Privacy Policy
Effective October 2, 2026
The short version
Passful has no accounts, no ads, no tracking and no third-party analytics. To create a pass, your photo (and, if you choose, a place) is sent to our server, signed as an Apple Wallet pass, sent back to you, and deleted. We don’t keep it, and we don’t know who you are.
Who we are
Passful is made by ZeroOne Company s.r.o., Kaprova 42/14, 110 00 Praha 1, Czech Republic, IČO 23603976, registered in the Commercial Register kept by the Municipal Court in Prague, file C 429960 (“we”, “us”). We are the controller for the processing described here. Contact: [email protected].
What happens when you create a pass
Apple requires every Wallet pass to be cryptographically signed. That signing has to happen on a server that holds our signing certificate, so when you create a memory, the app sends the following to our server (api.passfulapp.com) over an encrypted connection:
- The photo, resized and re-encoded by the app. The app removes the photo’s embedded metadata (such as EXIF and GPS data) before sending.
- A place, only if you attach one: its coordinates and its name. They are written into the pass so Apple Wallet can show it on your Lock Screen when you’re nearby.
Our server writes these to temporary storage, builds and signs the pass, returns it to your iPhone, and then deletes everything, typically within seconds. We don’t store, view, analyze or share your photos or places, and we don’t use them for anything other than creating your pass. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Server logs
Our servers don’t log IP addresses, photos, places or any other request contents. Technical logs contain only an anonymous request identifier and basic diagnostic information.
What stays on your iPhone
Your memories (the passes and their previews) are stored on your iPhone, inside the app. They are included in your device backups (for example, iCloud Backup) according to your own settings. Passes you add to Apple Wallet are managed by Apple Wallet.
Place search
When you search for a place in the app, the search uses Apple Maps. What you type is handled by Apple under Apple’s privacy policy. The app does not request access to your device’s location. A place may be suggested from the photo’s own location data, which is read on your iPhone.
Sharing
When you share a pass, you share the pass file, which contains its photo and, if you attached one, the place. Sharing happens only when you choose to, through the iOS share sheet.
Purchases
In-app purchases are processed entirely by Apple. We don’t receive your payment details or your identity.
App Store analytics
If you have chosen to share analytics with app developers in your iPhone settings, Apple may provide us with aggregated, anonymous statistics (such as crash reports and install counts). This is controlled by Apple and by your settings. Passful contains no analytics or tracking code of its own.
This website
passfulapp.com uses no cookies, no analytics and no third-party resources. Our web server doesn’t keep access logs.
Hosting
Our server runs at Hetzner Online GmbH in Falkenstein, Germany, which acts as our processor for hosting. Your data doesn’t leave the European Union.
Children
Passful is not directed at children under 13, and we don’t knowingly collect information from anyone, of any age.
Your rights
Under the GDPR, you have the right to access, rectify, erase and restrict processing of your personal data, to data portability and to object. Because we don’t retain personal data, there is usually nothing for us to provide or delete, but you’re always welcome to ask at [email protected]. You may also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz) or your local supervisory authority.
Changes
If we change this policy, we’ll update it here and change the effective date above.