BadgeyPrivacy Policy
Last updated
Badgey works without an account. Your badges and photos stay on your device, and the camera check that notices a pocket runs entirely on your iPhone. This policy explains what the app accesses and why.
In short
| What | Where it goes | Can the developer see it? |
|---|---|---|
| Your badges: name, role, link, lanyard colour and photo | Only on your device | No |
| Front camera frames checked for a pocket | Analysed in memory on your device, never stored or sent | No |
| Motion data (is the phone upside down, is it moving) | Used live on your device, never stored or sent | No |
| In-app purchases | Handled by Apple | No payment details or Apple Account, only Apple's anonymous sales reports |
Who is responsible
Badgey is developed by Marco Lüthi, the controller responsible for data processing under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
Marco Lüthi
Gutstrasse 172
8055 Zürich
Switzerland
hi@luthi-mar.co
Permissions the app asks for
- Camera, to take your badge photo and to notice when your phone is in a pocket. Lanyard mode works without it.
- Motion & Fitness, to notice when your phone is upside down and to let the badge swing with your movement.
When you pick a photo from your library, iOS shows its own picker and hands Badgey only the photo you choose, so the app never needs access to your whole library. You can change each permission at any time in the iOS Settings app. Badgey does not use your location or your contacts.
Your badges
The badges you create (name, role, link, lanyard colour) are saved in a file inside the app, and each custom photo is saved beside it as an image. Which badge is selected, whether you've seen the introduction and whether Swing is on are kept in the app's settings. All of this stays on your device. It may be included in your device backups, depending on your own iCloud or computer backup settings. Deleting a badge deletes its photo; deleting the app deletes everything.
When you show your QR code, anyone who scans it gets the link you typed. What happens then is up to the website it points to.
Pocket detection
To notice when your phone is in a pocket, Badgey uses the front camera briefly: only when the phone turns upside down, or moves while it hangs upside down, and for a few seconds at most. A machine-learning model that runs entirely on your device looks at a few frames per second and decides whether it sees the inside of a pocket. The frames are analysed in memory and discarded. They are not saved, and they are not sent anywhere. The camera is never used while you edit a badge or when the app isn't on screen.
In-app purchases
Badgey Pro, the extra layouts and the Live animations are one-time in-app purchases, processed by Apple through the App Store. The app checks what you own with Apple on your device and talks to no other server. The developer does not receive your payment details or your Apple Account, only Apple's anonymous sales reports.
Legal basis
Where the GDPR applies, the processing on your device is necessary to provide the features you use (Art. 6(1)(b) GDPR). Camera and motion access are based on your choice to grant them, which you can withdraw at any time in the iOS Settings app. Purchases are based on the contract when you buy something (Art. 6(1)(b) GDPR). Under the Swiss FADP, we process personal data only as described here and in line with its principles.
What Badgey does not do
- No account, sign-up or login.
- No uploading of your badges, photos or camera frames, to the developer or anyone else.
- No advertising, and no tracking across apps or websites.
- No selling or sharing of data with data brokers.
This website
This website is a static site without cookies, analytics or tracking. Fonts are served from this website itself, so your browser does not contact third-party font services. When you visit a page, the hosting provider Vercel Inc. (based in the United States, with data centres worldwide) automatically records technical access data in server logs: your IP address, date and time, the requested page, referrer and browser type. This is needed to deliver the site and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). The logs are deleted after a short period. Links to the App Store take you to Apple, where Apple's privacy policy applies.
Promo codes
From time to time the Badgey page on this website offers free promo codes. To get one, you enter your email address and, where Apple requires its terms for your country to come with the code, your App Store country. Only then does your browser send them to this website, and from there to the developer's code service, run on Supabase (servers in the EU). It picks a code and emails it to you through the email service Resend. The country is used only for that email and is not stored.
Your email address is not stored by the code service. It keeps only a one-way, keyed hash of it next to the code, so that each address gets one code and can ask for the same code again. Your IP address is kept the same way, as a hash, for up to 24 hours to stop the codes from being emptied by automated requests. Resend keeps a log of the email it delivered, including your address, for a limited time under its own privacy policy. Resend is based in the United States, and transfers rely on standard contractual clauses or equivalent safeguards.
Your address is used only to send the code: it is never added to a mailing list or shared with anyone else. The legal basis is your request (Art. 6(1)(b) GDPR) and, for abuse prevention, legitimate interest (Art. 6(1)(f) GDPR). Nothing is sent before you press the button.
Your rights
You have the right to request access to your personal data and to have it corrected or deleted, to object to or restrict processing, and to data portability. Because the apps store your data on your device and do not identify you, the developer usually holds no personal data about you. Most of it you can delete yourself by deleting the app.
To exercise your rights, email hi@luthi-mar.co. You can also lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority of your country.
International transfers
Apple may process data in the United States and other countries. Apple describes the safeguards it uses for these transfers, such as the Data Privacy Framework and standard contractual clauses, in its privacy policy. This website is hosted by Vercel Inc., based in the United States; its server logs are transferred under the same kind of safeguards.
Children
Badgey is not directed at children.
Changes to this policy
If the app starts handling data differently, this page will be updated before the change ships, and the date at the top will change.