Privacy Policy

Last updated: August 13, 2026

This Privacy Policy explains how CardSense ("we", "our", "us") processes information when you use the App. We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

1) Information We Process

1.1 Account and identity information

• Google sign-in account information (such as user ID, email, and display name).
• Session data used to keep you signed in.

1.2 Financial and usage information you provide

• Card metadata (for example: bank name, cardholder name, and masked card number / last 4 digits).
• Statement and transaction records (amounts, merchants, dates, categories, notes, and related metadata).
• Security and alert records generated by App features (for example spend-guard or suspicious activity logs).

1.3 Files and camera inputs

• Statement PDF data you select for import.
• Receipt images/text processing when you use receipt scanning features.
• The App is designed to use your statement password only for decryption flow and not store it.

1.4 Preferences and settings

• Privacy mode, reminder settings, language, app lock settings, and related app preferences.
• PIN is stored as a hash for app-lock functionality.

1.5 Analytics and diagnostics

• App analytics events (for example feature usage events) via integrated analytics tooling.
• Local support/error logs (including user-friendly messages and limited technical details) to help troubleshooting.

1.6 Location Information

• If you grant the necessary permissions, the App collects and processes your precise location data (foreground and background). This data is used exclusively to power proximity-based features, such as notifying you of nearby credit card promos (Geofencing) and enabling the Spend Guard security feature. You can disable location access at any time in your device settings.

1.7 Subscription & Billing Information

• We track your current subscription status (Free, Basic, Premium) to enforce card limits and unlock features. Payment processing and subscription management are handled securely by third-party providers (e.g., Google Play, Apple App Store, and RevenueCat). We do not collect or store your underlying payment method details (like your actual credit card number used for the purchase).

2) How We Use Information

• Authenticate your account and maintain session state.
• Provide core features such as card tracking, statement import, transaction history, reminders, and insights.
• Synchronize data between local device storage and configured cloud backend.
• Improve reliability, monitor feature usage, and troubleshoot issues.
• Generate notifications and optional exports you request.

3) Unsupported Statement Contribution Uploads

If your statement format is not yet supported, the App may ask for your explicit consent to submit a copy for parser improvement. In that flow, the upload payload is designed to include only the PDF bytes, optional bank hint, and submission timestamp, and to exclude your PDF password.

4) Where Data Is Stored

• On device: Local app database and settings storage for offline-first operation.
• Exports: Reports (PDF/CSV) are generated in app cache and only shared when you choose to share them.

5) Sharing and Third-Party Processors

We do not sell your personal information. Data may be processed by third-party services used to operate the App, including providers for authentication, cloud database/sync, analytics (such as Google Analytics for Firebase), mapping/location features, subscription management (RevenueCat), and optional contribution upload endpoints.

6) Security Measures

We implement reasonable and appropriate organizational, physical, and technical security measures to protect your personal information in compliance with the Data Privacy Act. The App includes technical safeguards such as suspicious environment checks, and secure display behavior on selected screens. Data synchronized with our cloud backend is encrypted in transit and at rest. These controls help reduce risk, but no method of storage or transmission is fully secure.

7) Your Choices and Controls

• You can edit or delete records in-app (for example cards and transactions).
• You can sign out, change settings, and disable/adjust reminders.
• You can decline unsupported-statement contribution uploads.
• You can contact us for privacy requests (including data questions) at the email below.

8) Data Retention

We retain information as needed to operate App features, maintain sync integrity, and support troubleshooting, unless you remove data or request deletion where applicable. Upon account deletion, your personal data is purged from our active cloud databases within 30 days.

9) Rights of the Data Subject

Under the Philippine Data Privacy Act of 2012, you are entitled to the following rights regarding your personal data:

• Right to be informed: You have the right to know what personal data is being processed and why.
• Right to object: You can object to the processing of your personal data, including processing for direct marketing or profiling.
• Right to access: You can request access to your personal data that we hold.
• Right to rectification: You have the right to dispute any inaccuracy or error in your personal data and have it corrected.
• Right to erasure or blocking: You can request the suspension, withdrawal, blocking, removal, or destruction of your personal data from our systems.
• Right to damages: You may claim compensation if you suffer damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your data.
• Right to data portability: You have the right to obtain a copy of your data in an electronic or structured format.
• Right to file a complaint: If you feel your privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission (NPC).

10) Children’s Privacy

The App is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

11) International Processing

Depending on your infrastructure and service providers, information may be processed in countries other than your own.

12) Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted in this document with a revised "Last updated" date.

13) Contact and Data Protection Officer (DPO)

For any inquiries, requests, or concerns regarding your privacy and data subject rights, you may contact our designated Data Protection Officer at:

Email: mejiamariano8.08@gmail.com

Related terms: Terms and Conditions