Privacy at PassBox

A card belongs to the business that gave it to you. The business decides, through PunchMe, what the card says. PassBox keeps that information and uses it only to issue the card and keep it up to date on your phone, on the business's behalf: an iPhone downloads the card from PassBox, and on Android PassBox sends it to Google Wallet. It isn't used for anything else, sold, or used for ads.

Joining happens on PunchMe's page, and PunchMe's privacy policy covers what you give there, such as your mobile number: punchmeapp.com/privacy.

What PassBox keeps for each card:

• The business's name, logo, contact details and the card's design.
• Your stamps, and the reward you're collecting toward.
• The code the business scans at the counter.
• The latest message the business sent to the card.
• Your name, only if you gave one when you joined.
• When the card expires, if it has an end date.

When you add a card to Apple Wallet, your iPhone registers with PassBox so the card can update. It sends an identifier for Wallet on that iPhone (not your Apple ID or phone number) and a push token. When the card changes, PassBox sends an empty notification through Apple's push service, and your iPhone fetches the new card.

When you remove the card from your wallet, your iPhone tells PassBox and the registration is deleted. It's also deleted when Apple says the token no longer works. If Wallet reports a problem with a card, PassBox keeps the report for 7 days in its database, and its server logs record it too, for as long as Railway keeps logs.

On Android, PassBox creates and updates the card in Google Wallet through Google's Wallet API. PassBox keeps the id the card has in Google Wallet, which it makes from its own record of the card.

PassBox doesn't receive your Google account, email address or phone number from Google. Google handles the card in your Google account under its own privacy policy.

• Your mobile number, email address, birthday or payment details: what you gave PunchMe stays there and isn't sent to PassBox.
• Your location.
• Your IP address: PassBox's logs of the requests your phone makes leave it out.

A card stays in PassBox while the business keeps it. When the business deletes the card, PassBox removes your name and the latest message from it at once. A record of the card stays with no end date, so a phone that still has it shows that it's no longer valid: it keeps the card's stamps and its id, which is the same as the code on the card.

Messages the business sent, including any to you alone, stay in its message history with no end date. A log of what happened to each card (added to a wallet, removed from one, an update that didn't go through) is deleted after 90 days.

On servers in the United States, at Railway, PassBox's hosting provider. Connections to PassBox are encrypted. On Android the card's contents also go to Google, under Google's terms. To an iPhone, Apple's push service carries only an empty notification, and the iPhone downloads the card from PassBox.

You can remove the card from your wallet at any time. To see what PassBox holds about your card, or to have your details removed from it, write to team@passbox.co.il and say which business gave you the card. We'll answer within 30 days, and we'll tell the business what we did.

passbox.co.il sets no cookies and has no analytics or ads. It loads its fonts from Google Fonts, so your browser connects to Google when you open it.

When this page changes, the date at the top changes with it.