Privacy Policy

Last updated: September 30, 2026

The short version. You can use ServePass without an account. The passes and drafts you design are saved on your phone. When you add a pass to Apple Wallet or Google Wallet, its contents are sent to our pass service so it can be signed, and to Google if you choose Google Wallet. We have no analytics or advertising SDKs, we don't sell your data, and you can delete your account from inside the app.

ServePass ("we", "our", or "us") is operated by ServePoint / DigiForce Business. This Privacy Policy explains what information ServePass handles, why, and the choices you have. It applies to the ServePass iOS and Android apps and the pass service they use.

1. Information Stored Only on Your Device

Passes and drafts. Everything you design (text fields, colours, barcode values, logos and photos, dates and locations) is saved in the app's local storage on your phone. It stays there until you delete it or uninstall the app.
Camera. If you scan an existing card, the camera image is processed on your device to read the barcode. Camera images are not saved or uploaded; only the barcode value you keep becomes part of your pass.
Photos. If you pick a logo or photo from your library, only the image you choose is used, and only as part of the pass you are designing.

2. Information We Process

Account information (optional)

Signing in is optional. If you sign in with Google, Apple or email, Firebase Authentication gives us your email address, your display name (if your provider shares it) and a Firebase user identifier.
Guest use makes no authentication calls.

Passes you add to a wallet

Apple Wallet: When you tap "Add to Apple Wallet", the pass contents are sent to our pass service, which signs them and returns the finished pass file. If automatic updates are off (the default), the service does not keep a copy after the pass is returned.
Automatic updates (optional): If you turn on automatic updates for a pass, we store that pass's contents, a random serial number and an access token so we can send it new versions. When the pass is in Apple Wallet, your device registers with our service using a device library identifier and a push token issued by Apple. These records are linked to the pass, not to your account.
Google Wallet: When you tap "Add to Google Wallet", the pass contents are sent to our pass service and then to Google's Wallet API, which stores the pass so it can appear in your Google Wallet. Google's handling is covered by the Google Privacy Policy.
Locations: If you add locations to a pass so it can appear on your lock screen nearby, those coordinates become part of the pass. ServePass does not track your device's location.

Technical logs

Our hosting provider (Google Cloud / Firebase) keeps standard request logs, such as IP address, time and error details, to run and secure the service.

3. What We Do Not Do

We do not use third-party analytics or advertising SDKs.
We do not track you across other apps or websites.
We do not sell or rent your personal data, or share it for marketing.
We do not access your contacts, browsing history or device location.

4. How We Use Information

To sign and deliver the passes you create.
To send updates to passes where you turned updates on.
To let you sign in and manage your account.
To keep the service secure and fix problems.

5. Service Providers

Google Firebase / Google Cloud: authentication, hosting of the pass service and storage of update-enabled passes.
Google Wallet API: storage and display of passes you add to Google Wallet.
Apple: Sign in with Apple, Apple Wallet and push notifications that deliver pass updates.
Google Sign-In: signing in with a Google account.

6. Retention

Local passes and drafts stay on your phone until you delete them or uninstall ServePass.
Update-enabled pass records and device registrations are kept while the pass can still receive updates. A device's registration is removed when you delete the pass from Apple Wallet. You can ask us to delete any of these records at any time (see below).
Account information is kept until you delete your account.

7. Deleting Your Data

Open ServePass → Settings → Delete account and confirm. This permanently deletes your sign-in account. Passes on your phone and in your wallet are separate: remove them in the app and in Apple Wallet or Google Wallet.

To delete update-enabled pass records we hold on our servers, email digiforcebusiness@gmail.com with a description of the pass. We will handle the request within 7 business days.

8. Your Rights (GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to complain to your local data protection authority. We do not sell personal information. To exercise any of these rights, email digiforcebusiness@gmail.com.

9. Children's Privacy

ServePass is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will delete it.

10. International Transfers

Our service providers may process data in the United States or other countries. Where data leaves your region, we rely on standard contractual clauses or equivalent safeguards.

11. Changes to This Policy

We may update this policy as ServePass changes. The date at the top of this page shows the latest revision. We will announce material changes in the app.

12. Contact

Questions? Email digiforcebusiness@gmail.com or visit the Support page.