Privacy Policy

Last updated: September 11, 2026

GoPassy (“we,” “our,” or “us”) makes the GoPassy app for iPhone and Android (the “App”) and the website gopassy.app. This policy explains what we collect, why we collect it, and the choices you have.

1. Information we collect

When you use the App

• Account information: your email address and a unique account ID, used to sign you in.
• Pass information: the names, headlines, links, colors, and any photo or logo you add to your passes.
• Scan information: with Pro scan tracking, the QR code on your pass goes through a GoPassy short link. When someone scans it, we record the time and the type of browser and device used, so we can show you scan counts and send you scan notifications.
• Notification token: if you allow notifications, a device token so we can tell you when your pass is scanned.
• Subscription status: whether you have GoPassy Pro and when it renews or ends. Apple and Google process payments, and we never see or store your payment details.
• Usage analytics (iPhone): the iPhone app uses Firebase Analytics to record app events, such as sign-ups, passes created, and passes added to Wallet, so we can improve the App. The Android app doesn’t use Firebase Analytics.
• App integrity checks (Android): Firebase App Check uses Google Play Integrity to confirm requests come from the real GoPassy app.

If your company gives you GoPassy

You only join a company’s GoPassy team if you accept its invitation at gopassy.app/teams/join. Once you’re on a team, its admins can see your email address, the name and headline on your passes, and how many times and when your passes were scanned. They can’t see your password or change your passes. You can leave the team at any time at gopassy.app/teams/join.

When you scan someone’s GoPassy pass

You don’t need an account. We record the time of the scan and your browser’s user-agent (a description of your browser and device type), so the pass owner can see how many times their pass was scanned. We don’t record who you are, and the page doesn’t set cookies. Our server processes your IP address to deliver the page and prevent abuse, but we don’t save it with scan records.

When you visit gopassy.app

Our website doesn’t use cookies or advertising trackers. The QR code generator makes QR codes in your browser, so we never receive the links you enter. The support form opens your own email app, and we only receive what you choose to send.

2. How we use information

• To provide the App, create your passes, and sign you in
• To show scan counts and send scan notifications (Pro)
• To manage subscriptions and company team plans
• To send account emails, such as email verification and password resets
• To understand how the iPhone app is used and improve it
• To keep GoPassy secure and prevent abuse
• To answer your support requests

3. How we share information

We don’t sell or rent your personal information, and we don’t use it for advertising. We share it only:

• With the service providers below, which run GoPassy on our behalf
• With your company’s admins, if you’re on a company team, as described above
• When the law requires it

4. Service providers

• Google Firebase (sign-in, database, notifications, iPhone analytics, and App Check): Firebase privacy information
• Render (our server, which creates Wallet passes and runs short links). Pass files are created on request and aren’t kept as part of your account.
• Fly.io (hosts gopassy.app)
• Apple (App Store purchases and Apple Wallet): Apple Privacy Policy
• Google (Google Play purchases and Google Wallet): Google Privacy Policy

5. Data security

Data is encrypted in transit over HTTPS. Database security rules limit each account to its own data, and our server checks that you’re signed in, and that you own what you’re asking for, on every request.

6. Keeping and deleting your data

We keep your data while your account is open. You can delete your account at any time in the App (tap your profile icon, then Delete Account), or by following the steps on our delete your account page. Deleting your account removes your account, your passes, their scan history, the short links behind your QR codes, and any company team membership. Requests by email are completed within 30 days.

Deleting your account doesn’t cancel a Pro subscription. Cancel it in your Apple or Google Play subscription settings.

7. Your choices and rights

• See and edit your passes in the App at any time
• Delete your account and data, as described above
• Turn off notifications in your device settings
• Ask us what data we hold about you, or ask us to correct it, by emailing us

Depending on where you live, you may have additional rights under local law. Email us and we’ll help.

8. Children’s privacy

GoPassy isn’t intended for children under 13, and we don’t knowingly collect personal information from them. If we learn that a child under 13 has given us personal information, we’ll delete it.

9. Changes to this policy

We may update this policy. When we do, we’ll post the new version here and update the date at the top. For significant changes, we’ll also let you know in the App or by email.

10. Contact us

Questions about privacy? Email gopassyapp@gmail.com.