Cinepass
Privacy Policy
Last updated 16 August 2026
Cinepass is a cinema booking app for Egypt. This page explains exactly what the app stores about you, why it needs each thing, who else ever sees it, and how long it is kept. It describes what the software actually does — it is not a generic template.
What we collect
Your phone number
Required. It is your account. We send a one-time passcode to it to sign you in, so the number is passed to our SMS provider for the moment it takes to deliver that message. The passcode itself is stored only as a hash, expires after a few minutes, and is never written to a log.
Your name and email — only if you give them
Both are optional and the app works without them. If you add them, they are sent to the payment processor as billing details when you pay, because the processor requires a name on a transaction.
Your language preference
Arabic or English, so the app and your passcode message arrive in the language you chose.
Your bookings
For each booking: the cinema, film and showtime, the specific seats, any food and drink you ordered, the total amount, the booking's status, and the times it changed. This is the service — without it there is no ticket.
Payment records — but not your card
Your card number never reaches us. Payment happens on the processor's own hosted page; we are not sent the number, the expiry date or the CVV, and we could not store them if we wanted to. What we keep is the processor's confirmation record: its reference, the amount, the currency, and whether it succeeded. That record can include your card type and a partly-hidden card number (the last few digits), which the processor puts there so a payment can be identified in a dispute.
Device and notification tokens
Your device platform, app version, OS version, and the Apple push token for the device. These exist so booking updates and the live countdown to your showtime can reach the right phone. A push token identifies a device, not a person, and is useless to anyone but Apple.
Sign-in security data
A hashed version of the token that keeps you signed in, and its expiry. Hashed means that even with our database, the token cannot be read back out and reused.
Your Apple Wallet pass
If you add a ticket to Apple Wallet, we store the pass's serial number so that ticket can be updated or invalidated later.
What we do not collect
- Your location. The app never asks for it and never receives it. Choosing a cinema means picking one from a list, and that is not the same thing as being located.
- Analytics, advertising and tracking. There is no analytics SDK, no advertising SDK and no third-party tracker in this app. No advertising identifier is read. Nothing you do in the app is profiled, and there is no cross-app or cross-site tracking to opt out of.
- Your contacts, photos, camera or microphone. The app does not request access to any of them.
- Full card numbers. See above — they never reach our servers.
Who else sees it
Three companies, each for one job and no other:
- Our SMS provider receives your phone number and the passcode, in order to deliver the message.
- Our payment processor receives the amount and your billing details, in order to take the payment, and returns the confirmation described above.
- Apple handles push notifications and Apple Wallet passes, under Apple's own privacy terms.
Beyond that, nothing. We do not sell your data, share it with advertisers or data brokers, or hand it to anyone for their own purposes. We would disclose information if we were legally required to, and not otherwise.
How long we keep it
- One-time passcodes expire within minutes and are stored only as hashes.
- Sign-in tokens expire on their own, and are revoked immediately when you sign out.
- Bookings and payment records are kept while your account exists, because they are financial records of a purchase.
- If you ask us to delete your account, we delete your account and your devices and sign-in tokens with it.
Your choices
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete your account. Write to the address below and we will act on it.
You can turn off notifications for Cinepass at any time in your device's Settings; the app keeps working without them.
Children
Cinepass is not directed at children under 13, and we do not knowingly collect anything from them. Booking requires a phone number and a payment method.
Changes to this policy
If what the app collects changes, this page changes with it and the date at the top moves. Material changes will be surfaced in the app rather than left here quietly.
Contact
Privacy questions, data requests and deletion requests: privacy@glacialhex.com.