Tribe Verification Policy

1.Why Tribe may verify identity

Depending on the feature or stage of your Tribe journey, verification may be used to:

• confirm that you are the person you claim to be;
• protect your Tribe account;
• reduce identity fraud;
• support a rental application;
• protect property owners, property managers, residents, and applicants;
• meet lawful property-management or contractual requirements;
• support access to sensitive resident functionality; and
• investigate suspected misuse or fraud.

We aim to perform verification only where it is reasonably necessary for the relevant purpose.

2.When verification may be requested

Verification may be requested when you:

• create or secure an account;
• submit or progress a rental application;
• verify information in your Tribe Passport;
• access sensitive tenancy information;
• recover an account;
• access certain building or resident functionality; or
• carry out another action where identity confirmation is reasonably necessary.

Not every user or every feature will require the same level of verification.

3.Information that may be used

Depending on the verification method, we may ask for or process:

Identity details

• full name;
• date of birth;
• residential address;
• email address;
• mobile number; and
• identification-document details.

Identity documents

Where reasonably necessary, this may include an image or scan of:

• passport;
• driver licence;
• other government-issued identity document; or
• another accepted verification document.

Tribe seeks to avoid collecting more identity-document information than reasonably necessary.

Photograph and liveness information

A verification step may ask you to:

• take a selfie;
• record a short image sequence or video;
• move your face or device;
• complete a liveness challenge; or
• compare your face with the photograph on your identity document.

Biometric information

Where facial or other biometric technology is used for automated verification, the verification process may generate or process biometric information or a biometric template.

Biometric information used for automated biometric verification or identification may be treated as sensitive information under Australian privacy law.

Technical and fraud-prevention information

Verification may also use information such as:

• device information;
• IP address;
• verification-session identifiers;
• document authenticity indicators;
• liveness result;
• fraud or manipulation indicators; and
• verification outcome.

4.Third-party verification providers

Tribe may use a specialist third-party provider to perform some or all verification steps.

Production provider: Didit Identity Verification

The provider may receive the information necessary to perform verification and may process information under contractual security and privacy requirements.

Before verification begins, Tribe will provide access to applicable information about the provider where required.

Where a provider processes personal information for its own separate purposes, its own privacy terms may also apply.

5.Facial verification and liveness checks

Where enabled, facial verification is intended to determine whether the person completing verification corresponds to the person shown on the submitted identity document.

Liveness technology may be used to assess whether the verification attempt involves a real, present person rather than a photograph, recording, mask, synthetic image, or other spoofing technique.

Verification may involve automated analysis.

A verification result may include statuses such as:

• verified;
• unable to verify;
• additional information required;
• manual review required; or
• verification failed.

A failed or inconclusive verification does not necessarily mean fraud has occurred.

6.Biometric consent

Where biometric information is collected for automated biometric verification or identification and consent is required, Tribe will request specific express consent before that collection occurs.

The consent request should explain:

• what biometric information will be processed;
• why it is needed;
• who will process it;
• whether it will be stored;
• how long it will be retained or the criteria used to determine retention;
• any overseas processing that applies;
• what happens if you do not consent; and
• how you can ask questions or withdraw consent where withdrawal is available.

Recommended in-app consent

Use a separate, unticked checkbox immediately before the biometric/liveness step:

I consent to identity and biometric verification. I expressly consent to the collection and processing of my facial image, liveness information and, where used, biometric information for the purpose of verifying my identity, preventing fraud and supporting my Tribe application or account. I understand that an approved verification provider may process this information as described in the Tribe Verification Policy and the notice shown for this verification.

Link: Read the Verification Policy

Do not pre-select the checkbox.

Do not bundle this consent into a general "Accept Terms and Privacy" checkbox.

7.What happens if you do not consent

If biometric verification is optional and a reasonable alternative is available, Tribe may offer another verification path, such as:

• manual review;
• document review;
• assisted verification; or
• another approved identity check.

Whether an alternative is available depends on the property, feature, fraud risk, and applicable requirements.

If verification is reasonably necessary to provide a particular service and no suitable alternative is available, you may be unable to complete that feature or application.

The consequences will be explained before consent is requested.

8.Data minimisation

Tribe aims to collect only verification information reasonably necessary for the relevant purpose.

In particular:

• we should not request multiple identity documents where one appropriate document is sufficient;
• we should not retain copies of identity documents merely because they were supplied;
• where practical, the preferred outcome is to retain a verification result and limited necessary reference information rather than unnecessary full document images; and
• information provided but not reasonably necessary should be deleted or de-identified where required or appropriate.

The exact production workflow must be configured consistently with these principles.

9.How verification information is used

Verification information may be used to:

• confirm identity;
• validate an identity document;
• detect document tampering;
• conduct liveness checks;
• compare a live facial image with an identity-document photograph;
• prevent fraud;
• protect account security;
• determine whether additional review is required;
• support authorised tenancy-application checks; and
• comply with lawful requests or obligations.

Verification information will not be used for unrelated advertising.

Biometric information should not be repurposed for unrelated facial recognition, profiling, or marketing.

10.Verification and rental applications

Identity verification is only one part of a rental application.

Other application considerations may include information relevant to:

• ability to pay rent;
• tenancy history;
• references;
• application completeness; and
• property-specific requirements.

Tribe's verification result should not be described as a guarantee of rental approval.

The final tenancy decision may be made by the relevant landlord, agent, property manager, or authorised property provider.

11.Automated processing and manual review

Some verification checks may be automated.

An automated system may:

• assess document authenticity;
• compare images;
• evaluate liveness;
• detect inconsistencies;
• identify possible manipulation; or
• produce a verification confidence or status.

Where an automated result is inconclusive, Tribe or the verification provider may request:

• another attempt;
• additional information; or
• manual review.

Where personal information is used in a computer-assisted process that could reasonably be expected to significantly affect your rights or interests, Tribe will provide transparency required by applicable law.

You may contact info@tribeapp.com.au if you have questions about an applicable automated verification process.

12.Storage and retention

Verification information must not be kept longer than reasonably necessary.

The retention period depends on:

• the type of information;
• whether the information is held by Tribe or a verification provider;
• the purpose of verification;
• fraud-prevention needs;
• legal or tenancy obligations; and
• contractual requirements.

Production values to confirm before release

Before this Policy is deployed, confirm and replace the following:

• Identity-document image retention: Tribe does not retain copies or images of identity documents after identity verification has been completed. Identity-document images are used only for the verification session and are permanently deleted from Tribe-controlled systems immediately after successful verification. Tribe retains only the minimum verification outcome required to record that identity verification was completed. Where a verification session is abandoned, unsuccessful or requires manual review, any temporary identity-document data will be deleted as soon as it is no longer reasonably necessary for that verification process, unless retention is required by applicable law.
• Selfie / liveness-image retention: Tribe does not retain selfie, facial, video or liveness images after the identity-verification process has been completed. These images are processed only for the purpose of performing identity and liveness verification and are permanently deleted from Tribe-controlled systems immediately after the verification purpose has been completed. Images relating to an incomplete or disputed verification may be retained temporarily only for the period reasonably necessary to complete or review that verification, after which they are permanently deleted.
• Biometric-template retention: Tribe does not retain biometric templates. Where a biometric template or biometric information is generated during facial or liveness verification, it is used only for the verification process and is deleted once verification has been completed. No biometric template is stored in the user's Tribe account, Tribe Passport or application record, and biometric information is not reused for advertising, profiling, authentication or any unrelated purpose.
• Verification-result retention: Tribe retains only a minimal verification record, such as the verification status, verification date and time, verification-provider reference and, where necessary, the type of verification performed. Tribe does not retain the underlying identity-document image, selfie, liveness image or biometric template as part of this record. For an unsuccessful or withdrawn tenancy application, the verification result will be deleted when it is no longer reasonably necessary for the application process and, as a general operational standard, no later than 30 days after the relevant application process has concluded, unless a longer period is required by applicable law or is reasonably necessary to resolve a dispute, fraud investigation or legal claim. For a successful applicant, the minimum verification result may be retained for as long as reasonably necessary to administer the tenancy and meet applicable legal, regulatory, audit, security or dispute-resolution requirements. It will be permanently deleted or de-identified when there is no longer a lawful or reasonably necessary purpose for retaining it.
• Provider retention: Any third-party identity-verification provider engaged by Tribe must be contractually required to apply equivalent data-minimisation and deletion standards. Raw identity documents, selfies, liveness images and biometric information must not be retained after the verification purpose has been completed, except where temporary retention is strictly necessary to resolve an incomplete, disputed, fraudulent or legally required verification. The provider must delete such information from its active systems once it is no longer required and ensure deletion from backups, caches and subprocessors in accordance with its documented secure-deletion cycle. The provider must not use Tribe verification data for advertising, independent profiling, training unrelated AI or biometric models, or any unrelated purpose. Tribe may retain only the minimum verification result or provider transaction reference necessary for the purposes described above.

Where information is no longer required, it should be securely deleted or de-identified as appropriate.

13.Security

Verification information receives protections appropriate to its sensitivity.

Measures may include:

• encryption;
• restricted access;
• authentication;
• logging;
• secure transmission;
• vendor security controls;
• retention controls; and
• monitoring for misuse.

No security measure can guarantee absolute protection.

14.Overseas processing

The verification provider or its subprocessors may process information outside Australia.

Before production release, Tribe must confirm:

• whether overseas processing occurs;
• which countries are involved where practicable to specify; and
• how applicable cross-border privacy obligations are addressed.

Current production locations: India, Australia

15.Access, correction, and questions

You may contact us to:

• request access to verification information we hold about you;
• request correction of inaccurate personal information;
• ask how verification works;
• ask which provider was used; or
• make a privacy complaint.

Contact:

Intelligence81 Pty Ltd Privacy email: info@tribeapp.com.au Support email: info@tribeapp.com.au Telephone: 1800169100 Address: Level 2, 66 Wentworth Ave, Surry Hills NSW 2010

We may need to verify your identity before providing access to verification records.

16.Withdrawal of consent

Where processing relies on consent, you may contact us to withdraw consent for future processing.

Withdrawal does not make prior lawful processing invalid.

If verification is required to complete a service, withdrawing consent may mean that the relevant verification-dependent feature cannot continue unless an alternative method is available.

We will explain material consequences where required.

17.Failed or disputed verification

If you believe a verification result is wrong:

1. do not repeatedly submit altered documents;
2. use any retry or review option offered by Tribe;
3. contact Tribe Support if the issue remains unresolved; and
4. provide only the information requested for review.

Where appropriate, an inconclusive or disputed result may be referred for manual assessment.

18.Changes to this Policy

We may update this Policy when:

• verification methods change;
• providers change;
• retention periods change;
• legal requirements change; or
• new safeguards are introduced.

The current version will display its effective date.

If a material change requires new consent, we will request that consent before the relevant processing occurs.

19.Relationship with the Privacy Policy

The Tribe Privacy Policy explains our broader handling of personal information.

This Verification Policy provides additional detail about identity, document, biometric, and liveness verification.

If a shorter collection notice is shown immediately before verification, read it together with both policies.

20.Recommended app-screen structure

Review terms & privacy screen

Use separate controls:

Terms of Service Link: View Terms "https://tribe.jointribex.com/terms"

Privacy Policy Link: View Privacy Policy "https://tribe.jointribex.com/privacy"

Verification Policy Link: View Verification Policy "https://tribe.jointribex.com/verification"

Acceptance controls

Checkbox 1:

I agree to the Tribe Terms of Service.

Below it:

I acknowledge that I have been given access to the Tribe Privacy Policy.

Do not seek biometric consent on this general screen unless biometric verification begins immediately and the full specific notice is also presented.

At the point identity verification begins

Show a dedicated verification screen containing:

Identity verification To verify your identity, Tribe and our approved verification provider may process your identity document, facial image and liveness information. If biometric information is used for automated verification, it is sensitive information and requires your specific consent.

Unticked checkbox:

I consent to identity and biometric verification.

Primary CTA:

Continue to verification

Secondary:

Use another verification method

Display the alternative only where an alternative is actually available.

21.Contact

Intelligence81 Pty Ltd Privacy email: info@tribeapp.com.au Support email: info@tribeapp.com.au Telephone: 1800169100 Address: Level 2, 66 Wentworth Ave, Surry Hills NSW 2010 Privacy Policy: https://tribe.jointribex.com/privacy Support: https://tribe.jointribex.com/discover