Privacy Policy
ReturnPass helps you keep track of retailer returns by reading the emails retailers send you about them. This page says what we collect, why, who receives it, and the choices you have.
Your email
With your permission, ReturnPass reads your Gmail or Outlook mailbox to find emails about returns and refunds. The access you give is read-only: ReturnPass cannot send, delete or change anything in your mailbox. It also sees which email address you connected, and stays connected so it can keep checking for new return emails without asking you to sign in again, until you disconnect.
If you use iCloud Mail, you set up a rule there that forwards your return emails to a ReturnPass address instead. We receive only the emails that rule sends.
We use what we read only to run ReturnPass for you: to find each return's retailer, item, dates, drop-off place and return code, give it a number, and remind you before a deadline. Your returns are visible only to you.
Our analytics provider also receives facts worked out from your return emails: how many returns we found when you connected, that a return was found, and when a return's status changed. It never receives the emails or what is in them, such as the store, the item or the amount, and these facts are used only to improve ReturnPass.
Your mail is never used for advertising, never sold, and not used to train AI models.
The original emails are stored privately, in case a return needs to be read again, and deleted after 30 days. We keep the sender, the address it was sent to and the subject line of each email about a return, and the picture of any return code in it. Emails that turn out not to be about a return, or that come from an address no account has claimed, are deleted outright after 30 days. Your returns are kept until you delete your account.
What else we collect, and why
- Your account: your email address, an account ID, and the ID Apple or Microsoft uses for you if you sign in with Apple or connect an Outlook mailbox, to sign you in and keep your mailbox connected. Kept until you delete your account. Our hosting provider also keeps a log of each sign-in, with your email address and IP address, for 7 days, and, until you sign out, the IP address and type of device you are signed in on.
- Your subscription: the purchase record Apple sends us (the plan, its dates, the price, your country and any refund). We never see your card. Kept until you delete your account.
- How you use the app: which screens you open and what you tap, never what you are returning, so we can see where the app needs work. Kept until you delete your account, and our analytics provider deletes its copy then too.
- Onboarding steps before you sign up. Before you have an account, the app records anonymously which setup screens you reached, tied only to a random number made for this copy of the app, with no email address or personal details. We use it to see where setup loses people, and keep it for up to 7 years.
- Your device: identifiers for your copy of the app, a code that lets us send you notifications, your phone's time zone so they arrive at a sensible hour, your IP address and the rough area it points to, and crash reports. We use these to send notifications, fix problems and measure which of our ads on other sites and apps lead to installs and subscriptions. Crash reports are kept no more than 90 days.
- Totals with no one in them, such as returns found per day. These carry no account or email address, so they stay after accounts are deleted.
Who receives it
Service providers that run ReturnPass for us, under contract: hosting and our database, email delivery, notifications, subscription management, product analytics, crash reporting, and measuring which of our ads lead to installs and subscriptions. They may use it only to do that work for us, and must protect it at least as well as this policy does.
We run ads for ReturnPass on other sites and apps; ReturnPass and returnpass.com show no ads. The service that measures our ads receives nothing from your mailbox, does not use Apple's advertising identifier, and does not track you across other companies' apps or websites. If you install ReturnPass from one of our ads, the site or app that showed it learns through Apple's private ad attribution that the ad led to an install, a connected mailbox or a subscription, but not who you are.
We do not otherwise share your information, except where the law requires it.
Disconnecting, and deleting your data
You can disconnect your mailbox at any time in the app. ReturnPass then stops reading it and deletes the saved sign-in it used, so it can't read your mail again unless you reconnect. For Gmail, disconnecting also cancels the permission you gave on Google's side. Microsoft doesn't let an app cancel that permission itself, so for Outlook you can remove it on your Microsoft account's app permissions page (or My Apps for a work or school account). You can also remove it for Gmail on your Google account's third-party apps page. If you forward your return emails from iCloud Mail, delete that rule in iCloud Mail and they stop reaching us.
To delete your account, open Account in the app and tap Delete account. Your account, returns and stored emails are deleted at once. If you can't open the app, write to support@returnpass.com and we will do it for you.
Your rights
Wherever you live, you can ask us for a copy of your information, to correct it, or to delete it. Write to support@returnpass.com from the email address you sign in with; we will confirm with that address before we act. Someone you authorize can ask for you. We keep a record of each copy of your information we send, with your account ID and the date, for 2 years, even if you delete your account.
We answer within 45 days, or tell you why we need up to 45 more. It is free, and using your rights does not change how ReturnPass works for you. If we say no, you can appeal by replying "appeal", and we will answer within 60 days. If you are still not satisfied, you can contact your state's attorney general.
If you live in California
In the past 12 months we collected these categories of personal information, for the purposes and retention described above: identifiers (email address, account and device identifiers, IP address); commercial information (your returns and subscription); internet activity (how you use the app); approximate location (from your IP address); and sensitive personal information (the contents of retailer emails, and the saved sign-in we use to read your mailbox), which we use only to provide ReturnPass. It comes from you, your mailbox, your device and Apple.
We do not sell or share personal information, as California defines those words, including that of anyone under 16.
Children
ReturnPass is not directed at children under 13 and we do not knowingly collect their data.
Changes
The date at the top is the last substantive change. If a change would let us use information we already hold in a new way, we will tell you before it applies, and ask for your agreement where the law or Google's rules require it.
Contact
For general support questions: support@returnpass.com
To report a security problem, write to security@returnpass.com.
ReturnPass's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.