Passap

Draft, Arsen to confirm

Privacy Policy

What the Passap app and passap.co.uk collect, why, who else sees it, how long we keep it, and how to have it deleted. Passap is in testing and this policy is a draft. Last updated 7 November 2026.

Who we are

Passap is run by Primesoft LLC, 30 Sevkaretsi Sako St, Yerevan, Armenia, the controller of the personal data described here. Questions, requests and complaints: [email protected].

What we collect, and why

Your account

When you sign in with Apple, we receive an identifier for your Apple Account and, if you choose to share them, your name and email address (which may be an Apple private relay address). You can change your name and add a phone number. We use these to keep you signed in, to put your name on your tickets, and so tickets friends give you reach you. A sign-in lasts 90 days on a device unless you sign out.

Orders and tickets

What you book: the venue, cinema or theatre, the date and time, the ticket types and seats, the prices, and the name on each ticket where the venue asks for it. The venue's ticket system issues the barcodes; we put each one inside its Apple Wallet pass.

People you add

If you add friends or family to buy tickets for them, we keep what you enter for them: name, email, phone, traveller type (adult, student, child, senior) and the name on their ID. Only add people who are happy for you to do so. You can fill in an email or phone from your contacts: the app reads only the contact you pick, and never your whole address book. If a friend's email is the one their own Passap account signed in with, tickets you give them appear in their app.

Payments

Payments go through Stripe, by Apple Pay or card. Card numbers never reach our servers: Stripe keeps any card you save, and we see only its brand, last four digits and expiry date. Passap Premium is an App Store subscription: Apple takes the payment.

Gift cards and promo codes

When you buy a gift card, we keep its amount, the recipient's name, your message, the sender name you enter and the delivery date. These are shown, with the amount and the code, to anyone who has the card's link, so send the link only to the recipient. When a card is added to a balance, we keep which account added it and a log of what the balance paid for and got back. When you use a promo code, we record that your account used it, to apply the code's limits.

Follows

When you follow a film, play, artist, venue or stage, we keep what you follow and whether you want notifications about it. Others see only how many people follow something, never who.

Notifications and alerts

If you allow notifications, we keep your device's push token to tell you about your orders, when a place frees up at a time you're waiting for, when something you follow gets new sessions, or when a performance you booked is cancelled. We send them straight through Apple's push service. The token is removed when you sign out or delete your account. We keep the alerts you set (the venue and the time) until they end.

Apple Wallet

Each pass can be updated, for example to show it's no longer valid when an order is refunded. For that, Wallet registers the pass with our server using an identifier and push token that Apple creates for the pass on your device.

Shared ticket links

When you share tickets, anyone with the link can see the place, date and time, your first name, and the names, ticket types and seats on the shared tickets, and add those tickets to Apple Wallet. Each link is random and stops working a day after the visit (city passes: after 180 days), and you can switch it off in the app at any time. Our server doesn't record the link's address when someone opens it.

Smart Plan

Smart Plan plans an outing from one sentence you type or say. What you type is sent to Anthropic, whose model Claude reads it, together with your city, time zone and app language. If you speak instead (in the iOS or Android app, or the web app), the recording (up to 15 seconds) is sent to a speech-recognition service to be turned into text: OpenAI, xAI or a computer Passap runs itself (which deletes it within a minute), whichever we have switched on. The text is then sent to Anthropic as above, or first shown to you to edit when you dictate. While “Help improve voice recognition” is on (it is unless you turn it off, in the app’s settings or your account), we keep the recording and its text to train speech recognition and AI models, never linked to you: only the day, the language and the app’s version are stored with it, no account, device or address; you can turn it off at any time in the same settings, and delete the recordings made on that device there (for any others, write to [email protected]). A kept recording stays until it is deleted, or until it is among the oldest removed to keep the collection within a size limit. With it off, neither Passap nor its logs keep your recordings. We keep your request only while the plan is being made (at most 30 minutes after its last step). Anthropic, OpenAI and xAI process what they receive under their own terms for their APIs. You can use Smart Plan without signing in.

To watch costs, we record each call to Anthropic, OpenAI or xAI: when it happened, which feature, whether it worked, its size in tokens or seconds of audio, and its cost. Never what you typed or said, and not who made it. We keep these records for 180 days.

Technical logs

Our servers log requests, including your IP address, to keep the service secure, stop abuse (for example, too many attempts on a shared link) and fix problems. We keep these logs for 30 days.

The app and this website have no advertising, no analytics and no tracking across other apps or websites. This website sets no cookies.

On your iPhone

Some things stay on your phone and never reach our servers: your next visits shown in widgets and Live Activities, the day plans you put together yourself, and whether your Premium subscription is active (the app checks that with Apple on the device).

The app asks for two permissions, each only when you first use the feature: the microphone, to record a Smart Plan request, and adding pictures to your photo library when you save a share image (it never reads your library). It doesn't ask for your location or camera.

Who else sees it

We don't sell personal data or share it for advertising. We give it to authorities only when the law requires us to.

How long we keep it

Your account, the people you add, your saved cards, follows, alerts and links are kept until you delete your account. Orders are kept after that, no longer linked to you, because we need records of sales and refunds for accounting and the law. Request logs are kept 30 days, AI usage records 180 days. Our database backups are replaced every night, so something deleted is gone from them within two days.

Your choices and rights

You can delete your account in the app at any time (Profile, then your details, then Delete Account). That revokes Sign in with Apple, signs you out everywhere, and deletes your account, the people you added, your saved cards at Stripe, your follows, your alerts and your shared links. You can remove a friend, a card, a follow or a link on its own, too.

You can ask us for a copy of your data, to correct it, to delete it, or to object to how we use it, by writing to [email protected]. If you're in the EU or the UK, you can also complain to your data protection authority.

Changes

If this policy changes, we'll update the date at the top. If the change is significant, we'll tell you in the app.