FoilPassPrivacy policy
Last updated October 16, 2026 · Draft for legal review
FoilPass is built so we know as little about you as possible. You don't create an account, we don't show ads, and the app contains no advertising or tracking SDKs.
Who we are
FoilPass is operated by FireX Co., Ltd., 302-46, 7 Yonggudae-ro 2790beon-gil, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea (the "operator"). Contact: support@foilpass.app.
EU representative (GDPR Art. 27): [to be appointed]. UK representative: [to be appointed].
What stays on your device
The passes you make, their text, barcodes and images, are stored in the app on your iPhone. They are included in your normal device backup. We do not keep a copy.
What reaches our servers, and for how long
| Data | Why | Kept |
|---|---|---|
| An anonymous user ID, derived by hashing the App Store transaction ID Apple gives the app | To recognise the same user after a reinstall without an account, and to apply the free limit | While you use the app |
| Pass contents and images sent for signing | Wallet only accepts passes signed by the app's certificate | Not stored. Signed and returned immediately |
| A one-way hash of each signed pass, its style and time | To stop abuse and to let only you share your passes by link | 90 days |
| Shared passes, when you create a share link | So the person you sent the link to can download it | 30 days, then deleted |
| AI artwork requests: the chosen style, a hash of your description and whether it was flagged | To prevent misuse and handle reports | 90 days |
| Reports you send about shared passes or AI images | To review and remove content | Until resolved, then up to 1 year |
| Product events (for example "pass created", app version, errors), not linked to your identity | To fix bugs and improve the app | 3 months |
| Language setting | To localise the text on your passes | While you use the app |
Your description for AI artwork is checked by an automated safety model before an image is generated. We store only a hash of it, not the text.
This website
foilpass.app uses Google Analytics to count visits and see which pages people read: pages viewed, the site you came from, device and browser type, and an approximate location derived from your IP address. In the EU, EEA, UK and Switzerland it runs without cookies and sends only anonymous pings. Elsewhere it sets first-party cookies (_ga, up to 2 years). Advertising features are off everywhere. You can block it with a content blocker or Google's opt-out add-on. The app does not use Google Analytics.
Purchases
Payments are handled by Apple (App Store) and, on Android, Google Play. We never see your card details. When purchases are enabled, RevenueCat, Inc. processes purchase records on our behalf to manage your subscription.
Who processes data for us
| Processor | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, signing service, database, AI image generation | Global network, United States |
| Apple Inc. | App distribution, payments, crash reports you choose to share | United States |
| RevenueCat, Inc. (once purchases are enabled) | Subscription management | United States |
| Google LLC (Android only) | App distribution and payments | United States |
| Google LLC | Website analytics (Google Analytics), on foilpass.app only | United States |
Transfers outside Korea and the EU are made to provide the service you request, under the processors' standard contractual clauses where required. You can refuse a transfer by not using the related feature; for example, you can use FoilPass without AI artwork.
Your rights
You can ask to access or delete the data linked to your anonymous ID by writing to support@foilpass.app and including the ID shown in the app's support email. Deleting the app removes everything stored on your device. You can also complain to your local data protection authority.
Children
FoilPass is not directed at children under 14 and we do not knowingly collect their data.
Changes
If we change this policy in a way that matters, we'll say so in the app before the change takes effect.