Effective date: July 30, 2026 · Last updated: August 28, 2026
Short version: Cardhaven has no accounts. Your cards, tickets, photos and barcodes stay on your device and in your own private iCloud account — we never see them, and nothing is sold or shared with third parties. The app does send anonymous usage statistics (which features get used, never what is on your cards) to a privacy-focused analytics service; see section 2.9.
1. Who We Are
Cardhaven is developed and maintained by the Cardhaven team ("we", "us", or "our"). If you have any questions about this policy, please contact us at support.actitrack@gmail.com.
2. What Data We Collect and Why
Cardhaven requests access to a few device capabilities to provide its features. Here is exactly what is accessed and why:
2.1 Your Cards & Passes On device
What: Card names, barcodes, membership numbers, balances, notes, expiry dates, tickets, and any photos or files you attach.
Why: This is the content of your wallet — it is what the app exists to show you.
Where it goes: The app's private storage on your device, plus your own private iCloud container if iCloud is enabled. Never our servers.
2.2 Camera Camera
What: The live camera view while you scan a card or ticket.
Why: To read a barcode or the printed details off a card so you don't have to type them.
Where it goes: Scanning and text recognition run entirely on-device using Apple's Vision framework. Frames are never uploaded.
2.3 Photo Library Photos
What: Only the individual photos or screenshots you pick.
Why: To import a card image, a ticket, or a photo of the front or back of a card.
Where it goes: Copied into the app on your device. We never read your library as a whole and never upload it.
2.4 Location Optional
What: Your approximate location, and the location of a store you choose to link to a card.
Why: To remind you about a card when you are near the store it belongs to.
Background location: Used only to trigger those store reminders. Entirely optional — the app works fully without it.
Where it goes: Stays on your device. Geofence monitoring is handled by iOS itself; no location is ever transmitted to us.
2.5 Notifications Optional
What: Reminders for expiring cards, upcoming tickets, and nearby stores.
Why: So a pass doesn't quietly expire or get missed.
Where it goes: Scheduled locally on your device. There is no push server and we send you nothing.
2.6 iCloud / CloudKit Sync iCloud
What: Your cards, attachments, and app preferences.
Why: To keep your wallet in sync across your own Apple devices and to survive a reinstall.
Where it goes: Your private iCloud container. Only you can access it through your Apple ID; we have no access. Turn it off in iOS Settings → [Your Name] → iCloud → Apps Using iCloud.
2.7 Shared Collections Optional
What: A collection of cards you explicitly choose to share.
Why: So family or household members can use the same cards.
Where it goes: Shared directly with the people you pick through Apple's iCloud sharing. You can stop sharing at any time from the app, and we never see the contents.
2.8 Purchases App Store
What: Whether you have an active Pro purchase or have left a tip.
Why: To unlock Pro features on your devices.
Where it goes: Handled entirely by Apple's App Store. We never receive your name, card details, or billing address.
2.9 Anonymous Usage Statistics Analytics
What: Anonymous counts of which features are used — for example that a card was added, that a scan succeeded or failed, or that a purchase completed. Each signal carries the app version, OS version, device model and country, plus an anonymous key derived by irreversibly hashing your device's vendor identifier with an app-specific salt.
What it never includes: Anything on your cards. No card names, numbers, barcodes, balances, photos, notes, categories or store locations are ever sent. The signals record that a feature was used, never what you used it on.
Why: To see which features are worth keeping and where the app is failing — a scan that errors or an import that breaks is otherwise invisible to us, because there are no accounts and no server-side logs.
Where it goes:TelemetryDeck, an analytics provider built for privacy and hosted in the EU. It does not build advertising profiles, does not use an advertising identifier, and does not track you across other apps or websites. We cannot tie any signal back to you, and neither can they.
3. Data We Do NOT Collect
We do not run servers that store your cards. Apart from the anonymous usage statistics in section 2.9, the app's own network traffic goes only to Apple's iCloud, on your behalf.
We do not use advertising identifiers (IDFA) or any ad tracking.
We do not use advertising or profiling SDKs (no Firebase, Amplitude, Mixpanel, no ad networks). The one third-party SDK in the app is TelemetryDeck, covered in section 2.9.
We do not send the contents of your cards anywhere except your own iCloud.
We do not sell, rent, or trade your data to any third party.
We do not have access to your iCloud data.
We do not ask you to create an account, and we do not collect your email address.
4. Diagnostics & Crash Logs
Cardhaven keeps a small diagnostic log on your device to help troubleshoot problems. It never leaves your device unless you attach it yourself when sending feedback by email. The app also uses Apple's native MetricKit framework, which delivers anonymized crash and performance reports through the App Store; that data contains no personally identifiable information, and you can opt out in iOS Settings → Privacy & Security → Analytics & Improvements.
5. Children's Privacy
Cardhaven is not directed at children under 13. We do not knowingly collect any personal information from children.
6. Your Rights
Because all your data is stored on your own device and in your own iCloud account, you are in full control:
No account to delete: The app has no sign-up and no user account, so we hold nothing of yours to delete.
Delete your data: Delete a card to remove it from the app and from your iCloud sync, or delete the app to remove all local data at once.
Revoke permissions: Go to iOS Settings → Cardhaven to revoke Camera, Photos, Location, or Notification access at any time.
iCloud data: Manage or delete the synced copy through iOS Settings → [Your Name] → iCloud → Manage Account Storage.
Export: You can export your cards to a CSV file at any time from Settings.
7. Changes to This Policy
If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. Continued use of the app after changes constitutes your acceptance of the revised policy.
8. Trademarks
Cardhaven is an independent app. It is not affiliated with, endorsed by, or sponsored by any retailer, loyalty programme, or card issuer. Store, brand, and programme names are the trademarks of their respective owners and are used only to describe the cards you choose to add.
9. Contact
If you have questions or concerns about this policy, please contact us at: