Card Shark Privacy Policy
Card Shark is made by Card Shark LLC, a Hawaii limited liability company ("we", "us"). Questions: [email protected].
Card Shark helps you get the value out of your credit cards: it tracks statement credits, rotating categories, annual fees and spending goals, and reminds you before things expire. This policy explains what the app collects, why, and what you can do about it.
The short version
- You can use Card Shark without an account. Then everything you enter stays on your phone, and we never receive it.
- An account is optional and only exists to back up your data so you can restore it on another phone.
- Card Shark never asks for card numbers, bank logins or your location, and has no ads, analytics or tracking.
- We don't sell your information or share it for advertising.
- You can delete your account and its backup from inside the app at any time.
If you use Card Shark without an account
Everything you enter is saved only on your device:
- the cards you hold (name, the date you opened them, annual fee, card color)
- the goals you track (for example a welcome offer or airline status target)
- spending you log (date, amount and any note you type)
- credits and perks you mark as used
- your reminder settings and reminders you dismissed
Reminders are scheduled by your phone as local notifications. None of this is sent to us. Deleting the app deletes this data.
Card updates and problem reports
- Card details updates. The app checks our server now and then for updated card details (credits, earn rates, rotating categories) and downloads them. The request doesn't include anything you entered. Like any web request, it shows our hosting provider your IP address, which is kept in short-lived server logs.
- "Something wrong? Tell us." If you report a problem with a card's details, we receive what you type, which card it's about, the app and card-details version, and whether you're on iPhone or Android. If you're signed in, the report is linked to your account. We use reports only to check and fix card details.
If you sign in
Signing in is optional. When you do, we collect:
| What | Why |
|---|---|
| Your email address. With Sign in with Apple this may be a private relay address Apple creates, if you choose "Hide My Email". | To create your account, sign you in, and send account emails such as confirming your address or resetting your password. |
| An account ID, and for Sign in with Apple, the ID Apple gives Card Shark for your Apple Account. | To recognize your account. We don't ask Apple for your name. |
| A backup of your Card Shark data: the same items listed above, including any notes you typed on spending entries. | To restore your data on a new phone, or if you reinstall. |
| Your password, if you sign in with email. It's stored only as a secure hash, never in readable form. | To sign you in. |
| Sign-in records: when you signed in, your IP address and device or browser type. | Kept by our hosting provider for security and to stop abuse. |
While you're signed in, the app updates your backup a few seconds after each change. We use this information only to provide the backup and sign-in, keep the service secure, and respond if you contact us. We don't use it for advertising or to build a profile of you, and we don't combine it with data from other companies.
What we don't collect
- Credit or debit card numbers, account numbers, or bank or card login details
- Your location, contacts, photos or files
- Advertising identifiers, or any data used to track you across other apps and websites
- Usage analytics or crash reports (none are built into the app today)
Who processes your information
We use a small number of service providers, only to run Card Shark:
- Supabase stores accounts, backups and problem reports, serves card details updates, and sends sign-in emails. Data is stored in the United States (AWS, us-east-1). Supabase's privacy policy
- Apple, if you use Sign in with Apple. Apple's handling of your Apple Account is covered by Apple's privacy policy.
We may also share information if the law requires it, to protect people's safety or our rights, or as part of a business transfer such as a merger, in which case this policy will continue to apply to your information.
How long we keep it
- Account and backup: until you delete your account. Each new backup replaces the previous one.
- Problem reports: kept so we can track what was fixed. If you delete your account, reports you sent stay but are no longer linked to you.
- Sign-in records: kept by our hosting provider for a short period for security, then deleted.
- After you delete your account: your account and backup are deleted from our database right away. Copies may remain in our provider's system backups for a limited time before they're overwritten.
Your choices and rights
- Use the app without an account. All features work without one.
- Sign out in Settings (the gear at the top right). Your data stays on your phone and is no longer backed up.
- Delete your account in Settings (the gear at the top right, then Delete account). This deletes your account and backup. Data on your phone stays until you delete the app.
- Access or correct your data: everything we hold is what you see in the app. You can also email us for a copy.
- Depending on where you live (for example California or the EU/UK), you may have rights to access, correct, delete or port your information, or to object to how it's used. Email [email protected] and we'll respond within 30 days. We won't treat you differently for using these rights.
If you use Sign in with Apple, you can also stop using it for Card Shark in your iPhone's Settings under your name > Sign in with Apple.
This website
getcardshark.app has no cookies, analytics or ads, and loads nothing from other companies. Our web host, Cloudflare, keeps standard server logs (such as IP address and pages requested) for a short time for security and to keep the site running.
Security
Backups are sent over encrypted connections (HTTPS) and stored with access rules that let each account read only its own backup. No system is perfectly secure, but we'll tell you without undue delay if a breach affects your information, as the law requires.
Children
Card Shark is meant for adults who manage credit cards. It isn't directed to children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we'll delete it.
Changes to this policy
If we change what we collect, for example if we add an optional bank or card connection, we'll update this policy before that change ships and show you a notice in the app. The effective date at the top shows when it last changed.
Contact
Card Shark LLC[email protected]