Lounge Wallet

Lounge Wallet is an independent application by MedielSoft. Contact for privacy, support and deletion requests: erdt.martin@medielsoft.cz. This policy describes the Android release with Firebase Crashlytics enabled. Lounge Wallet is not an official LoungeKey, Collinson or bank application.

Your accounts and membership data

You choose which existing LoungeKey accounts to add. The app sends your username and the password-derived authentication value directly to the LoungeKey/Collinson service over HTTPS to sign in and retrieve your memberships, visit allowances, visit history and current digital card. The developer does not operate a server that receives or stores your wallet. LoungeKey/Collinson separately controls its own service and account records.

Local storage and images

Usernames, password-derived authentication values, session credentials, membership data and preferences are stored locally using the device's protected storage. The app does not store your original plaintext password. Optional card images are cropped and masked by you, stripped of EXIF metadata and encrypted on the device. Camera and image-picker access are used only when you choose an image; images are not automatically uploaded. Do not photograph a CVV/CVC or the reverse of a card, and verify that all but the final four digits are covered before saving.

Encrypted backups

Backups are created only when you request an export. They contain the selected wallet data, optionally including masked images, encrypted with your separate backup password. You choose their destination using the system picker, which may include your own cloud provider. The developer cannot read or recover the backup or its password. Removing an account from the app does not remove existing backup files; manage those copies separately.

Crash diagnostics

We use Google Firebase Crashlytics to investigate crashes and improve reliability. Reporting starts when you choose the real wallet. The public demo uses fictional in-memory data and does not initialize Firebase on a cold start; previously queued reports from a real session may still be processed. Crashlytics can send crash stack traces, technical application state, app/OS versions, device metadata and generated installation identifiers to Google. The Firebase installations and sessions components support crash diagnostics and quality metrics. Dart error reports sent by our code contain the error type and stack trace rather than the original exception message. We do not attach account names, usernames, card numbers, wallet balances, QR contents, photos, passwords, session tokens or purchase tokens to crash reports. Native crash reports can include technical exception messages and device state. Crash reporting is enabled for real-wallet sessions in this release and there is currently no separate in-app opt-out switch for that mode.

According to Firebase's published retention policy, Crashlytics keeps crash traces and associated identifiers for 90 days before starting removal from live and backup systems. Firebase installation and session data can follow different retention periods. Details: https://firebase.google.com/support/privacy and https://policies.google.com/privacy. Processing by Google may take place outside your country under its applicable data-protection arrangements. Network services also receive connection information such as your IP address when you contact them.

Advertising and purchases

This build does not include a live advertising SDK, Google Analytics SDK or Google Play Billing integration. Advertising and a one-time ad-removal purchase are being prepared but do not run in this version. This policy and the store disclosures must be updated before those services are activated.

Retention, deletion and your choices

Local wallet data remains until you remove an account or remove the app's data. This does not delete your official LoungeKey account or records retained by LoungeKey, your bank or a backup provider. Contact the relevant service for those records. We do not create a separate developer-hosted user account. Contact erdt.martin@medielsoft.cz for privacy questions or requests about diagnostic data; we may need enough information to identify the relevant report, and cannot identify every installation from an email address alone. Depending on applicable law, you may have rights to access, correct or erase personal data, restrict or object to processing, and complain to your data-protection authority.

The app is intended for people eligible to hold and use their own lounge memberships, not for children. We do not sell wallet data. If the app's processing changes, we will update this policy before enabling the new services.