CardWise Privacy Policy

Last updated: October 2, 2026

CardWise (“the app”) helps you pick the best credit card to use for a purchase based on the merchant and category. This policy explains what data the app handles.

What CardWise does not do

• No user accounts, sign-up, or login.

• No analytics, advertising, or tracking SDKs.

• No purchase amounts are ever requested or stored.

• No location data is collected.

• No data is sold.

What CardWise stores, and where

On your device only, unless you turn on the assistant: - The list of cards you add to your wallet (card name, issuer, reward terms) and any personal settings, such as your Discover 5% category selections. This is stored locally in the app’s private storage. It leaves your device only if you turn on the assistant, described below.

Sent to CardWise’s own backend (Supabase): - When the app syncs its catalog of official card templates and merchant-category mappings (“Sync now” or automatic background sync), it makes a network request to CardWise’s Supabase project to fetch the latest reviewed card and merchant data. No personal or wallet data is included in this request. - If you submit a “Request a missing card” form, the card name and description you type are sent to CardWise’s Supabase project so the team can review and potentially add the card template. No other data accompanies this request.

The assistant (optional, off by default)

CardWise includes an assistant you can ask questions such as “which card should I use for groceries?”. It is off until you turn it on, and you can turn it off again at any time in Settings. If you never turn it on, nothing in this section applies to you.

What is sent when you use it: - The questions you type. - The information needed to answer them: the cards in your wallet (card name, issuer, reward terms) and any bonus categories you have marked as activated. - A random identifier created by the app for this installation. It is not linked to your name, your Google account, or your device’s identifiers, and is used only to apply fair-use limits and to keep your conversation separate from other people’s.

Who receives it: - CardWise’s assistant service, which runs on Google Cloud. - OpenAI, whose AI model writes the replies. OpenAI processes this data on CardWise’s behalf to generate the answer. OpenAI states that data sent through its API is not used to train its models unless the customer opts in, and CardWise has not opted in. OpenAI may keep requests and replies for up to 30 days to monitor for abuse, and longer where the law requires it. OpenAI’s own description is at https://developers.openai.com/api/docs/guides/your-data.

How long it is kept: - Conversations are kept on CardWise’s servers only so an answer can be completed, and are deleted within 24 hours of your last message. - CardWise keeps a usage record for up to 90 days: the number of requests, the amount of text processed, which lookups were used, and a scrambled form of the random identifier. It does not contain what you asked or what was answered. - If you tap “Report” on an answer, that answer and any note you add are sent to the CardWise team for review and kept for up to 180 days.

What the assistant can do: - It can look up your cards and suggest changes to your wallet, such as adding a card. It never makes a change without asking you to confirm first. - Its answers are generated by an AI model and can be wrong. Check reward terms with your card issuer before relying on them.

Do not type sensitive information such as card numbers, passwords or account details into the assistant. It does not need them.

Data retention and deletion

Wallet and settings data lives on your device and is deleted when you uninstall the app or clear its storage. Card-request submissions are retained by CardWise for the purpose of reviewing and adding new card templates.

If you have used the assistant: turning it off stops any further data being sent. Conversations already on CardWise’s servers are deleted automatically within 24 hours. Because CardWise has no accounts and stores only a scrambled random identifier, it cannot look up records belonging to a particular person; to ask about a report you submitted, contact the address below with the approximate date and what you reported.

Children’s privacy

CardWise is not directed at children and does not knowingly collect data from children.

Changes to this policy

If this policy changes, the “Last updated” date above will be revised.

Contact

Questions about this policy can be sent to: jnpallav.jain@gmail.com