYF says that Digi Yatra adheres to MOCA policies and holds the mandatory CERT-In audit certificate, ensuring robust security for the entire ecosystem (DYCE backbone, mobile apps, and airport verifiers). The latest audit in January 2024 confirmed no Personally Identifiable Information (PII) is stored within the system, it adds.
“Your data stays on your device! Digi Yatra utilizes the concept of Self Sovereign Identity, eliminating central storage of ID credentials containing PII. The Digi Yatra blockchain only stores Hashes/Key values for data integrity checks,” it adds.
DYF said that Digi Yatra app stores PII on the user’s phone, accessible only by the user. Old data remains on the device until you uninstall the app, automatically deleting credentials and travel history. It added that Information shared with airports (ID credentials and boarding pass) is purged within 24 hours of your flight departure, ensuring temporary use and deletion.
Digi Yatra is expanding coverage from 15 to 28 airports by April 2024, including Bagdogra, Bhubaneswar, Chandigarh, Chennai, Coimbatore, Dabolim, Indore, Mangalore, Patna, Raipur, Ranchi, Srinagar, Trivandrum and Visakhapatnam.