Apple’s Passbook—now known as Apple Wallet—was introduced as a way for businesses to deliver boarding passes, event tickets, loyalty cards, and gift cards directly to iOS users. For mobile developers and businesses deploying passes through this platform, the terms of use governing those passes are not a formality. They are a legally binding set of rules that govern how your passes can be used, redeemed, transferred, and revoked. Getting those terms right from the start can prevent disputes, protect your business from fraud, and ensure you have the legal tools to respond when problems arise.
Apple’s developer agreements and the Passbook/Wallet specifications govern the technical relationship between Apple, developers, and the iOS platform. They do not govern the relationship between your business and your customers who hold your passes. That relationship is defined by your own terms of use, and without them, you have little legal basis to:
A well-drafted terms of use agreement for Apple Wallet passes should address the following:
The agreement should specify that the pass represents a limited, non-transferable license to access the underlying benefit—a flight, event, discount, or loyalty reward. Clearly restricting transfer prevents secondary market activity that you haven’t authorized and limits fraud.
Set out the conditions under which passes can be redeemed. Define expiration dates, geographic restrictions, and any other limitations on use. A vague redemption provision leads to customer disputes and potential claims of deceptive trade practices if customers believe they were promised something the pass couldn’t deliver.
Include an explicit right to revoke or cancel passes in cases of fraud, system error, violation of terms, or business necessity. Without this provision, a customer whose fraudulently obtained pass is canceled has a stronger argument that your revocation was improper.
Mobile pass delivery depends on third-party infrastructure—Apple’s servers, the customer’s device, cellular networks. Technical failures will occur. Your terms should limit your liability for delivery failures, incorrect pass data, and device compatibility issues.
Specify the applicable law and forum for disputes. Consider including an arbitration clause and class action waiver, which can significantly reduce your exposure to litigation. Courts have generally enforced these provisions when they are clearly presented and prominently disclosed.
If your pass program involves collecting customer data—scan events, location data, redemption history—your terms of use should reference your privacy policy and clearly describe how that data is collected and used. CCPA, if your business serves California customers, may impose additional disclosure requirements.
Apple’s Wallet passes do not have a native mechanism for presenting terms of use at the time a pass is added to a customer’s wallet. Best practices include presenting and obtaining agreement to the terms at the time the pass is issued—typically through your website, app, or point-of-sale system. Preserve records of when and how customers agreed to the terms, as this evidence is critical if a dispute arises.
If you are developing passes for Apple Wallet or need a terms of use agreement for an existing pass program, Revision Legal’s attorneys can help. We draft custom agreements tailored to your specific pass type, redemption model, and customer base. Contact us today to get your pass terms in order.
Since Apple Passbook was rebranded as Apple Wallet and expanded to support Apple Pay and contactless payments, the legal considerations for businesses deploying passes have grown more complex. Passes that once simply stored loyalty points or boarding information now interact with payment credentials, biometric authentication systems, and financial transaction infrastructure.
The expansion of Wallet functionality means that the terms governing passes may need to address not just pass use and redemption, but also the interaction with payment credentials, data sharing between pass issuers and payment networks, and the regulatory requirements that apply when a pass functions as a stored-value instrument or payment mechanism.
If your Apple Wallet pass operates as a stored-value instrument—a gift card or digital wallet that holds customer-purchased credit—state money transmission and stored-value laws may apply. Many states regulate the issuance of stored-value instruments, requiring licensing, consumer disclosures, and compliance with unclaimed property laws for unredeemed balances.
Loyalty programs that award points redeemable for cash or near-cash equivalents can also trigger regulatory scrutiny. The treatment of loyalty points as securities, taxable compensation, or regulated financial instruments depends on the specific program structure.
Pass programs collect behavioral data about customers—when they use the pass, where, how often, and for what. Under the California Consumer Privacy Act, this data is personal information that California consumers have the right to know about, request deletion of, and opt out of having sold. If your pass program shares redemption data with third parties for analytics or marketing purposes, CCPA compliance requires disclosure and, in some cases, the right to opt out.
Your pass terms of use should describe what data is collected through pass interactions and cross-reference your privacy policy for details. If your pass interacts with location services, explicit disclosure of location data collection is required.
Pass fraud—whether through unauthorized duplication, spoofing of valid passes, or manipulation of redemption systems—is a real operational risk. Your terms of use should address fraud explicitly: define what constitutes fraudulent use, reserve your right to cancel or revoke passes suspected of fraud without prior notice, and disclaim liability for any services or benefits already associated with a fraudulently obtained pass.
Including an indemnification provision that requires users to indemnify your business for losses caused by their fraudulent use provides contractual recourse, though as a practical matter collecting from individual bad actors can be difficult.
Revision Legal’s technology attorneys draft and review terms of use for mobile applications, digital wallet programs, and loyalty platforms. Whether you are launching an Apple Wallet pass program or auditing your existing terms, contact us today to ensure your legal documents match your business practices.
The legal infrastructure for a mobile pass program—terms of use, privacy policy, stored-value compliance where applicable—protects your business and your customers. Revision Legal’s technology attorneys can help you build that infrastructure efficiently. Contact us today to get your pass program legally ready for launch.
Digital pass programs continue to evolve as Apple Wallet adds NFC payments, ID credentials, and additional use cases. As functionality expands, the legal framework governing deployment grows more complex. Revision Legal’s technology attorneys help businesses stay ahead of these changes by building scalable legal frameworks for their pass programs from the outset. Contact us to review your current terms or design a compliant program today.
Facebook agreed to pay $550 million to settle a class action lawsuit under Illinois’ Biometric Information Privacy Act. Here’s what the case means for biometric data law.
Read more about Facebook’s $550M Illinois Biometric Settlement
Seizing an infringer’s domain name is one of the most effective ways to stop IP theft online. Here’s how courts order domain transfers and what rights holders need to show.
Read more about Seizing an Infringer’s Domain to Stop Infringement
Recent court decisions on what counts as an ‘autodialer’ under the TCPA suggest restrictions may be loosening. Here’s what businesses using automated texts need to know.
Read more about TCPA Autodialer Decisions: Are Restrictions Easing?