Last updated: April 26, 2026
This Privacy Policy describes how My Card Stash ("we", "us", "our") handles information in relation to the My Card Stash application and related support pages ("Service"). We do not directly collect personal data through the app itself. Your card data stays on your device and in your iCloud; we do not access it unless you choose to share it with us for support.
In this policy:
My Card Stash is designed to be private and local. The app itself does not directly collect your card data. All processing and storage of your cards happens on your device and, if you enable it, in your personal iCloud account. We do not sell, rent, or share your data with third parties for advertising or tracking.
The app itself is not designed to send us:
We do not directly collect personal data through the app itself. However, limited technical data may be processed by third-party services (e.g. Apple for App Store, iCloud, diagnostics, crash reporting, or app analytics; hosting providers for support pages). Their processing is governed by their own privacy policies and your settings or agreements with them.
When you scan or add cards, the app processes images and text on your device. This processing is done locally. The app is not designed to upload these images or any extracted data to us. Your card data and images are stored on your device and, if you turn on iCloud sync, in your personal iCloud storage. We do not access your iCloud data under normal operation of the Service, unless you choose to share information with us for support.
If you enable iCloud sync, your data is synced by Apple to your devices under your Apple ID. That sync is between your devices and Apple; we do not send or receive your data. Apple's privacy practices for iCloud are governed by Apple's Privacy Policy and your agreement with Apple. We are not responsible for Apple's handling of your data.
If you contact us (e.g. through the app or email), we use the information you provide only to respond to your request. We do not use it for marketing or share it with third parties, except as needed to respond (e.g. technical support). We retain such correspondence only as long as necessary to resolve your request.
If you access this Privacy Policy or other support pages in a web browser, the hosting provider may record basic technical data (e.g. IP address, request time) for server operation. We do not use this to identify or track you. The My Card Stash app itself does not send any data to us when you use it.
We do not sell, rent, or share your card data or other personal content with any third party. Because we do not operate servers that store your card data, we generally do not have card data to disclose. We may disclose information if required by law (e.g. valid legal process) or to protect our rights or safety; in such cases we can only disclose what we actually hold (e.g. support correspondence, not your cards).
Your card data is on your device and in your iCloud. You can access, edit, or delete it at any time in the app. To remove all app data from a device, delete the app or clear its data in your device settings. We do not hold a copy of your data, so there is nothing for us to "delete" on our side. If you have questions or want to exercise rights under applicable privacy laws, contact us through the app or the support link provided with the Service.
We do not transmit or store your card data, so we are not a custodian of it. Security of your device, your Apple ID, and your iCloud account is your responsibility. Use device lock, strong passwords, and any app-level lock (e.g. Face ID) you enable. No electronic storage or transmission is 100% secure; to the maximum extent permitted by applicable law, we are not liable for any breach or failure of security of third-party services (e.g. iCloud) or your device.
Our Service is not directed at anyone under 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service. If you are a parent or guardian and believe your child has provided us with personal information, contact us and we will address it (we typically do not hold such data, as we do not collect app usage or card data).
We do not collect or transfer your card data. If you contact us, your message may be processed in the jurisdiction where we operate. By using the Service, you consent to that processing to the extent required by applicable law.
If you are in the European Economic Area (EEA) or the United Kingdom, you may have rights under the General Data Protection Regulation (GDPR), including the right to access, correct, or erase personal data we hold about you. Because we do not collect or store your card data, the only personal information we may hold is support correspondence you initiate. To exercise any GDPR rights, contact us as described below.
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA). We do not sell personal information. Because we do not collect card data or usage analytics, there is no personal information subject to CCPA data requests beyond support correspondence. To exercise any CCPA rights, contact us as described below.
Where we process support correspondence, we do so to respond to your request, comply with legal obligations, and protect our legitimate interests. Legal basis: legitimate interests and responding to user requests. If you wish to exercise your privacy rights, you may contact us even if we do not hold relevant data about you.
We may update this policy from time to time. We will post the updated version on this page and update the "Last updated" date. For material changes, we may provide additional notice (e.g. in the app or by email if you have contacted us). Continued use of the Service after changes constitutes acceptance of the updated policy.
For questions about this Privacy Policy or your privacy, contact us through the app, the support link provided with the Service, or by email at oueway.forest@gmail.com.