Privacy Policy

1. Who this applies to

The App is intended for authorized event or venue staff. The Site provides setup instructions and may include tools such as an optional web-based QR scanner for testing or demos.

2. Information we process

• Account and session data: Login identifiers you enter (for example username and password), authentication tokens, and related session data stored on the device as needed to keep you signed in.
• Operational and event data: Badge or QR values read by scanners, timestamps, space or location context you select in the App, event identifiers, and sync status returned by our backend services.
• Device data: Device identifiers or similar data used to secure requests or operate the service (for example a device id for signing or correlating scans), and technical data such as app version or network connectivity state where required for offline/online behavior.
• Camera: The App may use the device camera to scan codes. Images are processed for decoding; we do not describe retention of raw camera frames here unless your deployment does so — adjust this section if your backend stores images.
• Local storage: Data may be stored on the device (including offline queues) until synced or cleared.
• Website usage: The Site may receive standard server or analytics logs (such as IP address, user agent, and timestamps) as typical for web hosting. Update this if you use specific analytics or cookies.

3. How we use information

We use the information above to:

• Authenticate staff and maintain secure sessions.
• Record and validate access or attendance per your organization’s event rules.
• Sync data with backend systems, including when the device is offline and later reconnects.
• Operate, secure, troubleshoot, and improve the service.

4. Legal bases (where applicable)

If applicable law (for example GDPR) requires a legal basis, we rely on performance of a contract with your organization, legitimate interests in operating a secure access-control service, and, where required, consent for optional features. Your employer or event organizer may have additional notices.

5. Sharing

We share data with service providers that host our backend APIs and infrastructure, and with your organization as the event or venue operator. We do not sell personal information. Update this section to name subprocessors or regions if required by your compliance program.

6. Retention

We retain information only as long as needed for the purposes above, including legal, accounting, or security requirements. On-device data may remain until the App is uninstalled or data is cleared. Define concrete retention periods with your backend team and document them here.

7. Security

We use administrative, technical, and organizational measures appropriate to the sensitivity of the data. No method of transmission or storage is 100% secure.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data, or to object or port data. Staff users should often contact their organization first. You may also contact us at the email below. To request account deletion, see our Delete account & data page.

9. Children

The App is not intended for children for general consumer use. If you believe we have collected a child’s information improperly, contact us.

10. Changes

We may update this policy from time to time. We will post the updated version on this page and revise the “Last updated” date.

11. Contact

For privacy questions or requests, contact: [privacy@yourdomain.com — set NEXT_PUBLIC_PRIVACY_EMAIL]

This document is a practical template for app store listings and users. It is not legal advice; have counsel review before production use.