Privacy Policy

Updated October 24, 2026

This policy explains how the developer of Passory (“the app”, “we”) handles your information. Our rule is simple: whatever can be done on your iPhone stays on your iPhone.

What stays on your iPhone

• Your tickets, photos and everything in your album are stored on your iPhone.
• When you tear off a stub to see the photo wall, the app reads when and where the photos in your library were taken, on your iPhone, to find the ones from that trip. Neither the photos nor their places are uploaded.
• Trip files you import from Umetrip or Flighty are read only on your iPhone.
• The app doesn't ask for your location or read your contacts.

With iCloud Sync on

Your tickets are kept in your own private iCloud database, looked after by Apple under its privacy policy. We can't see them.

When a ticket is redrawn by AI

Only once you agree to send photos to be redrawn is a ticket's photo sent anywhere, to draw a clean copy of it:

• The photo goes through our service (api.albu.me) to OpenAI's image model, and the result comes straight back to you. Our service doesn't keep the photo or record what's in it.
• A ticket's photo may show your name, flight, seat and ticket number; they're sent with it and used only to draw that ticket.
• OpenAI handles the data under its API data policy: it isn't used to train models, and may be kept for up to 30 days to prevent abuse. OpenAI is based in the United States.
• If you set up your own service in Settings, photos go straight to it and never through us.
• You can turn off “Send Photos to Redraw” in Settings at any time; tickets are then cropped and restored on your iPhone only.

To limit free redraws

Each device gets 2 free redraws a day. To prevent abuse, our service:

• Recognises devices with Apple's App Attest and DeviceCheck. All we keep is a public key the device made, which can't be traced back to you.
• Counts each day's redraws per device and per IP address. These counts are deleted automatically after 48 hours.

Purchases

The full album is bought through the App Store and paid to Apple. We never receive your payment details or learn your Apple ID.

What we don't do

• Ask you to sign up for an account.
• Show ads or track you across other apps and websites.
• Use third-party analytics.
• Sell or rent any of your information.

Deleting your data

Deleting the app deletes everything on your iPhone. If you used iCloud Sync, you can delete the app's data in Settings → [your name] → iCloud → Manage Storage. Our servers hold nothing linked to you, and the counting records go within 48 hours.

Children

The app isn't directed at children under 13, and we don't knowingly collect their information.

Changes

If this policy changes, we'll update this page and the date at its top, and point out significant changes in the app.

Contact

Questions about this policy? Email support@albu.me.