Privacy Policy

1. Who we are

CardTrack, LLC operates the CardTrack credit card management app. If you have questions about this policy, contact us at support@getcardtrack.com.

2. What data we collect

• Account information: email address, name, and authentication credentials (password hash or OAuth identity from Google).
• Card information you enter: card nickname, last four digits, credit limit, statement due day, account type (personal/business), and promotional APR details.
• Balance and payment history: balances, minimum payments, paid amounts, paid types, and statement dates you log or extract from uploads.
• Statement uploads: PDF files you upload for AI-assisted data extraction. These are stored in a private bucket accessible only to you.
• Usage data: basic app interactions required to render your dashboard (e.g., which cards you view). We do not use tracking pixels or advertising identifiers.

3. How we use your data

• To provide the CardTrack service (dashboard, card tracking, payment reminders, and statement extraction).
• To authenticate you and keep your account secure.
• To communicate with you about your account (e.g., password reset emails).
• To improve app stability and fix bugs.

We do not sell your personal data. We do not use your data for targeted advertising.

4. Data sharing

We share data only with service providers necessary to run the app (managed cloud hosting, database, storage, and email delivery). All providers are bound by confidentiality and data protection obligations. We do not share data with third parties for marketing.

5. Cookies and analytics

CardTrack uses essential cookies and local storage to maintain your session and app preferences. We do not use third-party analytics or advertising cookies.

6. Data retention

We keep your data for as long as your account is active. When you delete your account, your personal data, card records, balances, and statement files are removed immediately.

7. Your rights

Depending on your location, you may have rights to access, correct, or delete your personal data. You can update most information directly in the app. To request deletion or ask about your data, email support@getcardtrack.com.

8. Security

We use industry-standard measures including encrypted connections (TLS), row-level database access controls, and private storage buckets. See our Trust & Security page for more details.

9. Changes to this policy

We may update this Privacy Policy as our practices evolve. We will post changes on this page with a revised effective date.