Effective date: 1 August 2026 · Last updated: 7 August 2026
Short version: Osame is designed to keep your data on your device. We do not sell your personal information, and we collect only what is strictly necessary to provide the service.
1. Who we are
Osame ("we", "us", "our") is a mobile application for iOS that lets you store, organise, and manage loyalty cards, membership cards, and digital wallet passes. The app is operated by an independent developer.
If you have any questions about this policy, contact us at: support@osameapp.com
2. What data we collect
2a. Data you provide
Card details — card names, barcode numbers, custom fields, and category labels you enter manually.
Photos — only if you choose to attach an image to a card. These remain on your device.
Account information — if you sign in with Sign in with Apple or create an account, we store your user identifier and, optionally, your display name.
2b. Data collected automatically
Crash logs — anonymised crash reports via Firebase Crashlytics, which help us fix bugs. These do not contain card data.
Usage analytics — aggregate, non-identifiable data about which features are used (e.g., how often cards are added), collected via Firebase Analytics.
2c. Camera
We request camera access to scan barcodes when you add a card. Camera frames are processed entirely on-device and are never transmitted to our servers.
3. How we use your data
To store and display your cards across your devices via iCloud sync (if enabled).
To generate Apple Wallet passes on our server (the card data is sent to our Firebase Cloud Function, a pass is returned, and the data is not retained server-side).
To diagnose crashes and improve reliability.
To process in-app purchases via Apple's payment system. We never see your payment details.
4. Apple Wallet pass generation
When you request a Wallet pass, the relevant card fields (name, barcode, colour preferences) are sent to our Firebase Cloud Function hosted in the EU (us-central1). The function generates a signed .pkpass file and returns it immediately. No card data is stored on our servers after the pass is generated.
5. Data storage and security
Your card data is stored locally on your device in an encrypted database.
iCloud sync uses Apple's encrypted infrastructure — we have no access to it.
Our Firebase project uses standard Google Cloud security controls and is GDPR-compliant.
6. Sharing your data
We do not sell, rent, or share your personal information with third parties for marketing purposes. Data is shared only in these limited circumstances:
Apple — for Sign in with Apple, iCloud sync, and App Store payments.
Legal requirements — if required by law or to protect our rights.
7. Your rights (GDPR / UK GDPR)
If you are in the European Economic Area or the United Kingdom, you have the right to:
Access the personal data we hold about you.
Request correction or deletion of your data.
Object to or restrict processing.
Data portability.
Lodge a complaint with your national data protection authority.
To exercise any of these rights, email support@osameapp.com. We will respond within 30 days.
8. Children
Osame is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where required, notify you via the app. Continued use of the app after changes constitutes acceptance.