1. Who we are
PassPod is developed by What a Nice Idea ("we", "us", "our"), an independent software studio. This policy explains what information the app processes and the choices you have. For privacy questions, contact privacy@whataniceidea.com.
For the EU GDPR and Greek data-protection law, What a Nice Idea is the data controller for the limited processing described here.
2. Offline-first design
PassPod is offline-first. The loyalty cards and coupons you add are stored in a database on your device and work without any network connection. You can use the entire wallet without creating an account. Signing in and cloud sync are optional and described below.
3. What data we process
| Category | Examples | Where it lives |
|---|---|---|
| Loyalty cards | Brand, card/barcode number, code format, colour, label, notes | On your device; in our cloud only if you're a signed-in premium user with sync on |
| Coupons | Coupon codes, labels, expiry you add | On your device; in our cloud only with premium sync |
| Account record (optional) | An identifier from your Google/Apple sign-in (such as your email or a subject ID) and premium status | Our authentication/cloud backend, only if you sign in |
| Technical data | IP address and request metadata, used transiently for security and rate-limiting | Our server, short-lived |
Your loyalty-card numbers are the values you choose to add. We treat them as your data: stored locally, and synced to our backend only when you are a signed-in premium user with sync enabled. We do not sell your data or use it for advertising.
4. Sign-in with Google / Apple
Sign-in is optional and exists to enable premium cross-device sync. PassPod uses Sign in with Google and Sign in with Apple — we do not run our own username/password system.
- When you sign in, the provider gives the app a verified identity token. From it we store a minimal account record — an identifier such as your email address or the provider's subject ID — to recognise you and link your premium status and synced data.
- We do not receive your Google or Apple password.
- If you prefer, you can keep using PassPod with no account at all and simply not sync.
5. Premium cross-device sync
Cross-device sync is a premium feature. When it is active for a signed-in premium account:
- Your cards and coupons are stored in our cloud backend (Cloudflare D1 database and R2 storage) so they can appear on your other signed-in devices.
- Deletions are synced as soft-deletes (tombstones) so removing a card on one device removes it on the others.
- If you are not a premium user, or you don't sign in, your cards are not stored on our servers.
- A free local export/backup (for example a JSON file you save yourself) is always available, so you're never locked in and never required to use our cloud.
6. Brand catalog
To help you add cards quickly, the app downloads a public catalog of known loyalty brands (names, logos, default barcode formats) from our server. This is generic reference data — fetching it does not send us your personal cards or identity.
7. Scanning & importing cards
You can add a card by scanning its barcode/QR with the camera, decoding one from a photo, or importing an Apple Wallet .pkpass file. This processing happens on your device; the resulting card is saved to your local wallet (and synced only under the premium/sign-in conditions above).
8. Premium & billing
Premium is purchased through your app store's billing (Apple App Store / Google Play). Payments are handled by the store under its own privacy policy; we do not receive your payment-card details. We record only whether your account is premium, to unlock sync.
9. Device permissions
| Permission | Why |
|---|---|
| Camera | To scan a card's barcode or QR code. |
| Photos / files | Only when you import a card from a photo or a .pkpass file, or export your wallet. |
10. Third-party services
- Google Sign-In and Sign in with Apple — used only if you choose to sign in, for authentication.
- Cloudflare — hosts our backend, catalog, database, and storage (as our processor), used for the catalog and, for premium users, sync.
- Google ML Kit — on-device barcode scanning; runs locally.
- Your app store (Apple App Store / Google Play) — distributes the app and handles premium billing under its own privacy policy.
No advertising SDKs and no profiling analytics are integrated.
11. Legal basis
- Contract / performing the service you asked for: authenticating you, storing your premium status, and syncing your cards when you enable it.
- Legitimate interests: keeping the service secure and preventing abuse (e.g. transient rate-limiting).
- Consent: camera permission and choosing to sign in, both revocable.
12. Retention & deletion
- On-device data stays until you delete it or uninstall the app.
- Account & synced data are retained while your account is active. You can delete cards (which syncs the deletion), and you can request deletion of your account and its server-side data at any time.
- Technical/rate-limiting data is short-lived and not used to profile you.
13. Your rights
Under the GDPR you have rights to access, correct, delete, export (portability), restrict, and object, and to withdraw consent. You can manage most data directly in the app, including a free local export. For account or synced data, contact us and we'll action your request. You may also complain to your supervisory authority — in Greece, the Hellenic Data Protection Authority (HDPA).
14. Security
Connections between the app and our servers use HTTPS/TLS. Access to synced data requires a valid sign-in token, and cloud sync is gated to premium accounts server-side. We design PassPod to keep as much as possible on your device.
15. Children
PassPod is a general-audience wallet app and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has signed in, contact us and we'll remove the account.
16. Changes to this policy
We'll update this policy as the app evolves, revising the "last updated" date and, where appropriate, notifying you in the app.
17. Contact
Reach us at privacy@whataniceidea.com.