Privacy Policy

Card Zephyr (“Card Zephyr,” “we,” “us,” or “our”) provides a mobile application (the “App”) that helps you store and manage your gift cards and loyalty cards. This Privacy Policy explains what information the App handles, how it is used, and the choices you have.

Card Zephyr is built to keep your information on your device. We do not operate user accounts or a backend server that stores your card data. By using the App, you agree to this Privacy Policy.

1. Information You Provide

When you add a card, you may enter or scan information such as the merchant name, card number, PIN, balance, barcode or QR code, notes, and a card image. You may also add an optional display name for your profile.

This information is stored locally on your device. It is not transmitted to us and is not stored on our servers.

2. Camera and Photos

The App uses your device camera to scan barcodes and QR codes and to photograph a card or its icon. Scanning and image recognition happen on your device. Images you capture are saved locally with your card. The App does not upload your camera images to us.

3. Biometric Authentication

You can enable Face ID, Touch ID, or your device’s fingerprint unlock to lock the App. Biometric authentication is handled entirely by your device’s operating system. The App receives only a success or failure result and never accesses or stores your biometric data.

4. Diagnostic and Crash Data

To keep the App stable, we use Firebase Crashlytics, a service provided by Google. If the App crashes or encounters an error, Crashlytics may collect diagnostic information such as your device model, operating system version, app version, the time of the event, and a technical crash log. This information is used only to diagnose and fix problems. It does not include the contents of your cards and is not used to identify you.

For more information, see Google’s Privacy Policy and Firebase’s data practices.

5. Information We Do Not Collect

We do not require an account, and we do not collect your name, email address, or contact information in order to use the App. We do not use advertising identifiers, we do not serve ads, and we do not sell your personal information.

6. How Information Is Used

Information handled by the App is used to:

• Store and display your gift and loyalty cards.
• Scan and generate barcodes for use at checkout.
• Track the balances you record.
• Diagnose and fix crashes and errors (diagnostic data only).

7. Data Storage and Security

Your card data is stored on your device using your operating system’s storage. You can protect the App with an optional biometric lock. You are responsible for maintaining the security of your device, including using a device passcode. No method of storage is completely secure, and we cannot guarantee absolute security.

8. Backups

The App lets you create a backup of your cards and restore from a backup. Backup files are created at your request and saved to the location you choose (for example, your device storage or a file destination you select). We do not receive or store your backups. If a backup is protected with a passphrase you set, you are responsible for remembering it — we cannot recover it for you.

9. Data Sharing

We do not sell or rent your personal information. The card information you enter stays on your device and is not shared with us. Diagnostic data is processed by Google as described above. We may disclose information if required by law; however, because your card data is stored only on your device, we generally do not have access to it.

10. Third-Party Services

The App relies on the following third-party services:

• Google Firebase Crashlytics — crash and diagnostic reporting.
• Google ML Kit — on-device barcode and text recognition (processing occurs on your device).
• The Apple App Store — distribution of the App.

Your use of these platforms is also governed by their respective terms and privacy policies.

11. Children’s Privacy

The App is not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us.

12. Your Rights

Because your card information is stored on your device and not on our servers, you can access, edit, or delete it at any time within the App, or by deleting the App from your device. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. Since we do not hold your personal card data, most such requests can be fulfilled directly by managing the data on your device. If you have questions, contact us using the details below.

13. International Users

The App can be used in many regions. Diagnostic data processed by Google may be transferred to and processed in countries other than your own, subject to Google’s safeguards.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, contact us at support@cardzephyr.com.