KardinLast updated: 2026-11-04
Kardin turns your tickets and cards into Apple Wallet passes, and it's built so we don't need your data to do it. This policy explains what stays on your iPhone, the one thing that leaves it when you create a pass, and the few cases where Apple or another party is involved.
In short: Kardin has no account, no analytics, no ads and no trackers. Your PDFs, photos and scans are read on your iPhone and never uploaded. When you create a pass, only the pass's content (its fields, barcode, colours and date) is sent to our server to be signed, and the server sends the pass straight back without storing it.
Who we are
Kardin (the "app") is provided by the Kardin team ("we", "us"), which is responsible for any personal data processed through the app, the pass-signing service and this website (the "controller" under the GDPR). For anything about privacy, write to privacy@kardin.app.
What the app does on your iPhone
When you scan a barcode, import a PDF, choose a photo or share a file to Kardin, the app reads it on your iPhone: the barcode with the iPhone's built-in barcode reading, the text from the PDF or with Apple's on-device text recognition, and the colours from the image. Your files, photos and camera images are not uploaded to us or to anyone else.
The app keeps a list of the passes you've added (their titles, fields, barcode values and colours, but not the original files) on your iPhone, so it can show them, open them in Apple Wallet and make corrected copies. It also keeps your settings there. You can delete any pass from the list, and deleting the app deletes all of it.
What's sent when you create a pass
Apple requires every Wallet pass to be signed with a certificate, and that signing key must stay on a server, never inside an app. So when you tap Add to Apple Wallet, the app sends our server the content of that one pass:
- the field labels and values you see on the review screen (for example the event name, date, venue and seat, or the card's name and member number);
- the barcode's value and format;
- the pass's colours, and the date Wallet may use to suggest it on the Lock Screen.
The server signs the pass, sends it back to your iPhone, and keeps nothing: passes and their content are not stored, logged or used for anything else, and there's no account to tie them to. The connection is encrypted (HTTPS).
Our server is hosted by Vercel Inc., which acts as our processor: like any web host, it processes technical data such as your IP address to deliver the response and protect the service against abuse, only on our instructions and under a data processing agreement that requires the same level of protection as this policy. Vercel may process this data in the United States and other countries; transfers from the European Economic Area are covered by the safeguards in Vercel's data processing agreement, such as the European Commission's Standard Contractual Clauses. See Vercel's Privacy Policy. We don't use that data to identify you.
We process the pass content to provide the service you ask for when you tap Add to Apple Wallet (GDPR Article 6(1)(b)), and the technical connection data for our legitimate interest in running a secure, working service (Article 6(1)(f)).
Data we collect
Beyond the pass content described above, which is processed only to sign your pass and then discarded: none. The app contains no analytics, crash reporting, advertising or tracking SDKs. It doesn't use your location, your contacts or any identifier for advertising, and it doesn't track you across other companies' apps or websites. We do not sell, rent or share personal data, and nothing is used for advertising or profiling.
That's why the app's App Store privacy label says Data Not Collected: the pass content is only used in real time to sign the pass you asked for, and is not kept.
How long we keep data
- Pass content: not kept. It exists on our server only while your pass is being signed, a fraction of a second.
- Hosting logs: Vercel keeps short-lived technical logs (such as IP addresses) for operating and securing the service, under its own retention periods; we don't use them to identify anyone.
- On your iPhone: your pass list and settings stay until you delete them or the app.
- Emails you send us: kept only as long as needed to answer you.
If we ever add optional crash reports, they'll be off by default, will never include your tickets or pass content, and this policy and the App Store privacy label will be updated before that ships.
Apple Wallet and iCloud
Passes you add live in Apple Wallet, under Apple's control: Wallet may sync them to your other devices through iCloud, and passes can be viewed in Wallet without unlocking with Face ID. That's why Kardin isn't meant for bank cards, PINs, passwords or ID documents. See Apple's Privacy Policy.
Permissions the app asks for
- Camera: to scan barcodes and take photos of tickets and cards. Camera images stay on your iPhone.
- Photos: when you choose a photo or screenshot, through Apple's photo picker. The app only receives the photo you pick.
- Files and sharing: when you import a PDF or image, or share one to Kardin from another app, the app only receives that file.
- Face ID: only if you turn on Require Face ID in the app's Settings, to unlock the app. Face ID data never leaves your iPhone's secure hardware and is never available to us.
You can change these in iOS Settings at any time.
Children
The app is not directed at children under 13 (or the minimum age in your country), and we knowingly collect no personal data from anyone, of any age.
Your rights
Under the GDPR and similar laws you have rights to access, correct, delete and port personal data, and to object to or restrict its processing. We don't keep the pass content we sign, so there is nothing on our side to access or delete, and there's no account to close. Your passes and settings live on your iPhone and in Apple Wallet, where you control them:
- Delete a pass: tap it on the Home screen → Delete pass, and choose whether to also remove it from Apple Wallet.
- Delete everything: Settings → Remove all passes, or delete the app.
- Withdraw permissions: turn off camera or photo access for Kardin in iOS Settings at any time.
To exercise any right or ask a question, write to privacy@kardin.app; we reply within one month. If you write to us, we use your email only to answer you and delete the conversation when it's resolved, unless the law requires otherwise. You can also complain to your data protection authority.
This website
https://kardin.app is a static website hosted by Vercel. It uses no cookies, no analytics and no trackers. Like any web host, Vercel processes technical data such as IP addresses in server logs to deliver and secure the site. Photos on guides and articles are loaded from Unsplash's image servers, which receive your IP address and browser details when they deliver an image; see Unsplash's Privacy Policy. The app itself never contacts Unsplash.
Changes
If this policy changes, we'll update the date above and, for meaningful changes, mention it in the app's release notes.