← Tessera
Tessera Privacy Policy
Effective 28 August 2026 · tessera · Kelvin Tan
Tessera turns physical cards — membership, loyalty, club and similar cards — into Apple Wallet passes. This policy describes exactly what the app processes, what leaves your device, and what is kept. The short version: your card photos never leave your iPhone, the app has no accounts, and the only things stored anywhere are listed below.
What stays on your device
- Card photos. Recognition runs on your iPhone using Apple's Vision framework. The photo is discarded after recognition — it is never saved to your device's library, never stored by the app, and never uploaded.
- Your saved cards. Card details you keep are stored locally on your device. If you turn on iCloud backup in Settings (off by default), they sync through your own iCloud account under Apple's terms; we never see them.
- Expiry reminders. Scheduled locally on your device. Reminder notifications name the card but never show its number.
What is transmitted, and why
- Pass creation. When you create a pass, the confirmed details (card name, holder name, number, expiry, barcode value, colours, and a logo if you added one) are sent over an encrypted connection to our signing service, which builds and cryptographically signs the Apple Wallet pass. These details are used only to service that request and are not stored, logged or shared.
- Free-tier count. The app generates a random identifier on your device (it contains no personal information). Our service stores this identifier with a count of the cards it has created, to operate the free tier of three cards. Nothing about the cards' contents is stored — only random identifiers.
Purchases
Purchases are processed by Apple. We use RevenueCat to manage subscription status; it receives purchase history tied to the same random device identifier, not to your name or email. We never see payment details.
Advertising
The free tier shows ads served by Google AdMob. AdMob may collect device identifiers (such as the advertising identifier, with your permission via Apple's App Tracking Transparency prompt), coarse location derived from IP address, ad interaction data and diagnostic data, and may use some of this to track across apps. Declining the tracking prompt keeps ads, just less personalised ones. See Google's privacy policy. Tessera Pro removes ads entirely, and with them this collection.
What we never do
- No accounts, and no collection of your name, email or contacts.
- Card photos, recognised text, barcode values and NFC data are never logged or retained by us.
- Nothing is sold to, or shared with, data brokers.
Your choices and rights
- Delete any card, or all cards, in the app — Settings → Delete All Card Data.
- Control ad tracking in iOS Settings → Privacy & Security → Tracking.
- To have the free-tier record for your device identifier deleted, email us; note the identifier is random and we cannot link it to you — include it from any support correspondence, or simply ask and we will explain how to find it.
Children
Tessera is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes, the new version appears here with a new effective date. Material changes are noted in the app's release notes.
Contact
kelvin.vins@gmail.com
Tessera creates personal digital copies of cards you already own. It is not an official credential and is not affiliated with any card issuer.