We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation. This includes exchanging information with other entities for fraud protection and credit risk reduction.
We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.
Apple Pay allows you to make secure purchases in shops, in apps and on the web, using your debit, credit and pre-paid cards.
Adding Cards to Apple Pay
When you are adding a payment card like store, credit, debit and pre-paid cards to Apple Pay, the information you provide about your card and whether certain device settings are enabled may be sent to Apple in order to determine your eligibility to enable Apple Pay. Your device may also evaluate device use patterns (for example, per cent time device is in motion, the approximate number of calls per week) to help identify fraud. The information evaluated by your device is not shared with Apple in a way that can be linked to you.
Information may also be provided by Apple to your card issuer, payment network or any providers authorised by your card issuer to enable Apple Pay, in order to determine the eligibility of your card, to set up your card with Apple Pay and to prevent fraud, including:
When you add a card to Apple Pay using a third-party app such as a banking app, the app sends an account or card identifier to your device. This information is used by Apple and your card issuer to determine the eligibility of your card, set up your card with Apple Pay and to prevent fraud. To help you set up cards you have, or have recently had, on other devices, Apple stores a card reference with your iCloud account that can be used with the card issuer or payment network to re-add the card after entering the security code. Apple Pay does not store the original credit, debit or pre-paid card number.
Information Shared When You Make a Payment
When you begin a payment within an app, on the web or within Business Chat using Apple Pay, to enable tax and shipping cost calculation, your postcode or other equivalent information is provided to the app, website or merchant. After you authorise the payment, other information requested by the merchant, such as a device-specific account number, your shipping address or email address, is also provided. The card number from your credit, debit or pre-paid card is not provided when you use Apple Pay.
When you make a payment using a QR code pass in Wallet, your device will present a unique code and share that code with the pass provider to prevent fraud. If the device from which payment is made has the pass provider’s app installed, the pass provider may collect and process additional information at the time of payment to prevent fraud, consistent with the app’s privacy policy. The pass provider may also directly contact you for more information to verify the transaction, if needed.
Apps and Websites Can Check if You Have Set up Apple Pay
When using an app or a website that uses Apple Pay in iOS, watchOS or macOS, the app or website can check if you have Apple Pay enabled on that device. When visiting a website in Safari on an iOS device, or Mac to which a card cannot be added, the website can check if you have Apple Pay set up on an iPhone or Apple Watch using the same iCloud account. You can disable websites you visit from checking if Apple Pay is enabled by changing your settings. On iOS, go to Settings > Safari > Check for Apple Pay. On Mac, go to Safari > Preferences > Privacy and deselect “Allow websites to check for Apple Pay and Apple Card”.
Apple Transmits but Does Not Store Your Payment Information
In order to securely transmit your payment information within apps, websites and Business Chat, it is sent to Apple in encrypted form, where it is briefly decrypted and re-encrypted with a merchant-specific key, so that only the merchant, the developer or their payment processor can decrypt your payment information. When you make a payment on a Mac to which a card cannot be added, the Mac and the authorising device communicate over an encrypted channel via Apple servers. Apple does not retain any of this information in a form that personally identifies you.
By adding a travel card to Wallet, information about the travel card will be associated with your iCloud account. So long as your travel card has a positive balance, the card will remain associated with your iCloud account to help ensure you can recover the balance. If you add more than one travel card to Wallet, Apple or its partners may be able to link personal and account information associated between cards — for example, personalised travel cards can be linked to non-personalised travel cards. In Japan, aggregate, non-personally identifiable information about setting up travel cards in Wallet may be shared with mobile device network providers on a periodic basis.
When you use a travel card, information like recently visited stations, transaction history and additional tickets may be accessed by a contactless card reader. This information can be accessed by any nearby contactless card reader if the card is set as your Express Travel Card (a setting that allows you to complete transactions without Touch ID, Face ID or a passcode). You can manage Express Travel on your iOS device by going to Settings > Wallet & Apple Pay, or in Apple Watch app by tapping Wallet & Apple Pay, then tapping Express Travel Card and selecting a payment card.
Apple Pay also allows you to use eligible rewards and gift cards that are stored in Wallet to make contactless rewards and gift card transactions in selected shops. If you add rewards or gift card to Wallet, information about your account or card (including an identifier) will be stored on your device and synced via iCloud. You can disable iCloud syncing by going to Settings > [your name] > iCloud and tapping to turn off Wallet.
When you use Apple Pay in shops, the payment terminal may request the rewards or gift card identifier from its associated rewards or gift card on your device as part of the transaction. You can disable this functionality by selecting the card in Wallet and disabling Automatic Selection in the card details. In selected shops, if the payment terminal does not receive a rewards card identifier from your device when you pay using Apple Pay, it may trigger a notification asking if you would like to add your rewards card to Apple Pay or sign up for the merchant’s rewards programme if you are not a member. In the case of rewards sign-up, the merchant may request that you provide information to them such as your name, postcode, email address and phone number. While Apple will receive notice when you personalise a merchant’s rewards card, the information you share will be sent directly from your device to the merchant and treated in accordance with the merchant’s privacy policy.
If you choose to add a supported student ID card to Wallet, information about your student ID card and whether certain device settings are enabled may be provided to Apple. Information may also be provided by Apple to your school and providers authorised by your school to enable your ID card, determine eligibility, to set up your card and to prevent fraud, including:
Apple Receives and Stores Your Student ID Photo and Stores It with Your iCloud Account
When you use a student ID card, contactless card readers can access your ID card number if the card is set to operate in Express Mode (a setting that allows you to complete transactions without Touch ID, Face ID or a passcode). You can manage Express Mode on your iPhone in Settings > Wallet & Apple Pay or in the Apple Watch app by tapping Wallet & Apple Pay.
If you have Location Services turned on, the location of your device at the time you use it to make purchases in shops may be sent anonymously to Apple and will be used to help Apple Pay improve the accuracy of business names in the Wallet card transaction history, and may be retained in aggregate to improve Apple Maps, Apple Pay and Wallet. You can disable this location-based functionality of Apple Pay at any time on your iOS device by going to Settings > Privacy > Location Services > System Services and tapping to turn off Apple Pay Merchant Identification. On Mac, go to System Preferences > Security & Privacy > Privacy, click Location Services, click the lock to make changes and enter your password, then deselect Wallet.
To help you manage your payment methods on the Apple ecosystem, Apple may check whether any Apple Pay payment methods are eligible to be added as a payment method on file to your Apple ID and display those payment methods in Settings > [your name] > Payment & Shipping > Add Payment Method > Found in Wallet. When you conduct a transaction with your Apple ID, Apple may also check whether any Apple ID payment methods on file are eligible for Apple Pay. If so, to help safeguard your payment information, Apple may enable Apple Pay for that payment method. You can modify your Apple ID payment methods at any time by going to Settings > [your name] > Payment & Shipping.
Apple Pay data that has been disassociated from you may be retained for a limited period of time to generally improve Apple Pay and other Apple products and services.
The terms of any cardholder, user, merchant agreement, or other terms and conditions applicable to the use of the features of Apple Pay will continue to govern the use of your cards and their use in connection with Apple Pay, and such terms may have additional privacy policies.