The system is actually comprised of two apps, CovPass and CovCheck.
Both are in the repo.
The check app validates the pass in-app, and, as far as I can tell, doesn’t phone home or report any data. IE there is no logging of the scanned persons data
Both are in the repo.
The check app validates the pass in-app, and, as far as I can tell, doesn’t phone home or report any data. IE there is no logging of the scanned persons data
Apps can also be configured to prohibit (or at least make it harder make) screenshots/screen-recordings. It can of course be circumvented, but still. It's illegal.
I would consider it as safe as showing my ID to a bartender/bouncer. Safer, even, as they don't get as much data.