myColorado®  Privacy Policy

Last updated: May 8, 2026

myColorado is a digital identity platform and service suite provided by the State of Colorado (the “State”) to offer secure access to participating government programs and services. myColorado includes the digital services, applications, and websites operated by or on behalf of the State through the myColorado program, including but not limited to the myColorado mobile application (the “App”), https://myColorado.gov (the “Website”), Sign In with myColorado (the “Identity Service”), and any other digital services, features, or platforms we make available (collectively, the “myColorado Services”).

This Privacy Policy explains how and why we collect and use information about you, regardless of the source or medium. By accessing or using the myColorado Services, you are consenting to our collection and use of information in accordance with this Privacy Policy.

How we use the information we collect 

Personal Information 

We collect information about you (“Personal Information”) that you provide when you sign up for an account, interact with us, verify your identity, or otherwise use the Services. Personal Information includes, but is not limited to, your name, home address, email address, phone number, location data, driver’s license or identification card number, biometric data, and any other information you provide. Here is how we use your Personal Information:

Account Creation and Support: We collect Personal Information including, but not limited to, your name, email address, and phone number to create and authenticate a myColorado account for you. We use this Personal Information to set up a secure account for you and prevent unauthorized access to your account. We also use your Personal Information to communicate with you and support your use of the Services.

Identity Verification: We collect and use additional types of Personal Information to verify your identity, which can include your date of birth, address, device-related information (like an IP address), driver's license or state-issued identification card number, and biometric data. When you create an account through the App, the App will verify your identity by collecting measurements and images of your face to match your face with your Colorado-issued driver’s license or identification card. We will retain your photo for customer support and auditing purposes, but we do not retain your facial measurements after identity verification is complete. We also may ask you to send us a picture of your state-issued identification card to help us verify your identity. To access certain government services, you may need to provide additional Personal Information, such as a social security number or additional documentation, to be shared with our third-party identity verification partners as described below. 

Usage Data

When you create an account, sign in, or use certain features, we collect certain information about how you use the myColorado Services (“Usage Data”). Usage Data includes, but is not limited to, your device characteristics (e.g., device type, operating system, browser), network and connection information (e.g., IP address, general location), and information about how you interact with the service (e.g., session activity and behavioral patterns, including the features you use and the pages you visit). We use Usage Data for systems administration, to track user trends, and to help support your use of the myColorado Services. We also use Usage Data to prevent fraud and unauthorized access in partnership with third-party risk and fraud prevention tools as described below. 

How do we share your information?

We share your information with third parties only as needed and in accordance with this Privacy Policy and applicable law. Here is how we share your information with third parties:

Services Delivery and Support: We share your information with third-party providers who support your use of the myColorado Services. These third parties enable the hosting, security, and delivery of the myColorado Services. They also help us analyze how you and other users engage with the myColorado Services so that we can maintain and improve them.

Identity Verification: We share your Personal Information with third-party providers that support our identity verification functionality. We may also share your Personal Information and Usage Information with our Fraud Prevention and Risk Assessment partners, detailed below, to help verify your identity. When you create an account in the App, we share your Personal Information with a third-party provider that uses your facial images and measurements to match you with your Colorado driver license or identification card. If you choose to access certain government services through the myColorado Services, we may share additional Personal Information with third-party providers to enable enhanced identity verification for you. We share your Personal Information with these third parties only when you choose to verify your identity using their services.

Fraud Prevention and Risk Assessment: To protect your account and the integrity of the myColorado Services, we use third-party risk and fraud prevention tools. We share your Personal Information and Usage Data with our third-party risk- and fraud-prevention providers to help us assess the risk of fraud or unauthorized access. Data shared with these services is NEVER used to train the data models or decision engines of any third-party risk or fraud prevention tools.

Identity Service: When you use the Identity Service to access a participating State service, we share Personal Information needed to enable access to that State service with the appropriate State agency. This Personal Information may include, but is not limited to, your name, email address, a unique identifier, and your identity verification status. Each participating State agency is responsible for its own use and protection of your Personal Information in accordance with its policies and applicable law.

CORA: The Colorado Open Records Act (“CORA”), §§ 24-72-201 et seq., C.R.S., provides that all public records shall be open for inspection by any person at reasonable times, except as otherwise provided by law. Your Personal Information is generally protected by state and federal law, but the information you provide may be subject to public inspection through a CORA request. For more information about CORA, visit https://oit.colorado.gov/cora-colorado-open-records-requests.

Legal Requests: Finally, we may be obligated to share your information in response to a court order, subpoena, or other valid legal request in accordance with all applicable laws. 

Other: We will not sell or exchange your Personal Information or Usage Data.

What happens if I share my information using the myColorado mobile App?

You can share your information by pulling up the information in the App and showing your device’s screen to another person. For instance, you can present your Colorado Digital ID™ to a merchant or law enforcement officer, or your fishing license to a park ranger.

Please note that if you choose to share your information with any third parties, that information will be used in accordance with the third party’s policies and procedures. We recommend that you request information about how your information will be used before you share it.

How do I use the myColorado App to verify my identity?

There are now two ways to use the App to verify your identity with a third party (the “Verifying Party”). For example, you may use these features to provide proof of age to a restaurant server to complete a purchase.

Colorado Digital ID™ Verifier: To verify your identity using the Colorado Digital ID™ Verifier, open your Colorado Digital ID™ on the App. Then tap the “Verify this ID” on your screen, and present the QR code to the Verifying Party. The Verifying Party will use the myColorado App on their device to scan the QR code. If verification is successful, the Verifying Party’s device will temporarily display a confirmation that your Colorado Digital ID™ is authentic, and your legal name and ID number from your Colorado Digital ID™. No information will be shared without your consent, and the reading device will not store the information.

Mobile Driver License ("mDL") Reader: To verify your identity using the App’s mDL Reader, you must have stored your Colorado mDL on the App or on an Apple Wallet, Google Wallet, or Samsung Wallet. To use this function, you will hold your device near the Verifying Party’s device. This will pull up your mDL and a request for consent to share the requested information. If you provide consent, your mDL photo and age information will be sent to the Verifying Party’s device and will appear temporarily on that device. No information will be shared without your consent, and the Verifying Party’s device will not store the information.

Third-Party Links

The myColorado Services may contain links to other websites and apps, including websites and apps operated by other government agencies, nonprofit organizations, and private businesses.  When you leave the myColorado Services this Privacy Policy will no longer apply. Please review the privacy policies of any third-party websites and apps you visit to understand how they may collect and use your information.

Cookies

We use cookies and similar technologies to operate, secure, and improve the myColorado Services. These technologies may be used to maintain your session, remember settings, support sign-in and security features, understand how the Services are used, and help detect fraud or unauthorized access. We set some cookies, and service providers that support hosting, analytics, identity, and security functions may set other cookies. You can control cookies through your browser settings, but disabling certain cookies may affect how the myColorado Services function.

Deleting Your Account

You may delete your myColorado account within the App or by contacting myColorado@state.co.us. Deleting your account removes your Personal Information from myColorado and disables access to myColorado Services. You will need to re-submit your information to re-enroll in myColorado.

Deleting your account also disables access to State services that use myColorado as their identity provider. If you choose to delete your myColorado account, contact the appropriate State agencies directly for access to their services.

Please note that deleting your myColorado account does not delete information independently held by State agencies, or third-parties with whom we’ve shared your information. If you have any questions regarding how your data is managed by any State agencies or third parties, we recommend you reach out to them directly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page.

Contact Us

Please contact us at: myColorado@state.co.us 

Effective Date

The effective date of this policy is May 8, 2026.