Privacy Policy
Last updated July 24, 2026
No accounts, no passwords, no email
Passmint doesn't have accounts. There's nothing to sign up for and no password to lose. On first launch the app generates a random installation ID and a separate 32-byte device token on your device. Together these authenticate the app to Passmint's backend, but neither one is your name, your email, or anything else that identifies you personally. We never ask for or collect an email address to use the app.
What stays on your device
The tickets, passes, and cards you scan, import, or type in (barcodes, dates, names, and any other field on the pass) are stored in the app on your phone, not on our servers. Editing a pass (renaming it, changing its color, fixing a field) never leaves your device: there's nothing to sync, because the backend never held that content in the first place.
What briefly passes through our backend
Adding a pass to Apple Wallet or Google Wallet requires our backend to build and sign that wallet file. Your pass content is sent for that one request, held in memory just long enough to sign it, and then discarded. It is never written to disk and never stored at rest. If a pass uses a custom background image, it may be uploaded to generate the image shown on the Google Wallet card; it's stored addressed by a hash of its own bytes, not linked back to any pass content.
What our backend keeps a record of
To run the free-tier limit and paid credits, the backend keeps a small record per installation: your installation ID, a one-way hash of your device token (never the token itself), your credit balance or unlimited status, and, for each pass you've had signed, a serial number plus whether it carries the free-tier watermark. That's it; no pass fields live in that record. A few operational records (idempotency keys, so a retried request can't double-charge you; webhook/purchase-notification logs) are kept only long enough to do their job, 30 and 90 days respectively, and are pruned automatically on a schedule after that.
Purchases
Pay-per-pass and Unlimited purchases are handled entirely by Apple or Google through their own in-app purchase systems. Passmint never sees or stores your card number, billing address, or Apple/Google account details. We only receive a verified confirmation that a purchase succeeded, which we use to credit your account.
Manual backup & restore
The optional Export/Import feature in Settings creates a file containing your passes and a few display settings, encrypted on your device with a passphrase only you know, before it's handed to your phone's normal share sheet. Passmint's backend never sees this file. Because the passphrase is never transmitted or stored anywhere, if you lose it the backup can't be recovered by us or anyone else.
Crash reporting
Passmint uses Sentry for crash and error reporting. Stack traces, device information, and app version are transmitted when the app crashes. No personal identifying information is collected. This data is handled under Sentry's privacy policy.
What we don't do
We do not sell your data, scan pass contents for advertising, build an ad profile, or share pass data with anyone beyond the wallet provider (Apple or Google) needed to add that pass to your wallet.
Deleting your data
"Delete my data" in Settings erases every backend record tied to your installation (the installation record, purchase history, and pass serial records) immediately and permanently. It doesn't touch passes or backups already saved on your device; delete those the same way you deleted them from the app, or from wherever you saved an exported backup file.
Changes to this policy
If this policy changes, we'll update the date above. Continued use of the app after a change means you accept the revised policy.
Contact
Questions about this policy can be sent to [email protected].