Cloud wallets vs a wallet that never leaves your phone
A digital wallet can be a convenience layer on top of someone else’s servers, or a lockbox that lives on the device in your pocket. Those are not the same product.
What a cloud wallet actually is
Most “wallets” on phones are accounts. You sign in. The boarding pass, loyalty card, or payment credential is stored in a vendor database and synced to every device attached to that identity. The app on your phone is a client. The source of truth is elsewhere.
That design is easy to sell. Lose the phone, buy a new one, and the cards reappear. Share a pass with a family member. Restore from a cloud backup without thinking about files or passwords. The cost is structural: a company now holds a durable copy of things you would not leave on a café table.
The privacy problem is not a footnote
Once wallet data lives on a server, privacy depends on that operator’s policy, their subcontractors, their breach history, and the legal process that can compel them. A privacy policy can change. A cloud region can move. A “we encrypt at rest” claim still usually means they hold the keys, so they can still read the data.
A single incident can expose every card, ticket, and identity document that was synced “for your convenience.” That is a different failure mode from losing one phone.
What a local wallet changes
A local wallet stores items on the device you hold. There is no Passfold account to create, no sync identity, and no cloud copy of your cards, passes, documents, or passwords. Passfold cannot recover a lost wallet. An export stays on the device or storage you choose — we never receive it, so there is nothing for us to leak.
Passfold is built that way on purpose. The Android app does not request the INTERNET
permission. Encrypted backups exist only when you export one yourself, with a
password you choose. Android’s automatic cloud backup of app data is turned off
(allowBackup="false"), so Google Drive is not a silent second copy.
What you still get
You can still:
- Keep boarding passes and loyalty cards ready at the gate or till.
- Use home-screen widgets and lock-screen quick access for the next flight.
- Export an encrypted backup file and store it where you decide — a USB drive, a folder you control, an offline disk.
What you give up is one-click restore from a vendor account. If you want a spare copy, you export it and keep it. Passfold cannot restore it for you.
Who this is for
If you want the same cards on five devices with zero thought, a cloud wallet will feel smoother. If you care about encryption you can reason about, a phone that can run without a vendor account, or pairing a wallet with a hardened OS such as GrapheneOS, a local wallet is the matching tool.
Read next: how on-device encryption works in Passfold. The privacy policy states the same rule in legal language: wallet data stays on your device, and an export is a file you keep.