A decentralised biometric authentication and entitlement system.
Private by design.
Offline by default.
A new trust layer for doors, devices, and on-site services.Access in the palm of your hand
Prototype funded by Innovate UK
Why PalmVault, why now
This is a new category in authentication: privacy-first access and payments at the edge. Quicker on site. Less fraud. Lower liability. More trust.Guests and members want seamless entry without handing over biometrics or unnecessary personal data. Cards fail or get lost. People do not want their passport scan, biometric images, or driving licence photos stored in a venue’s systems. Data breaches, scraping and hacking are everyday risks.Operators carry rising risk and cost. When cards fail or go missing, every incident becomes a reset, reprint, or room recode, creating queues and support load. Cards can be cloned or shared. PIN resets and keycard printing waste time and budget. Holding identity data and biometrics increases GDPR liability and slows audits.PalmVault is a decentralised biometric entitlement layer. People enrol once on their own device using face or fingerprint. The template stays on the device. At the door or point of service, presence is proven offline with a cryptographic challenge and a local decision. No central biometric database. No personal profiles to monetise. Data is minimised by default.On-device only.
Offline by default.
Tokenised entitlements.
How it works
Enrol once
Register your biometric (face/fingerprint) locally on your device.
Prove presence
Authenticate offline with cryptographic proof.
Enforce entitlements
Access controls validated at the edge.
Access with entitlements.
Payments as well.
PalmVault goes beyond entry control.
The same privacy-first architecture that authenticates users at the door
can validate purchases, memberships, and time-based access, without sharing personal data.
Who it’s for
PalmVault fits places where trust, privacy, and uptime matter.
Enrol once on your device.
Prove presence offline.
Enforce entitlements at the edge.
Hotels & Hospitality
Guests enrol once on their device.
Use case: unlock rooms and lifts; access spa, gym, or lounge; charge to room or on-site wallet.
Operator benefit: no cards to issue; far fewer failures/reprints; faster service; revocable entitlements for staff and guests.
Fitness & studios
Members enrol once on their device.
Use case: door entry, class check-ins, lockers; guest passes/drop-ins; verify memberships or class credits offline.
Operator benefit: no PIN resets; entitlements update instantly; audit without holding biometrics.
Co-working & offices
Staff and visitors enrol once on their device.
Use case: zone-based access, hot desks, meeting rooms; temporary visitor passes; contractor time windows.
Operator benefit: edge-validated permissions with local logs; no central biometric database.
Residential & multi-unit
Residents enrol once on their device.
Use case: doors, garages, parcels, amenities; delegate temporary access to guests or trades.
Operator benefit: revocable tokens; privacy by design for residents.
Events & venues
Attendees enrol once pre-event or on arrival.
Use case: ticket validation at gates, age-restricted areas, VIP zones; offline concessions; secure ticket delegation/transfer.
Operator benefit: fast throughput; fraud reduction; no personal data shared with vendors.
And more
Healthcare (staff zones, meds cabinets)
Education & campuses
Transport hubs & depots
Retail & point-of-sale
Logistics & warehouses
Construction sites
Data centres & labs
Public sector & social care
And more - ask about your environment
Latest from the build
Get in touch
PRIVACY POLICYLast updated: November 2025PalmVault (“we”, “our”, or “us”) provides a secure, privacy-first
biometric authentication app. We are committed to protecting your
personal information.1. Data We Do Not Collect
PalmVault does NOT collect or store:
• Biometric data
• Fingerprints, face data, palm data, or templates
• Any raw biometric informationAll biometric verification happens locally on your device.2. Data We Collect
We collect minimal information to enable your account:
• Email address
• Password (encrypted)
• Basic app usage logs for security3. How Your Data Is Used
We use this information to:
• Create and authenticate your account
• Provide secure access to PalmVault features
• Maintain app security and prevent fraud4. Data Sharing
We do not sell your data.
We do not share your data with third parties except:
• When required by law
• With service providers strictly for app operation (e.g. hosting)5. Data Security
Your data is encrypted in transit and at rest.
Biometric data never leaves your device.6. Your Rights
At any time, you may:
• Request account deletion
• Request data deletion
• Request a copy of your dataTo make a request, visit: Delete Account7. Contact
Email: [email protected]
PalmVault Ltd, London, United Kingdom
DELETE ACCOUNTIf you wish to delete your PalmVault account and all associated data,
you can request this at any time.HOW TO REQUEST DELETIONEmail us at:
[email protected]Include the subject line:
“Account Deletion Request”Please provide the email address connected to your account.WHAT HAPPENS NEXT• We will verify your request.
• Your account and all associated data will be permanently deleted
within 30 days.
• PalmVault does not store any biometric data.If you have any questions, contact:
[email protected]
Terms of UseLast updated: 12 November 2025These Terms of Use (“Terms”) explain how you may use the PalmVault mobile application, website and any related services (together, the “Service”). The Service is provided by PalmVault Ltd, a company registered in England and Wales (company number 16715662) (“PalmVault”, “we”, “us”, “our”).By accessing or using the Service, you agree to these Terms. If you do not agree, you must not use the Service.1. Who the Service is for
The Service is intended for:Individuals invited to use PalmVault by a participating operator (for example, a gym, workspace, building, or venue), andOperators using PalmVault to manage access for their users.You must be 18 or over to use the Service. If you use PalmVault on behalf of an organisation, you confirm you are authorised to do so and that organisation accepts these Terms.2. Your account and detailsTo use PalmVault, you may be asked to create an account or to verify your identity using your device:You agree that any information you provide is accurate and kept up to date.You are responsible for keeping your device secure and for any activity carried out using your account or device.Do not share one-time codes, passwords, or devices you use to access PalmVault with others.If you believe your account or device has been compromised, you should contact us and, where relevant, your operator immediately.3. Biometric and authentication featuresPalmVault is designed to work with the biometric and security features of your device (for example, fingerprint, face, or passcode):Your biometric data is stored and processed by your device and/or its operating system, not by PalmVault.We do not receive or store your raw biometric templates.PalmVault uses secure tokens and cryptographic checks to confirm that your device has successfully verified you.You remain responsible for configuring biometric or passcode access on your device in line with your own security needs.4. How operators use PalmVaultIf you access a building, service, or device using PalmVault, the operator (for example, your gym, workplace, or accommodation provider) decides:Who is allowed accessWhat entitlements are granted (for example, which doors, what times, which services)How long those entitlements lastPalmVault provides the technology to manage and verify these entitlements. We are not responsible for decisions made by operators about access, pricing, membership, or service quality.Any dispute you have about access (for example, a denied entry or cancelled membership) should first be raised with the relevant operator.5. Data protection and privacyYour privacy is extremely important to us. Our Privacy Policy explains:What personal data we processHow we use and protect itYour rights under data protection lawBy using the Service, you acknowledge that your information will be processed as described in our Privacy Policy.6. Acceptable useYou agree that you will not:Use the Service for any unlawful or fraudulent purposeAttempt to access areas or services you are not authorised to useInterfere with, disrupt, or compromise the security or operation of the ServiceReverse engineer, decompile, or attempt to extract the source code of any part of the Service, except where this is allowed by lawUse the Service to infringe any intellectual property or privacy rights of othersWe may suspend or terminate your access if we reasonably believe you have breached these Terms.7. Availability and changes to the ServicePalmVault is an evolving service and may change over time:We may update, suspend, or withdraw parts of the Service (for example, to add features, fix issues, or improve security).The Service is provided on an “as is” and “as available” basis.We do not guarantee the Service will be available at all times, be error-free, or meet every specific requirement.We will try to give reasonable notice of major changes where possible.8. Intellectual propertyPalmVault and all related logos, designs, text, software, and content are owned by PalmVault Ltd or our licensors and are protected by intellectual property laws.You are granted a limited, non-exclusive, non-transferable licence to use the Service solely for its intended purpose, in line with these Terms. You may not use our name, logo, or branding without our prior written consent.9. Third-party servicesThe Service may interact with or link to third-party services (for example, hardware devices, operator systems, or app stores). We are not responsible for the content, security, or privacy practices of those third parties.Your use of any third-party service is governed by that third party’s own terms and policies.10. Ending or suspending your useYou can stop using PalmVault at any time by:Deleting the app from your device, andAsking your operator (and, if applicable, PalmVault) to remove your details where you no longer wish to use the service.We may suspend or terminate your access if:You seriously or repeatedly breach these Terms,We are required to do so by law or regulation, orWe withdraw the Service.Where reasonable, we will try to notify you before suspending or ending access.11. Our responsibility to you
Nothing in these Terms excludes or limits our liability where it would be unlawful to do so (for example, for fraud, or for death or personal injury caused by our negligence).To the extent permitted by law:We are not liable for losses that are not reasonably foreseeable or that arise from events outside our control.We are not liable for loss of profit, business, data, contracts, goodwill, or indirect or consequential loss.Our total liability to you for any claim arising from or connected with your use of the Service is limited to £100.12. Changes to these TermsWe may update these Terms from time to time (for example, to reflect changes in the Service, the law, or our business). When we do:We will update the “Last updated” date at the top, andWhere changes are significant, we will take reasonable steps to notify you (for example, via the app, website, or email).If you continue to use the Service after the updated Terms take effect, you will be treated as having accepted the changes.13. Contact usIf you have any questions about these Terms, or about PalmVault generally, you can contact us at:Email: [email protected]14. Governing lawThese Terms, and any dispute or claim arising out of or in connection with them, are governed by the laws of England and Wales. The courts of England and Wales will have non-exclusive jurisdiction.