Privacy policy

Last updated 25 October 2026

The short version

• Passo has no account and no analytics.
• Your passport details are encrypted on your device and never leave it. The encryption needs a device passcode.
• Passo does not sell data, show ads or share data with third parties. It has no third-party analytics, ads or trackers.
• Passo is a travel journal. It is not a travel document.

Who we are

Passo is made by Optional Labs LLP (Chandan Kumar Dash), Kotpad, Koraput district, Odisha 764058, India. Contact: contact@optionallabs.com. You can write to that address about anything in this policy.

What stays on your device

Everything you put into Passo is stored on your device only: passport details, stamps, visa pictures, trips and settings. We run no server that receives this information, so we cannot read it, recover it or hand it over.

• Passport details. Entered by hand, scanned from the machine-readable lines, or read from the chip. They are encrypted with a key held in the iPhone Keychain. It needs a device passcode to be set, and is opened with Face ID, Touch ID or your passcode. They are never uploaded. Reading the chip works where your passport supports it, and is still being tested.
• Visa pictures. Encrypted the same way, excluded from device backups, and processed on the device.
• Face image from the chip. Stored only if you choose to keep it.
• Stamps and trips. For each stamp you confirm, Passo keeps only the country, the date and a rounded position, stored on the device.

Permissions the app asks for

• Location. Used only to notice which country you are in so Passo can suggest a stamp. You confirm every stamp. By default Passo asks for access only while the app is in use. Detection in the background is optional and off unless you turn it on. Passo does not build a history of where you have been; it keeps only the country, the date and a rounded position for each stamp you confirm.
• Camera. Used to scan the machine-readable lines of your passport and to scan visas. Pictures are processed on the device.
• NFC. Used to read the chip in your passport where your passport supports it, only when you start a read and hold the phone to it. Chip reading is still being tested.
• Notifications. Local notifications only, for example a reminder six months before your passport expires. They are scheduled on the device. No push service is involved.
• Face ID. Used to unlock your vault. Passo never receives your biometric data.

Sharing and exports

When you export a page, a video or a card, you choose where it goes. Personal fields such as name, numbers and photo are hidden by default, and cards show countries and months unless you choose more. Exported files are deleted from the device after sharing. Anything you share is then in the hands of the app or person you shared it with.

What we collect

Nothing, through the app. The app contains no third-party analytics, advertising or crash-reporting code. It uses open-source libraries to read the passport chip; they run on your device and send nothing anywhere. This website uses no cookies, no trackers and no third-party scripts or fonts.

Our host, Cloudflare, processes standard server logs (such as your IP address and the pages requested) when you visit this website. We do not add analytics or cookies on top of that.

If you email us, we receive your email address and message. We use it only to reply, and we delete it when you ask. We keep emails for up to 12 months after our last reply and then delete them, or sooner if you ask.

Backups and a new phone

The key that opens your vault stays on the device and is not backed up. Passport, visa and stamp data are excluded from backups. This means a new phone, or a restore from a backup, will not bring them back, and you would add them again. Changing or removing the device passcode can make the vault unreadable.

Your choices

• Delete any stamp, visa or passport entry inside the app.
• Deleting the app removes its files. Use Delete everything in Settings first to also remove the key.
• Withdraw location, camera or notification access at any time in iOS Settings.

Your rights

Where data protection law applies to you, you can ask for access to the personal data we hold about you (on this website, mainly emails you send us), ask us to correct or delete it, and complain if you think we have handled it wrongly. In India these are your rights as a data principal under the Digital Personal Data Protection Act, 2023. Write to the privacy contact above, or to our grievance contact: Chandan Kumar Dash, grievance officer, chandan@optionallabs.com. You can also complain to your local data protection authority. The data held in the app is on your own device, so you control it directly.

Children

Passo is a general travel journal and is not directed at children and does not knowingly collect information from anyone. If you believe a child has sent us personal data, write to us and we will delete it.

Changes

If this policy changes, we will update the date at the top of this page.

Contact

Write to contact@optionallabs.com for anything in this policy, including the rights above.