What ShowCards stores
When you add a loyalty card, ShowCards may store the card name or brand, barcode or membership number, barcode type, card color, logo, category, order, notes, favorites, optional front or back photos, and app settings such as language, region, sync, backup, and app lock settings. This information is used to make the app work.
Card numbers and encryption
Card numbers are encrypted on your device before they are written to local storage. ShowCards uses AES-GCM encryption for sensitive card data.
Portable backup files and phone-to-phone transfer files are encrypted before they leave your device. If you protect a backup with a passphrase, we do not know that passphrase and cannot reset it.
Camera and photos
ShowCards asks for camera access only when you scan a barcode or transfer QR code. Camera frames and selected photos are processed on your device to detect barcodes and, where supported, text. They are not uploaded to our servers for scanning.
Cloud sync
If you enable sync, ShowCards uses your own private iCloud storage on iOS and your own private Google Drive app data storage on Android. We do not run an account system for your wallet and we cannot see the contents of your private cloud sync data. Apple or Google may process data as part of providing their cloud services, under their own privacy terms.
Backups and phone-to-phone transfers
You can export an encrypted backup file. That file is created on your device and protected by the passphrase you choose. You decide where to store or share it. If you lose the passphrase, we cannot recover the backup.
For phone-to-phone transfer, ShowCards creates an encrypted transfer file on your device. Our transfer service only helps create temporary upload and download links for that encrypted file. We do not store the decryption key with the file.
Transfer links expire after 24 hours and are intended to be deleted after successful import. Our server or hosting provider may process technical information such as transfer ID, upload and download timing, IP address, and standard request logs for security and troubleshooting.
Sharing a single card
When you share a card, ShowCards creates an encrypted share link. The card data is encrypted on your device. The encrypted payload and decryption key are placed in the URL fragment, the part of the link after the hash sign. Browsers do not send that fragment to our server.
If someone opens the link on the share page, the page decrypts the card locally in their browser so they can preview it or open it in ShowCards. The shared card data is not stored on our servers.
Anyone who has the complete share link can decrypt the shared card, so only send it to people you trust. Once a link has been sent, we cannot revoke copies of it because we do not store or control the card data.
Brand catalog and website requests
ShowCards may fetch public brand catalog data, logos, or app support pages from our servers. These requests do not include your card numbers. Like most websites and APIs, our servers or hosting providers may process standard technical data such as IP address, browser or device information, request time, and requested URL to deliver the service, prevent abuse, and diagnose problems.
Anonymous brand counts
When you add a card, ShowCards counts which brand it was, plus your region, language and device type. Never your card number, card name, notes or photos, and never anything that identifies you or your device. It also records how you added it (by scanning, by importing, by hand, or from a shared link) and when.
We use this to decide which brands to add and where to focus development. Each add is stored as its own line with the date and time, but with no identifier of any kind, so a line cannot be traced back to a person, a device or a wallet.
If a card has no brand from our catalog, we count it as other and never send the name you typed. We do not store the IP address of these requests.
You can turn this off at any time at the bottom of About ShowCards, in the app. When it is off, nothing is sent at all.
Advertising
ShowCards currently does not show ads.
We may add advertisements or offers in the future. If we do, our intention is to keep them contextual and card-level: for example, based on the brand, card, or category being viewed, not based on a user profile.
We will not use card-level advertising to sell your card numbers, build a personal advertising profile, track you across apps or websites, or share your wallet contents with advertisers. If future ads require new data collection, third-party SDKs, consent, or app-store disclosures, we will update this policy before that change ships.
What we do not do
We do not require a ShowCards account, sell your personal data, collect your card numbers on our servers, track you across other apps or websites, use third-party analytics SDKs, build a profile of you or your wallet, or use your contacts or precise location for advertising.
The only thing we count is described under "Anonymous brand counts" above: which brands are added, with no identifier attached, which you can switch off.
Deleting your data
You can delete cards inside the app at any time. Deleting the app removes local app data from your device. If you enabled cloud sync, you may also need to remove ShowCards data from your iCloud or Google Drive app data storage through Apple or Google settings.
Temporary transfer files expire automatically. Shared card links are not stored by us, but anyone who received a complete link may still have their own copy.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal data.
Because ShowCards does not operate user accounts or store your wallet on our servers, most card data is controlled directly by you on your device or in your private cloud account. For privacy questions, contact us at info@showcardsapp.com.
Changes to this policy
If we change how ShowCards handles data, we will update this policy. For important changes, such as adding advertising technology or new data collection, we will update the policy before the change ships.
Contact
Questions about privacy? Email info@showcardsapp.com.