WalliPass Privacy Policy

Last updated: 7 November 2025
WalliPass (“we,” “our,” or “us”) provides a digital ID service that lets students carry their campus ID on their mobile phone. This privacy policy explains the information we collect, how we use it, how we keep it secure, and the choices available to our users.

1. Information We Collect

When you request a WalliPass, we collect only the information needed to create the digital pass:
  • Your name (to personalize the pass)
  • Your campus/student identifier (to verify your status with your institution)
  • A photo (to display on the pass)
We do not collect other personal information unless your school adds it to the request form.

2. How We Use Your Information

We use this information to:
  • Confirm you are eligible for a WalliPass
  • Generate a digital pass that works with Apple Wallet on iPhone and Google Wallet on Android (Apple Watch and iPad are not currently supported)
  • Provide you with a short-lived download link for the pass
  • Troubleshoot issues during the pass creation process
We do not use your information for marketing, analytics, or any unrelated purpose.

3. Data Storage and Security

  • Uploaded photos and pass files are stored in secured locations where public access is blocked.
  • Temporary files created during pass assembly are deleted once we deliver the pass.
  • Short-lived cookies and form tokens ensure you can download your pass safely; they expire quickly and are not used for tracking.
  • Pass signing is handled using certificates stored in secure locations that are not publicly accessible.
  • The entire workflow runs over encrypted connections (HTTPS) to protect data in transit.

4. Access Control

  • Students must complete the pass creation from an iPhone or Android phone.
  • Desktop visitors see a message instructing them to use their phone; administrators can bypass this during development and testing.
  • We rely on WordPress core features and safeguards to validate form submissions and minimize spam.

5. Sharing and Disclosure

We do not sell, rent, or disclose your information to third parties except:
  • If required by law
  • If we must coordinate with your institution to verify your status or troubleshoot issues
  • As part of a business transaction (e.g., a merger or acquisition), where the new owner must honor this policy
We do not run third-party analytics or advertising scripts on the pass-creation pages.

6. Student Privacy (FERPA)

Because we handle student data on behalf of educational institutions, we treat the information as confidential student records. We act as a “school official” with legitimate educational interests under FERPA and use the data only to deliver the WalliPass service.

7. Future Enhancements

  • We are working with additional SUNY campuses to offer WalliPass more broadly by the end of 2026.
  • Features such as building or dining hall access are on our roadmap but may not be active at your school today.
  • Apple Watch and iPad support will come later; only iPhone and Android phones are supported now.

8. Your Choices and Rights

  • If you need to correct or remove your information, please contact us.
  • If your school manages WalliPass for you, we may direct you to the institution for such requests.
  • You can block cookies through your browser, but certain pass-delivery steps may stop working.

9. Children’s Privacy

WalliPass is designed for college and university students. We do not knowingly collect data from children under 13. If you believe we have such data, please contact us so we can delete it.

10. Changes to This Policy

We may update this policy as our service evolves. We will post updates with a new “Last updated” date and notify partner institutions of significant changes.

11. Contact Us

If you have questions or concerns about this policy or your data, reach us at:
Email: info@techmonkey.media