WaatDutDutPrivacy policy
In short
- Your cards are stored on your iPhone.
- Sync is optional and uses Sign in with Apple; synced cards are encrypted.
- Your location is processed on your iPhone and never sent to us.
- No ads, no tracking, and we don't sell your data.
Who we are
WaatDutDut is a Hong Kong membership-card app run by an individual developer. Contact: info@waatdutdut.com.
Cards stay on your iPhone
The cards you add (brand, member number, member code) are stored on your iPhone, and widgets read them from there. If you don't sign in, your cards never leave your iPhone and we never receive them.
Camera and photos
The camera scans a code when you add a card, and the app reads a screenshot you pick to find the code. All of this happens on your iPhone. Camera images and screenshots are not uploaded.
Optional sync with Sign in with Apple
If you sign in, we receive:
- an account identifier, and the email Apple gives us (you can hide it);
- your synced data: your cards, groups and card photos. It is encrypted with AES-GCM in transit and at rest, on Supabase servers in Tokyo;
- a log of key access: the time and reason each time your encryption key is fetched.
To be clear: the decryption keys are held by the server, with logged access. That means the operator can read your synced data. We only access it when needed, and we don't claim "zero knowledge". The app works fully without signing in. If you sign out, the cards on your iPhone stay and just stop syncing.
Analytics
The App Store version sends anonymous usage events, such as "added a card", "finished the first-run guide", "bought Pro", "reminder shown" and "opened a card". Events carry a random per-install identifier that is never joined to your account. Some events carry one simple option, such as whether a card was opened from a widget, a reminder, Nearby or inside the app, or whether location access is While Using or Always. Each event also carries the app version, iOS version, device model, language, region and time zone. It never sends card data, codes, location, shop names or your name. Events are collected by TelemetryDeck, an EU company, and are not used to track you or for ads.
Location
Nearby and Lock Screen reminders use your location. Your location is processed on your iPhone only: never uploaded to us, never written to synced data, and never put in a report.
To find nearby shops, the app searches with Apple Maps (MapKit). The search words (such as a brand name) and the search area (a region on the map) go to Apple and are handled under Apple's privacy policy. We don't receive them. Reminders are optional, and you can turn location off in iPhone Settings at any time.
Notifications
Lock Screen reminders are local notifications made on your iPhone. They don't go through our servers, and the app has no push notifications. A reminder shows a shop name and your card name, never a member code. You can turn them off in iPhone Settings at any time.
Reporting a problem
When you send a report from the app (Report a problem, or Can't scan? Report), we store the text of your report, your email if you give it (optional, used only to reply), the app version, iOS version, device model and app language, the related membership programme and code format if any, and the time it arrived.
A report never includes a member code, member number, card name, location or account identifier. Reports are kept in our report table: the app can add to it but not read it, and only the developer can read it. If you leave an email, we may email you back.
Purchases
Pro is a one-off purchase through Apple. Apple handles payment; we never see your payment details. The purchase belongs to your Apple ID.
Keeping and deleting data
- Delete your account in the app, while signed in, under Settings → Account → Delete account. This removes your account, synced data and key log from our server. The app does not remove the Sign in with Apple link for you, so do it yourself: iPhone Settings › your name › Sign in with Apple › 滑嘟嘟 › Stop Using. Your Pro purchase stays with your Apple ID.
- Data on your iPhone is removed when you delete the app.
- Reports are kept until we've dealt with them. They are not linked to your account. To delete one you sent, email us with what it said and when you sent it.
- Analytics events are anonymous and kept by TelemetryDeck under its own retention period.
- Where it's stored: reports and synced data are on Supabase servers in Tokyo, Japan.
Children
WaatDutDut is not made for children under 13, and we don't knowingly collect their personal data. If you are a parent and think a child gave us data, email info@waatdutdut.com and we'll delete it.
Your rights
Under Hong Kong's Personal Data (Privacy) Ordinance you may ask to see or correct the personal data we hold about you. Email info@waatdutdut.com.
Changes
If this policy changes, we'll update this page and the effective date above. Use of the app is also covered by the terms of use.