Privacy Policy

Card Perks ("we," "our," or "us") operates the Card Perks mobile application (the "App") and this website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App or website. Please read it carefully. If you disagree with its terms, please discontinue use of the App.

We use the information we collect to:

• Create and manage your account
• Provide, operate, and maintain the App and its features
• Sync your data across devices via Firebase Firestore
• Generate responses to your questions in the AI Wallet Concierge chat feature (Card Perks Pro) using Anthropic's Claude API
• Generate annual summary and earnings overview dashboards from your own card, perk, and account data
• Send you push notifications about expiring perks and benefit deadlines (only with your explicit permission)
• Send you occasional (roughly monthly) product update and new feature announcement emails to the address on your account, each including an unsubscribe link (see Section 9)
• Understand aggregate usage and product interaction to improve App features and performance, consistent with your settings and applicable law
• Deliver and measure advertising on the free tier through Google AdMob
• Diagnose and fix crashes and technical issues (where we use such tools)
• Verify subscription entitlements through RevenueCat (or our subscription provider) while payments are processed by Apple or Google
• Respond to your inquiries and provide customer support
• Comply with legal obligations

We do not sell your personal information for money. On the free tier, third-party ads are served through Google AdMob as described in this policy and in Google’s documentation; AdMob may use identifiers and device data subject to your ATT choices, UMP/consent where applicable, and Google’s policies.

We share data only with the service providers necessary to operate the App. Third parties below are required by contract or law to protect your data and use it as described in their policies and this policy:

• Google Firebase — We use Firebase Authentication and Cloud Firestore for accounts and synced data. We do not use Firebase Analytics or Firebase Crashlytics in the App unless we enable them later and update this policy.
• Google AdMob — Serves ads on the free tier. Google AdMob and its advertising partners may collect and use device advertising identifiers (including the Google Advertising ID on Android and the Identifier for Advertisers on iOS, where available), device information, IP address, and app interaction data to deliver, measure, and personalize ads. See Google's Privacy Policy at https://policies.google.com/privacy.
• RevenueCat — Processes subscription status and entitlements so we can unlock Pro features in the App. Apple and Google remain the merchants for payments; we do not receive your full card number.
• Anthropic — Powers the AI Wallet Concierge chat feature available to Card Perks Pro subscribers. We send your question, recent chat history, a summary of your card wallet, and a summary of your points/loyalty balances (and, where relevant, our public card catalog) to Anthropic's Claude API through a server-side Cloud Function to generate a response. We do not send account/authentication identifiers, payment information, or device data. See Anthropic's Privacy Policy at https://www.anthropic.com/legal/privacy.
• Apple App Store / Google Play — Subscription billing and payment processing. We do not receive or store your payment card information.

We may also disclose your information: (a) if required by law or valid legal process; (b) to protect the rights or safety of Card Perks or others; or (c) in connection with a merger, acquisition, or sale of assets, with advance notice to you.

We do not sell your data to unrelated data brokers. On the free tier, third-party advertising networks (including Google, through AdMob) may serve ads and process data as described in this policy and in their own privacy policies.

If you use the free tier of Card Perks, we use Google AdMob to show ads. This section summarizes how advertising data is used so you can review it without opening the App.

• Advertising identifiers: Google AdMob may collect device advertising identifiers, such as the Google Advertising ID (Android) and the Identifier for Advertisers (IDFA) on iOS when your device settings and applicable law allow it.
• Personalized ads: Third-party ad networks integrated through Google AdMob may use these identifiers and related device or usage data to show personalized ads, subject to your consent choices (including Apple's App Tracking Transparency on iOS and Google's User Messaging Platform in the EEA, UK, and other regions where required).
• Google's policy: Google's collection and use of data for advertising is described in the Google Privacy Policy.
• Opt out of personalized ads: You can manage Google ad personalization in Google Ads Settings. On iOS, you can limit tracking in Settings → Privacy & Security → Tracking. On Android, you can reset or opt out of the Advertising ID in your Google account or device settings. In-app consent prompts (UMP) may also let you change ad preferences where required by law.

Your data is stored using Google Firebase (Firestore), which encrypts data in transit (TLS) and at rest. We implement industry-standard security practices to protect your information. Data is stored on servers in the United States.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

If you enable App Lock, biometric authentication (Face ID or Touch ID) is handled entirely on your device through your device's operating system. Biometric data never leaves your device and is not accessible to us; App Lock is optional.

We retain your account and usage data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days of the request, except where we are required to retain certain data for legal, security, or fraud-prevention purposes. Any retained data will be clearly described in your deletion confirmation.

This includes AI Wallet Concierge chat history and your points/loyalty program data (described in Section 2): both are stored only for as long as your account exists and are permanently deleted as part of the same account-deletion process described below — we do not apply any separate retention period to this data.

How to delete your account and data:

• In the App: Go to Settings → Account → Delete Account.
• Via email: Send a deletion request to support@cardperksapp.com from the email address associated with your account. We will process your request within 30 days.

Deleting your account will permanently remove your profile, card selections, and perk tracking data. Subscription billing through the App Store or Google Play must be cancelled separately through your store account settings before account deletion to avoid future charges.

The App may send push notifications to remind you of expiring perks and benefit deadlines. These notifications are only sent with your permission, which your device will request. You may opt out of push notifications at any time through your device's notification settings (iOS: Settings → Notifications → Card Perks; Android: Settings → Apps → Card Perks → Notifications).

We may email the address associated with your account with occasional product update and new feature announcements — typically no more than about once a month. These are standard service-related communications tied to your existing account relationship with us, so we do not require a separate opt-in checkbox for them.

• Every product update email includes a one-click unsubscribe link. Unsubscribing stops future product update emails but does not affect required transactional or account/security emails (for example, password resets or account-deletion confirmations), which we continue to send regardless of your marketing preferences.
• Consistent with the CAN-SPAM Act, these emails use an accurate, identifiable "from" address, include our postal address (4030 Wake Forest Road, Ste 349, Raleigh, NC 27609) and support email, and we honor opt-out requests promptly.
• If you are located in the EEA or UK, you retain the right to object to this processing at any time; see Section 10 below.

The App is not directed to children under the age of 13 (or 16 in the EU/UK where applicable). We do not knowingly collect personal information from children under these ages. If you believe we have inadvertently collected such information, please contact us immediately at support@cardperksapp.com and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page and, where appropriate, by sending a notification through the App or to the email address on your account. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

If you have questions, concerns, or requests about this Privacy Policy or your personal data, please contact us: