Privacy Policy

1. Introduction

ButterPass ("the App," "we," "us," or "our") is developed and operated by William Termini (ABN 47 283 458 067). This Privacy Policy explains what data the App processes, why, and your choices. It applies to ButterPass on Android and Wear OS, and on iPhone, iPad, and Apple Watch.

2. Summary

• Your card data stays on your device. We run no server and hold no copy of it.
• We require no account, sign-in, name, address, or age.
• We do not sell or share your personal information.
• The only data that leaves your device is optional watch sync (device to device) and, on the free tier, the advertising and purchase data that Google and Apple need. The sections below describe these.

3. Card Data (On Your Device)

The card information you enter, scan, or import — titles, barcodes, images, PINs, and notes — is stored only on your device. It never reaches our servers.

Watch Sync: If you use ButterPass on a smartwatch, the App syncs card data from your paired phone to the watch. On Apple Watch it uses Apple's Watch Connectivity between your paired devices. On Wear OS it uses Google's Wearable Data Layer; when your devices are not directly connected, Google may relay the data, encrypted in transit, through Google's servers (see Google's privacy policy). Sync data never passes through our servers. Watch widgets and complications read a reduced local snapshot that excludes PINs and barcodes.

4. Data Processed By Google and Apple (Free Tier)

The App has no backend. On the free tier, these third parties process data under their own privacy policies, and may process it outside your country under their own safeguards:

• Advertising (Google Mobile Ads / AdMob): Where you consent, AdMob uses your device's advertising identifier (the Android Advertising ID, or Apple's IDFA where you allow tracking) to serve ads. Google and its partners may use it to serve ads across apps. We do not receive, store, or link this identifier to your cards. If you do not consent, ads are non-personalized or limited, with no advertising identifier.
• Purchases (Google Play Billing / Apple App Store): The store you bought from manages your Premium status and restores it. We receive purchase status only — never your payment details or card numbers.
• Crash and Diagnostic Data (Google Play / Apple): Subject to your device settings, the platform may share diagnostic data that helps us fix bugs. It may include device and operating-system details. It does not include your card data.

5. How the App Uses Data

The App processes data on your device to show and manage your cards, to scan barcodes through your camera, and to let you crop and customize card images. All of this happens on your device.

6. Permissions

The App is sandboxed from other apps. It requests only what a feature needs, when it needs it:

• Camera: To scan barcodes and photograph cards. Active only while scanning or capturing. No image is sent anywhere.
• Photos: The App reads only the images you pick through the system photo picker. It requests no access to your photo library.
• Notifications (iOS): Requested the first time your watch asks the phone to show an "Open on iPhone" notification. These are local. We send no push or marketing notifications.
• Internet: To load ads and, on Android, to sync with Wear OS. Network access cannot reach your card data.

7. Advertising and Consent

The App shows banner ads through Google Mobile Ads unless you buy Premium. On the free tier you may also choose to watch a rewarded ad to unlock a watch-sync slot.

Consent (GDPR / CCPA): In regulated regions, the App uses Google's consent flow before it requests any ad. If you refuse, ads are non-personalized or limited — contextual only, with no advertising identifier.

App Tracking Transparency (iOS): On iOS, personalized ads also need your permission through Apple's App Tracking Transparency prompt. If you decline, ads serve without the IDFA.

Withdrawing Consent: You can change or withdraw consent at any time: in the App's privacy options where a persistent entry point is required, in iOS Settings → Privacy & Security → Tracking, and in Android system settings.

8. Retention and Deletion

You control your data. You can delete individual cards or the whole wallet in the App at any time. Uninstalling the App deletes all card data from your device. A backup file you exported yourself (for example, a .bpass file) stays under your control; delete it yourself.

9. Your Rights

Data Controller: Under the GDPR, William Termini is the Data Controller for the App. Because your card data stays only on your device, we have no technical access to it.

• Access and Deletion: You exercise these rights yourself by viewing or deleting cards in the App. We cannot fulfill an access-by-email request, because we do not hold your data.
• Portability: You can export or share your cards through the App's export features.
• California (CCPA / CPRA): We do not sell or share your personal information.

10. Children

ButterPass is not intended for children under 16. We do not knowingly collect information from children. If you believe a child sent us information (for example, by support email), contact us and we will delete it.

11. Data Requests and Law Enforcement

Your card data stays on your device. We run no database of card data and have no access to it. We therefore cannot produce card data in response to a request from any person, government body, or court. We hold none.

12. Changes to This Policy

We may update this policy for changes in technology or law. When a change is material, the App shows you the updated policy to review before you continue.

13. Contact

William Termini (ABN 47 283 458 067) Email: legal@butterpass.app Support: support@butterpass.app