Passora

Passora Privacy Policy

Effective date: 15 July 2026

Passora (bundle ID me.ponchotang.WalletPass) is designed to work without collecting personal data. There are no accounts, no analytics, no ads, and no trackers, and we never sell or share data with third parties for marketing. This page describes exactly what the app does with your data.

What stays on your device

• Your pass library. Passes you create (their text, colors, images, and barcode contents) are stored only in the app’s local storage on your device. They are included in your device backups (iCloud or local), which you control through your own Apple account settings.
• Photos and camera. When you use Snap-to-Pass, the photo you choose or take is analyzed entirely on your device using Apple’s Vision framework (text and barcode recognition). Images are never uploaded for analysis.

What is sent to our server, and why

When you generate a pass, the app sends that pass’s content (its text fields, colors, images, and barcode value) over an encrypted connection (HTTPS) to our signing server, because Apple Wallet passes must be cryptographically signed.

The server signs the pass in memory and returns it to your device. Pass content is not stored, not logged, and not shared. Once the signed pass is returned, no copy remains on the server.

Device verification (App Attest)

To prevent abuse of the signing service, the app uses Apple’s App Attest to prove requests come from a genuine copy of Passora. As part of this, the server keeps a record of each verified app installation: an anonymous key identifier, its public key, and a usage counter.

This record contains no personal information: no name, email, phone number, location, precise device identifiers, or anything about your passes. It cannot be used to identify you or to track you across apps, and it is used solely to verify signing requests (fraud prevention). Deleting the app abandons the key; a new installation creates a new one.

Data retention and deletion

• On your device: deleting the app deletes your pass library (passes you already added to Apple Wallet remain in Wallet until you remove them there).
• On our server: nothing about your passes is retained. The anonymous App Attest installation record described above is retained to protect the service; it contains no personal data.

Third parties

• Apple provides Wallet, App Attest, and on-device Vision processing under Apple’s privacy terms.
• Amazon Web Services hosts the signing server. AWS acts only as infrastructure; pass content passes through it in encrypted form and is not retained.

Changes

If the app’s data practices change, this page will be updated and the effective date revised before the change ships.

Contact

Questions about this policy: email support@ponchotang.me.