Integration guide: Android SDK

@bazik/kyc-sdk shows the whole flow in your React Native app: consent, photo of the CIN or passport, selfie with challenges guided in Haitian Creole, result. The screens are in French. The Bazik server reads the document, checks the registry and decides.

#Requirements

• Bare React Native (no Expo), new architecture.
• React 19 or later.
• Android minSdkVersion 24.

#Install

npm install @bazik/kyc-sdk \
  react-native-safe-area-context react-native-svg \
  react-native-vision-camera@^5.2.4 react-native-vision-camera-face-detector@^2.1.0 \
  react-native-nitro-modules react-native-nitro-image
# Optional, for the voice prompts in Haitian Creole:
npm install react-native-sound@^0.13.0 @mhpdev/react-native-speech@^1.4.4

#Camera permission

In AndroidManifest.xml:

<uses-permission android:name="android.permission.CAMERA" />

The SDK asks for the permission itself before the first photo.

#Font

The screens use Plus Jakarta Sans, which ships with the package. Declare it in react-native.config.js, then run npx react-native-asset:

module.exports = {
  assets: ['./node_modules/@bazik/kyc-sdk/assets/fonts'],
};

#The flow in three steps

#1. Your backend opens the case

The API key never goes into the app. Your backend opens the case (see the API guide) and returns access_token to the app. The token is valid for that case only, for 30 minutes.

#2. The app runs the flow

import { SafeAreaProvider } from 'react-native-safe-area-context';
import { BazikKyc, createHttpApi, type DeviceIntegrity } from '@bazik/kyc-sdk';
import { visionCamera } from '@bazik/kyc-sdk/vision';
import { kreyolVoice } from '@bazik/kyc-sdk/voice'; // optional

// No implementation yet in 0.1: see "Attestation".
const integrity: DeviceIntegrity = { attest: async () => '', sign: async () => '' };

const api = createHttpApi({
  baseUrl: 'https://bazik.id',
  getAccessToken: async () => caseToken, // received from your backend
  integrity,
});

export function KycScreen() {
  return (
    <SafeAreaProvider>
      <BazikKyc
        api={api}
        camera={visionCamera}
        voice={kreyolVoice}
        onComplete={(outcome) => {
          // 'verified' | 'manual_review': for display only.
        }}
        onExit={() => {
          // The person closed the flow before the end.
        }}
      />
    </SafeAreaProvider>
  );
}

Create api once per case, not on every render.

#3. Your backend reads the decision

The result the app receives is not authoritative. Your backend reads the decision with GET /v1/cases/{case_id} (see the API guide).

#Reference

#<BazikKyc>

On Android, the flow takes over the back button: it goes back one step, calls onExit from the welcome screen and onComplete from the result.

#createHttpApi(options)

#Entry points

createMockApi and simulatedCamera are for demos and simulators: they check nothing, never in production.

#Attestation

integrity must prove that the app runs on a real device (Play Integrity) and sign the capture. Version 0.1 ships no implementation: a production server then refuses sessions without a verified attestation, and every case goes to manual review. The person sees the review screen, never a rejection.

#Limitations of version 0.1

• Attestation: no implementation of DeviceIntegrity, see above.
• iOS: not tested yet.
• Selfie challenges: the thresholds still need calibrating on more phones.
• Voice: "Souri" and "Vin pi pre" have no recording yet; the phone's French voice reads them.