CardSense Privacy Policy

Last updated October 17, 2026

The short version

CardSense helps you use the right card and track what you save. We keep the least we can, never see your bank passwords or card numbers, never sell your data, and you can delete everything at any time.

What we keep

• Your login: your email (or Apple's private relay address if you sign in with Apple). Passwords are stored by our login provider only in scrambled (hashed) form.
• Your name, if you give it.
• The cards you add: card name, bank and - only if you type them - the last 4 digits.
• Bank offers you sync: the store, the reward, its terms and expiry, and whether it's added to your card.
• What you log with "I used it": the store, what you spent and what you saved.
• If you turn on the Auto tracker (CardSense Pro): the purchases on the cards you connect - store, amount and date - and the names and last 4 digits of those cards.
• Your points, streak and level.
• Places you save for store alerts.

What we never collect

Bank or card passwords, full card numbers, security codes, account numbers or balances. You sign in to your bank yourself - in Safari for offers, or inside Plaid's secure screen for the Auto tracker - and we never see those logins. CardSense can only read; it never moves money or taps anything that does.

Connected cards (Auto tracker)

The Auto tracker is optional and only part of CardSense Pro. When you connect a card, Plaid Inc. securely links it with your permission and shares that card's purchases with us. We use them only to match your purchases to the offers and card benefits you have, so CardSense can add up what you earned back and let you know. The bank connection itself (an access token) stays on our servers and never on your phone. Plaid's handling of your data is described in the Plaid End User Privacy Policy at plaid.com/legal. You can disconnect any time in the Auto tracker, which ends the connection at Plaid and deletes the stored purchases.

Your location

With your permission, your phone uses its location to notice when you're at a store with an offer and alert you. This happens on your phone - your location history is not sent to us or stored by us. You can turn it off any time in iPhone Settings.

The Safari extension

If you turn on the CardSense Offers extension in Safari: on your bank's offers page it reads your offers when you tap it, to add them to your card and sync them to CardSense. On stores' cart and checkout pages it looks at the page's web address to recognize the store, and shows which of your cards to pay with. That happens on your phone - the sites you visit are not sent to us or stored, and it never reads what you type (card numbers, passwords, addresses) or clicks anything. If you link a Mac (Profile → Preferences → Checkout helper on your Mac), your phone keeps a copy of your checkout list - your deals and card names, never card numbers - in your account, so Safari on the Mac can show the same tips. The Mac gets its own key that can read only that list; unlinking it, or deleting your account, removes the key and the list.

How we use it

Only to run CardSense for you: show your offers and perks, pick the best card, send the alerts you turned on, and total your savings. No ads, no selling or renting your data, no sharing it with advertisers or data brokers.

Who handles it for us

Your account data is stored with Supabase (our database and login provider), encrypted and protected so each account can only ever read its own data. Plaid connects cards for the Auto tracker. Apple handles payments for CardSense Pro, with RevenueCat keeping track of whether your subscription is active (it sees your CardSense account id, not your payment details). Store logos come from a public logo service, which sees the store's name or website but nothing about you. Apple handles notifications (with the Auto tracker on, our server keeps your phone's notification token so it can tell the app the moment a new purchase posts - the message itself carries nothing about the purchase), finding nearby stores (Apple Maps) and, if you use it, Sign in with Apple.

Keeping and deleting your data

We keep your data while you have an account. Disconnecting a card deletes its stored purchases; savings already added stay until you delete them or your account. Profile → Delete my account disconnects your cards at Plaid and erases your account and everything in it right away, for good. Signing out keeps your data in your account for next time; data kept on the phone for one account is cleared when you switch accounts. You can also email us to see or delete your data - we answer within 30 days.

Children

CardSense is for adults who hold credit cards and isn't meant for anyone under 18.

Changes

If this policy changes in a way that matters, we'll tell you in the app before it applies.

Contact

Questions or requests about your data: [email protected]