This Privacy Policy explains what information the Passenger mobile app ("Passenger", "we", "us") collects, how we use it, and the choices you have. Passenger is a self-coaching app: you talk to an AI coach that guides you through a structured method. We built Passenger to work without an account — we do not ask for your name, email, or phone number.
The developer of Passenger is the data controller for the information described here. For any privacy question or request, contact us at help@pmoffice.space.
| Data | Why | Notes |
|---|---|---|
| Random device ID | To keep your sessions and wishes on your device across app launches | Anonymous. Not linked to your real identity. |
| Session content (your text and voice messages, and the coach's replies) | To run the coaching session and let you re-read your history and wishes | You can delete it in the app. |
| Voice recordings | Only if you choose to send a voice message; it is transcribed to text so the coach can respond | Transcription happens on our server; see processors below. |
| Anonymous usage & diagnostics | To understand which features are used and to fix problems | Aggregated events, not tied to your identity. |
| Subscription status | To unlock sessions after your free first session | Payment is handled by Apple; we never receive your card details. |
| Advertising/attribution signal | Only if you allow tracking, to measure which ad brought you to the app | Optional — you can decline the iOS tracking prompt; you can still use the app fully. |
| Push token | To send the reminders you turn on | Only if you enable reminders. |
We do not collect your name, email address, phone number, contacts, precise location, photos, or health records. Passenger does not open your photo library or camera on its own.
We use a small number of trusted providers who process data on our behalf to make the app work. They may process your data outside your country. We share only what is needed for each function:
| Provider | Purpose |
|---|---|
| Anthropic | AI model that generates the coach's responses from your messages |
| OpenAI (Whisper) | Transcribes your voice messages into text |
| Amplitude | Anonymous product analytics and diagnostics |
| Adapty & Apple | Manage subscriptions and process payments |
| Meta (Facebook SDK) | Ad attribution — only if you allow tracking |
| Expo | Delivers the push reminders you enable |
| Cloud hosting (server & database) | Stores and processes your session data securely |
These providers act under their own privacy terms and are contractually limited to processing data for the purposes above.
Where the GDPR or similar laws apply, we process your data to perform our contract with you (providing the app), on the basis of your consent (optional tracking, reminders), and for our legitimate interests (security, improving the product). You can withdraw consent at any time.
We keep your session data for as long as it stays on your device profile so your history remains available. When you delete your data in the app, we remove your sessions, wishes, and related content from our systems. Anonymous, aggregated statistics that cannot identify you may be retained.
To exercise any right, email help@pmoffice.space.
Data is transmitted over encrypted connections (HTTPS) and stored on access-controlled infrastructure. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.
Passenger is not directed to children. You must be at least 13 years old (or the minimum age of digital consent in your country) to use it. We do not knowingly collect data from children. If you believe a child has used the app, contact us and we will delete the data.
Your data may be processed in countries other than your own, including where our providers operate. Where required, we rely on appropriate safeguards for such transfers.
We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, provide notice in the app.
Questions or requests: help@pmoffice.space.