Privacy Policy

Beep (“Beep”, “we”, “our”) is an iOS wallet for loyalty and gift cards, made by TIT B.V. in the Netherlands. It collects nothing that identifies you and nothing about your cards. There is no account, no analytics, no advertising, and no third-party SDK in the app. The only thing it sends us without being asked is an anonymous crash and performance report, described below, which you can turn off.

Card names, numbers, PINs, balances, spending you log, and photos you add are stored on your device. Beep has no server that holds them and no way to read them.

If you are signed in to iCloud, your cards sync through your own iCloud private database — the same place your other apps’ data lives. That is between your devices and Apple; Beep neither operates nor can access it. Signing out of iCloud leaves your cards on the device.

The camera is used to read a barcode and the text printed on a card, and only while the scanner is open. Frames are processed on the device. When a card is added, the picture it was read from is kept as that card’s first photo — stored with your cards, on your device (and in your iCloud private database if sync is on). Beyond that one picture, frames are never recorded, stored, or sent anywhere.

If you choose a photo from your library instead, Beep reads only the photo you pick, on the device, and keeps it as the card’s first photo in the same way. Deleting a card deletes its photos.

On an iPhone with Apple Intelligence turned on, Beep also asks Apple’s on-device model to read the store and the PIN off that picture. The model runs on the iPhone itself; the picture is not sent to Apple or to anyone else.

If a card has an expiry date, Beep can remind you before it runs out. The reminders are scheduled on your iPhone and delivered by iOS; nothing about the card is sent to Beep or anyone else. Beep asks for permission to send notifications only after you save a card with an expiry date. You can turn reminders off in Beep’s Settings, or turn off notifications for Beep in iOS Settings.

So that widgets, Siri, the Shortcuts app and Spotlight can show and open your cards, Beep keeps a short list on your iPhone of each card’s name, colour, logo and, for gift cards, balance. It holds no card numbers, PINs or photos, stays on this iPhone — it isn’t synced to your other devices — and is not sent anywhere. What Siri does with a spoken request is covered by Apple’s privacy policy.

The store list and every logo are bundled inside the app. Beep never asks a server which store a card belongs to, because that question would reveal which cards you hold.

Settings has a link that opens a store-suggestion form in your browser. The form is hosted by Google and its own terms apply there, the same as any web page you open. Beep sends nothing with the tap: no card, no wallet contents, and no identifier. Nothing on that form asks about your cards, and you never have to open it.

Adding a card to Apple Wallet needs an Apple-issued signature. Beep builds the pass on your device and sends only a list of SHA-1 hashes of its files to the signing service (sign.titdev.nl), which returns a signature. The service receives no store name, no card number, no balance — only hashes — and stores nothing. It uses Apple’s App Attest to confirm the request came from a genuine copy of Beep.

So that we can see where Beep crashes, freezes or is slow, it sends the reports iOS prepares for it through MetricKit, a framework built into iOS — not a third-party SDK — to our server at diag.titdev.nl, unless you turn off “Share crash reports” in Settings. A report contains where the app stopped and the code that was running, and measurements such as launch and response times, memory and energy use, network use and how long the app was open, along with the app version, the iOS version, the iPhone model and technical details such as whether Low Power Mode was on.

A report contains no card names, numbers, PINs, balances or photos, and no identifier that links it to you, to your device or to your other reports. The server runs on Cloudflare; it stores reports without your IP address and deletes them after 90 days. Turning the switch off also cancels the reports still waiting to be sent.

“Send feedback” in Settings opens an email to info@titdev.nl. In Apple’s Mail app it comes with recent reports attached, which you can remove before you send it; other mail apps get only a one-line summary of the app version, the iOS version, the iPhone model and a count of recent crash and freeze reports. We use what you send only to answer you and fix the problem, and delete it once that is done.

• No name, email address, phone number, or Apple ID — unless you email us yourself, for example with feedback.
• No location or GPS.
• No tracking or advertising identifiers.
• No analytics or crash-reporting SDKs.
• No device fingerprinting.
• We never sell, rent, or share your data with third parties — there is nothing to sell.
• Nothing that would let Beep, or anyone else, build a picture of where you shop.

• Apple iCloud. If you are signed in, cards sync through your own private CloudKit database. Apple’s privacy policy.
• Cloudflare. Hosts the Apple Wallet signing service, which receives only file hashes and keeps no records or logs of request contents. It also runs our crash-report server, diag.titdev.nl, which stores reports without IP addresses and deletes them after 90 days. Cloudflare’s privacy policy.
• Google. Hosts the optional store-suggestion form, which opens in your browser only if you tap the link. Beep sends it nothing. Google’s privacy policy.

Deleting a card in Beep removes it from the device and, if sync is on, from your iCloud private database. Deleting the app removes everything stored locally. There is no server-side record of yours to request or delete, because none is ever created.

Crash and performance reports carry nothing that ties them to you, so there is no way to find yours on the server; it deletes every report after 90 days.

We do not use cookies or web tracking technologies.

Beep collects nothing personal from anyone, which includes children. It is not directed at children under 13.

If this policy ever changes, the new version ships in an app update, is shown inside the app, and is published here with an updated date.