Last updated: September 17, 2026.
The PDFs and images you choose are analyzed locally on your iPhone and are not uploaded. To create a pass, AnyWallet temporarily sends the details you reviewed, the color, the pass type, and the barcode bytes to the signing service. Optional photos are compressed on your device and used only to include them in the pass.
The draft is kept in memory for up to ten minutes and deleted when the pass is downloaded. Its contents are not used for advertising, analytics, profiling, or tracking, and are not shared with third parties. App Attest public keys are retained for as long as needed to prevent abuse; you can request their deletion using the contact email below.
AnyWallet uses App Attest to verify that requests come from a legitimate installation. The server stores the installation's public key and cryptographic counter to prevent abuse and replay attacks. Communication uses HTTPS, and passes are signed with an Apple certificate stored only on the server.
Versions of AnyWallet that include advertising may show a non-personalized ad after a pass has been successfully added to Apple Wallet. Watching the ad is never required to create a pass.
Google AdMob and its consent platform may process your IP address (to estimate approximate location), app or device identifiers, ad interactions, and diagnostic data. Pass fields and barcodes are not sent to Google for advertising. Where required, the app displays a consent message and provides access to privacy options. See Google's privacy policy as well.
For privacy questions or requests to access or delete data: anywallet@topitup.party.