Privacy Policy
Last updated September 8, 2026
No accounts, no passwords, no email
Passmint doesn't have accounts. There's nothing to sign up for and no password to lose. On first launch the app generates a random installation ID and a separate 32-byte device token on your device. Together these authenticate the app to Passmint's backend, but neither one is your name, your email, or anything else that identifies you personally. We never ask for or collect an email address to use the app.
What stays on your device
The tickets, passes, and cards you scan, import, or type in (barcodes, dates, names, and any other field on the pass) are stored in the app on your phone, not on our servers. Editing a pass (renaming it, changing its color, fixing a field) never leaves your device: there's nothing to sync, because the backend never held that content in the first place.
What briefly passes through our backend
Adding a pass to Apple Wallet or Google Wallet requires our backend to build and sign that wallet file. Your pass content is sent for that one request, held in memory just long enough to sign it, and then discarded. It is never written to disk and never stored at rest. If a pass uses a custom background image, it may be uploaded to generate the image shown on the Google Wallet card; it's stored addressed by a hash of its own bytes, not linked back to any pass content.
What our backend keeps a record of
One small record per installation, and it exists so that only your device can ask us to sign your passes: your installation ID (a random value your device generates), a one-way hash of its device token (never the token itself), and a count of how many passes have been signed. That count is an anti-abuse limit on our own signing certificates, not a limit on you. That's the whole record — no pass fields, no account, no email address, no password. Passmint is free, so there is no billing information of any kind.
Manual backup & restore
The optional Export/Import feature in Settings creates a file containing your passes and a few display settings, encrypted on your device with a passphrase only you know, before it's handed to your phone's normal share sheet. Passmint's backend never sees this file. Because the passphrase is never transmitted or stored anywhere, if you lose it the backup can't be recovered by us or anyone else.
Crash reporting
Passmint uses Sentry for crash and error reporting. Stack traces, device information, and app version are transmitted when the app crashes. No personal identifying information is collected. This data is handled under Sentry's privacy policy.
What we don't do
We do not sell your data, scan pass contents for advertising, build an ad profile, or share pass data with anyone beyond the wallet provider (Apple or Google) needed to add that pass to your wallet.
Deleting your data
"Delete my data" in Settings erases the backend record tied to your installation immediately and permanently. It doesn't touch passes or backups already saved on your device; delete those the same way you deleted them from the app, or from wherever you saved an exported backup file.
Changes to this policy
If this policy changes, we'll update the date above. Continued use of the app after a change means you accept the revised policy.
Contact
Questions about this policy can be sent to [email protected].