A person, with a deed.
World ID confirms a unique owner. The registrar reviews the deed before the property can appear anywhere.
Rental rights, made checkable
One verified broker for every room.
Owners tokenise the right to rent a room. Brokers buy it. Tenants check it in seconds.
3 rooms · one periodHedera testnetWorld ID simulator
Illustration · demo data
Step 1 of 70:00
The registrar checks the deed.
Hedera registry · opaque property commitment
The trust model
Three people. Three checks. One room.
A person, not a duplicate.
One World ID identity binds to one wallet. A second wallet for the same person is blocked before it can buy.
The person is the holder.
A tenant runs a fresh presence check. Green means the person present matches the wallet that holds the room right.
How the right moves
The whole right, in seven frames.
A rental right is not a title deed and not a fraction of a flat. It is the exclusive, time-bound right to rent one named room for one period. Hedera records who holds it; the rest of the stack makes it useful and private.
The deed is checked before anything is listed.
An owner submits the property and deed. A platform registrar reviews the evidence and approves an opaque property commitment on Hedera.
One room becomes one token.
Each bedroom is issued a single ERC-3643 token for one rental period. Room 1, Room 2 and Room 3 are separate rights, not fractions.
The owner sets the period and price.
Jan – Mar 2027, one upfront price per room. The registry rejects overlapping active periods for the same room before minting.
A real, unique person is verified.
World ID produces a proof on the broker's device. Our backend validates it and stores a nullifier against the wallet — never a face or ID document.
One payment, one token, one transaction.
USDC moves from the broker to the owner while the room token moves from the owner to the broker. Room 2 now has exactly one holder.
Anyone can check who holds the room.
A tenant scans the QR at the door. Arkiv finds the public record, Hedera confirms the holder, and a fresh presence check can match the person present.
At the end date, the right expires.
The token is burned and the listing and verification records expire. The owner can list the same room for a later, non-overlapping period.
Private by construction
Approved without publishing the address.
The registrar approves a hiding commitment, not a street address. The tenant's browser verifies a membership proof against the current approved-property root, then reads the holder separately from Hedera.
Property approval and broker match stay visibly separate. A proof shows that a registrar-approved attestation exists. It does not prove that a deed is genuine or that a QR is physically attached to the building.
Approved-property root
0x4d2a…8f10
Root version
v12 · 2026-11-05
Opaque room commitment
0x89bb…3ad2
Room period
2027-01-01 → 2027-03-31
Proof result
valid · current root
Holder read
Proof verifiedHedera · 0x9f21…7c04
Under the hood
Five systems. One clear source of truth.
Hedera is authoritative for the holder and lifecycle. Everything else either proves a person, finds a record, or keeps a private document private. The UI never treats an index as ownership.
Hedera + ATSRights and settlementRoom tokens, holder checks, freeze and burn, USDC settlement.source of truth
World IDPersonhoodOwner check, broker check, and a fresh presence check at the viewing.owner · broker · presence
ArkivPublic indexSearchable applications, room listings and rights records that expire with the period.discovery, not authority
SwarmPrivate documentsThe deed is encrypted before upload. Only an audited registrar route can decrypt it.registrar-only access
ZK verifierProperty privacyProves the room is backed by an approved property without publishing address or deed.browser-side verify
The promise
One room. One broker. One period.
Verifiable by anyone, without an account. That is the whole product.