CardflarePrivacy policy
- Operator
- PLACEHOLDER-operator-legal-name
- Contact
- [email protected]
- App
- Cardflare (credit card picker and rewards optimizer)
- Package / bundle
com.joseph.creditcardoptimizer.credit_card_optimizer_app- Last updated
- PLACEHOLDER-legal-last-updated-date
Summary
Cardflare helps you choose which credit card to use based on where you are and what you buy. We collect only what the app needs to provide that service. We do notsell your personal information. We do not store full card numbers or CVV codes.
Information we collect
Information you provide
| Data | Purpose | Required? |
|---|---|---|
| Credit cards you add | Show card faces, last four digits, expiration; match rewards | Optional (you choose cards) |
| Custom card rules | Optimizer for cards not in our catalog | Optional |
| Saved places (pins) | Geofence reminders and category defaults | Optional |
| Credit score, income, application history | Card recommendations and eligibility hints | Optional |
| Manual purchase log (free tier) | Plan tab and bonus-cap estimates | Optional |
| Google account (email, display name) | Sign in and cloud backup of wallet data | Optional |
| Bank connection via Plaid (paid tier) | Import transactions and detect cards you hold | Optional |
When you add a card through the plastic form, we validate the card number and CVV on your device and discard them immediately. We keep only the last four digits, expiration, optional name on card, and catalog match.
Information collected automatically
| Data | Purpose |
|---|---|
| Location (GPS, including in the background where you permit it) | Pick the best card for your current place; match saved pins |
| Device identifiers | Anonymous install ID before sign-in; session tokens after sign-in |
| Purchase history in app | Activity tab and optimizer (free tier) |
| Subscription status | Unlock paid features (via Google Play, or Apple once iOS billing ships) |
Information from third parties (paid tier)
| Provider | Data | Purpose |
|---|---|---|
| Plaid | Linked bank accounts and transactions (about 12 months) | Real spend, year-to-date bonus caps, card matching |
| Google Places | Nearby business names and types | Automatic store and category detection |
| Geoapify | Map points of interest | Map display and POI categories |
We do not receive your bank login credentials; Plaid handles authentication directly with your institution.
How we use information
- Recommend which of your cards to tap at a location or category
- Run the portfolio optimizer (Plan tab)
- Sync your wallet (cards, transaction log, settings, pins) to your account when you sign in with Google
- Process subscriptions and restore purchases
- Improve reliability and fix bugs (aggregated, never for marketing)
We do not use your data for advertising profiles and we do not sell it to data brokers.
Where data is stored
| Location | What |
|---|---|
| On your device | Wallet snapshot, session token, cached catalog |
| Our server (if you use cloud sync) | Wallet snapshot tied to your Google account; Plaid access tokens (server-side only, never sent to the app) |
| Apple / Google | In-app purchase receipts and subscription state |
| Plaid | Bank connection tokens and transaction data, under Plaid's own policies |
Sharing with third parties
We share data only with service providers that help run the app:
| Recipient | Why |
|---|---|
| Plaid | Bank account linking and transaction import |
| Google (Sign-In, Places) | Account login; nearby place lookup |
| Geoapify | Map POI data |
| Apple / Google | In-app subscription billing |
| Our cloud host | Running the API and holding the wallet backup |
We may disclose information if required by law or to protect rights and safety.
Your choices
- Location: deny the permission and Cardflare still works with manual categories and saved pins. Automatic store detection needs location.
- Sign in: optional. Without an account your data stays on the device only, and is lost on uninstall unless your device itself is backed up.
- Bank link: optional, and only on the paid tier. Disconnecting a bank from inside the app is not available yet; email usand we will remove the connection.
- Delete your data: see deleting your account.
- Subscriptions: manage or cancel in Google Play → Subscriptions.
Data retention
- On-device wallet: until you clear the app's data or uninstall it
- Cloud wallet: until you request deletion, or after PLACEHOLDER-inactive-account-retention-period of account inactivity
- Plaid tokens: while your bank stays connected; removed when the connection or your account is deleted
- Transaction data: aggregated year-to-date and spend summaries stored in your wallet snapshot
Security
- TLS on every network request to our server
- Plaid access tokens stored only on the server, never in the app
- Card numbers and CVV never persisted or transmitted after validation
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. What we do and do not claim is set out on thesecurity page.
Children
Cardflare is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect data from children.
International users
If you use Cardflare outside the United States, your data may be processed in the United States, where our servers and providers operate.
Changes
We may update this policy. We will post the new date at the top and, where required, tell you in the app.
California (CCPA) notice
California residents may request access to, or deletion of, the personal information we hold. We do not sell personal information as the CCPA defines it.
EEA / UK (GDPR) notice
Legal bases: contract (providing the app), consent (location, bank link, sign-in), legitimate interest (security and fraud prevention).
Rights: access, rectification, erasure, restriction, portability and objection. Contact us to exercise them.
Contact
Questions or deletion requests: [email protected].