Privacy Policy

Information handled by the app

When you import, create, or edit a ticket, the app may handle:

• the ticket document, including imported PDF files;
• text extracted from the document;
• ticket titles, categories, dates, and other details;
• barcode values, barcode formats, and barcode locations within the document; and
• information you add manually.

Ticket documents and barcode values may contain personal information, such as a name, booking reference, seat assignment, travel details, membership number, or event information. Documents may also incidentally reveal sensitive information—for example, information about health, religion, political views, or event attendance. You control which documents you import, and Ticket Holder does not use their contents for purposes beyond the features and operational purposes described in this policy.

Local storage and iCloud

Ticket documents, metadata, and barcode information are stored in the app's local database on your device.

When iCloud is available and enabled for Ticket Holder, this information may also be synchronized through Apple's CloudKit service using your private iCloud account. This allows your data to remain available across compatible devices. If iCloud is unavailable or disabled, the information remains stored locally on the device.

Apple handles iCloud data under its own terms and privacy policy. Ticket Holder does not use iCloud data for advertising or tracking.

You can remove a ticket from the app to delete its locally stored app record. Data synchronized through iCloud may remain subject to Apple's synchronization, backup, and deletion processes. Deleting the app may not by itself remove information already stored in iCloud or in device backups.

Document analysis and event extraction

Ticket Holder analyzes imported documents to detect text and barcodes.

Barcode detection and optical character recognition are performed on the device using Apple frameworks.

On supported devices, Ticket Holder first attempts to extract event details on the device using Apple's Foundation Models. If on-device extraction is unavailable or fails, the text extracted from the document is sent over an encrypted HTTPS connection to api.ticketholder.app. The service uses that text to identify information such as the event title, date, and ticket type and returns the result to the app.

The original PDF is not sent to the event-extraction endpoint by the current app. However, the extracted text may contain personal or sensitive information that appears in the document.

Apple Wallet pass generation

If you choose Add to Apple Wallet, Ticket Holder sends the following information to api.ticketholder.app so that the service can generate a Wallet pass:

• ticket type;
• ticket title;
• event date and formatted date;
• barcode value and format; and
• the ticket label or details.

This transmission occurs only when you request Wallet pass generation. The generated pass is returned to the app and presented using Apple's PassKit interface. If you add the pass to Apple Wallet, Apple handles it under Apple's terms and privacy policy.

Calendar and sharing

If you choose to add a ticket to Calendar, the app prepares an event containing the ticket title, date, and details and presents Apple's calendar interface. The event is added only after you confirm it. Apple or your selected calendar provider may process the event according to its own privacy policy.

If you choose to share a ticket, the app creates a temporary copy of the ticket PDF and presents the system share sheet. Information is shared only with the person, application, or service you select. Those recipients handle the information under their own privacy practices.

Server and network information

When the app contacts api.ticketholder.app, the server and its infrastructure may automatically receive standard network information, such as:

• IP address;
• request date and time;
• endpoint requested;
• device or application networking information; and
• error and security information.

This information may be used to deliver the requested feature, maintain security, prevent abuse, investigate failures, and operate the service.

Analytics, crash reporting, advertising, and tracking

The current version of Ticket Holder does not integrate a third-party analytics SDK, advertising SDK, or third-party crash-reporting SDK. Ticket Holder does not use app data to track you across applications or websites and does not sell your personal information.

Apple may provide developers with aggregated App Store, installation, performance, or diagnostic information according to your device settings and Apple's privacy practices.

If analytics, crash reporting, or advertising is introduced in a future version, this policy and the applicable App Store privacy disclosures will be updated before that processing begins.

How information is used

Information is handled only as needed to:

• store, display, organize, and synchronize your tickets;
• detect text and barcodes;
• extract ticket and event details;
• generate an Apple Wallet pass when requested;
• add an event to Calendar or share a document when requested;
• operate, secure, troubleshoot, and improve Ticket Holder; and
• comply with applicable legal obligations.

Where data-protection law requires a legal basis, we rely on the following bases:

Where consent is legally required, we will request it through the app or the relevant system interface. You may withdraw consent through the applicable device setting or by contacting us, without affecting processing that occurred before withdrawal.

Sharing and service providers

We do not sell personal information. Information may be disclosed only:

• to Apple when you use iCloud, on-device Apple services, Calendar, or Apple Wallet;
• to infrastructure and service providers that operate api.ticketholder.app or support a requested feature;
• to a recipient you select through the system share sheet;
• when required by law or a valid legal request; or
• when necessary to protect users, the public, or Ticket Holder from fraud, abuse, or security threats.

Service providers may process information only for the services they provide to Ticket Holder and subject to appropriate confidentiality and data-protection obligations.

Data retention

Ticket information stored by the app remains on your device until you delete the ticket, remove the app's data, or otherwise erase the device. Information synchronized through iCloud is retained and deleted according to your actions, device backups, synchronization behavior, and Apple's policies.

We retain server-side information only for as long as necessary to provide the requested service, maintain security and reliability, meet legal obligations, and resolve disputes.

Security

We use reasonable administrative and technical measures intended to protect information. Network requests to Ticket Holder's production API use HTTPS encryption in transit. Local and iCloud information also benefits from security controls provided by the operating system and Apple.

No storage or transmission method can be guaranteed to be completely secure.

Your choices and rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or portability of personal information, or to object to certain processing. You may also have the right to withdraw consent and complain to your local data-protection authority.

Most ticket information can be managed directly in the app. You can disable iCloud access for Ticket Holder through your device settings and can choose not to use server-assisted extraction, Wallet generation, Calendar, or sharing features where those choices are available.

To exercise a privacy right or ask for assistance deleting server-side information, contact us at [email protected]. We may need sufficient information to identify the relevant server request, and because Ticket Holder does not require an account, we may not always be able to associate server records with a particular person.

Children's privacy

Ticket Holder is not directed to children under the minimum age at which they may independently consent to data processing in their country. We do not knowingly collect children's personal information for advertising or profiling. If you believe a child has provided personal information through the service, contact us so that we can review and, where appropriate, delete it.

International data transfers

Ticket Holder, Apple, and our service providers may process information in countries other than the country where you live. Where required, we use legally recognized safeguards for international transfers.

Changes to this policy

We may update this Privacy Policy when Ticket Holder's features or data practices change. We will publish the revised policy with a new effective date. If a change materially affects how information is handled, we will provide an appropriate notice in the app or through another suitable channel.

Contact

For questions or requests concerning this Privacy Policy, contact: