no that's not normal. You shouldn't be asking for KYC and personal info from your users. You're not a financial company regulated by financial laws, you're just selling software. Now if/when you get hacked all our personal info will be out on the dark web.