Getch App
Privacy Details

Getch is a pass management platform designed for service-oriented businesses — such as fitness studios, beauty salons, and wellness providers — to digitally manage, distribute, and track service usage rights ("Passes") for their customers.

Getch enables businesses to define products, issue passes to customers, and confirm service usage via QR code, NFC, or in-app confirmation, eliminating the need for paper-based or spreadsheet tracking.

Getch serves three types of users, each with different data interactions:

• Business Owner (Admin) — Creates and manages the business profile, defines products, and issues passes to customers.
• Staff (Authorized Employee) — Invited by the business owner via phone number. Can confirm service usage but cannot issue passes or define products.
• Customer — Receives passes from a business and uses them to check in at service appointments.

• Phone Number — Getch uses phone number as the sole means of identity. Your number is collected at registration and used for OTP-based verification, staff invitations, pass delivery, and transaction confirmations. No passwords are created or stored.
• Name and Surname — Collected at registration to identify your account and display your profile within the app.
• Business Profile Data — Business owners may provide a business name, logo, and banner image to configure their Getch business profile.
• Device Contacts — With your permission, Getch accesses your device address book to let business owners select contacts when inviting staff or sending passes. The first name, last name, and phone number of accessed contacts are stored on CrevoLabs servers (Microsoft Azure) to support these features. Contact data is not shared with third parties or used for any purpose other than enabling in-app invitations and pass delivery.
• Pass and Usage Data — Details of issued passes, including validity periods, usage restrictions, and check-in events, are recorded and associated with the relevant business and customer accounts.
• Push Notifications — With your permission, Getch sends notifications for pass receipts, usage confirmations, and expiry reminders via Firebase Cloud Messaging.

Getch uses phone number + OTP (one-time password) authentication exclusively. No password is stored by CrevoLabs. The OTP verification process is handled via Twilio. A secure session token is stored on your device in encrypted form to maintain your authenticated session across app launches.

Getch uses Microsoft Azure to store user content and account data. All data transmission is encrypted in transit using industry-standard protocols, and storage services apply appropriate security practices.

• To authenticate your identity and maintain your session
• To operate the pass management features of the app
• To enable staff invitations and customer pass delivery via phone number
• To record and display pass usage history for businesses and customers
• To suggest contacts when sending invitations or passes
• To manage credits, purchases, and usage limits
• To send optional push notifications for pass events
• To improve app reliability and performance

• Getch requests explicit permission before accessing your device contacts or sending push notifications.
• Contact access can be revoked at any time via your device's app permissions settings. Revocation will prevent the contacts feature from functioning but will not affect other app features.
• You may disable notifications at any time via your device settings.
• You may delete your account from within the app, which removes your stored data, pass history, contact data, and credits, subject to legal retention requirements.

We apply technical and organizational safeguards to protect your data, including encryption in transit and at rest, access controls, and secure token storage. No system is completely secure, but we work continuously to protect user data.