Privacy Policy

Passlist is an app and website for housing societies, made by DevTownHall (Jaimin Bhut). A society’s admin sets up its flats and invites residents, residents get passes for the society’s events, and a phone at the gate checks them. This policy explains what Passlist collects, why, and what you can do about it. It covers the Passlist app for iPhone and Android and the website at passlist.devtownhall.com. It doesn’t cover this website, devtownhall.com, which uses Vercel’s cookieless analytics and performance monitoring.

When you create an account

• Your name, as you type it when you sign up.
• Your email address, which you sign in with.
• Your password, stored only as a one-way hash, so we can check it but can’t read it.

When you join a society

• Your society and your flat, such as “B-201”, and whether you’re a resident or an admin.
• When you joined, and when you left, if you do.
• The invite link you used: who made it, the flat it was for, and when it was used. We keep only a one-way hash of the link itself, not the link.

When you get tickets

• The tickets (passes) you claim: the event, the ticket type, and when you claimed it.
• Tickets you cancel, and when. A cancelled ticket is kept, marked as cancelled, so the door can refuse it.
• When your ticket is scanned: the time, the door, and whether you were let in.

When you run a society, or check tickets at the gate

For society admins and door staff only:

• The society’s setup: its name and city, its towers and flats, and the invite links you make.
• Gate phones you pair: the name you give each one, such as “Main gate”, who added it, and when it was paired or switched off. We keep only one-way hashes of its pairing code and of the credential the phone keeps.
• Each scan: the ticket, the event, the time, the result, and who scanned it: your email address, or the gate phone.
• A device ID: a random identifier the app or browser makes the first time you open the door. It isn’t your device’s hardware or advertising identifier. It lets doors tell each other apart.
• The name you give your door, such as “Main entrance”.

Automatically

• Server logs. Our web server logs each request: the time, the address requested, your IP address, and the type of browser or device.
• Your IP address, also used for a minute at a time to limit attempts to sign in, sign up or delete an account, so nobody can guess passwords.

• Camera images. Passlist uses the camera only to read ticket QR codes, on your device. No photo or video is saved or sent anywhere. It never uses the microphone.
• Your location, contacts, photos or health data.
• Payment details. Tickets are free.
• Analytics, advertising or tracking data. The app contains no analytics, advertising or tracking code, and doesn’t track you across other apps or websites.

Passlist saves some things on your phone, or in your browser, so it works without a connection:

• Your sign-in session. In the app it’s kept in the phone’s secure storage (the iOS Keychain or the Android Keystore).
• Your tickets and their QR codes.
• On a gate phone: its credential, in the phone’s secure storage, and the society and gate it belongs to.
• For checking tickets: the device ID and door name, the list of cancelled tickets for the event, and scans waiting to be sent.

Signing out removes your session and saved tickets. Deleting the app removes everything it saved. When an admin switches a gate phone off, its credential stops working at once.

We use your information only to run Passlist:

• to create your account and sign you in;
• to put you in your society and flat, and to show you only your society’s events;
• to give you tickets, show them to you, and let you cancel them;
• to check tickets at the door, online and offline, and stop a ticket being used twice;
• to keep the service secure and working, and to look into problems and abuse;
• to reply when you contact us.

We don’t use it for advertising, and we don’t sell or rent it to anyone.

• Your society’s admins, door staff and gate phones see your name when your ticket is scanned, and whether and when it was used. Admins also see the flat each invite link is for.
• Other societies see nothing of yours. Every request is checked against the society it’s for.
• Other doors at the same event see the door name and time when a ticket was let in elsewhere.
• Our hosting provider runs the server that stores the data, on our behalf. It doesn’t use the data for its own purposes.
• When the law requires it, or to protect people’s safety or the service, we may share information with the authorities.

Your information travels to our server encrypted, over HTTPS.

• Your account, memberships and tickets are kept until you delete your account. If you leave a society, the record that you lived in your flat stays, so the flat keeps its history.
• Server logs are kept on the server only, and are removed when we next update the service.
• Backups. We back up the database each time we update the service, and keep only the 10 newest backups. A backup made before you deleted your account still holds your details until it’s replaced. Backups are only ever used to restore the service.

You can delete your account in the app (Account, then Delete your account) or on the website (Account). You type your password to confirm. Deleting happens at once:

• Your tickets for events that haven’t started are cancelled, and their places go back on sale.
• Your name, email and password are removed, and you’re signed out everywhere.
• Your society memberships end. The record that your flat had a resident stays, without your name.
• Tickets already used at the door, and tickets for events that have started, stay in the event’s records, without your name. They show as “Deleted account”.

It can’t be undone, but you can sign up again later with the same email, as a new account.

You can see your name and email on the Account screen. To get a copy of your information, correct it, or ask anything about it, email [email protected]. We’ll reply within 30 days.

Depending on where you live, for example in India, the EU, the UK or California, you may have further rights, such as to object to how your information is used, or to complain to your data protection authority. Email us to use any of them.

Passlist isn’t meant for children under 13, and we don’t knowingly collect information from them. If you believe a child has given us their information, email us and we’ll delete it.

Passwords are stored only as hashes, connections are encrypted, sign-in attempts are limited, accounts lock after repeated wrong passwords, and the app keeps your session in the phone’s secure storage. No service is perfectly secure, but we work to protect your information.

Apple handles downloads from the App Store under its own privacy policy. If you’ve turned on “Share with app developers” in your iPhone’s analytics settings, Apple may share crash reports and usage statistics for Passlist with us. That data comes from Apple, not from Passlist, and we use it only to find and fix problems.

If this policy changes, we’ll publish the new version on this page and update the date at the top. If a change is significant, we’ll say so in the app.

Questions about privacy in Passlist? Email [email protected]. We receive your email address and what you write, and use them only to reply to you.