“Proofs are generated entirely on the user’s device. Private data never leaves the user’s device,” the company says. “The verifier only learns the claim that has been proven (e.g. the user has a valid identity document meeting the minimum age requirement).”