Privacy Policy & Terms of Service

Welcome to Card Wise, an application owned and operated by Card Wise ("we", "us", or "our"). We host our services under the domain name cardwise.pk.

This document describes our Privacy Policy and Terms of Service. By downloading, accessing, or using Card Wise (the "App"), you agree to the collection, storage, and usage of your personal data as defined here, and agree to abide by our terms.

1. Data We Collect

We collect data necessary to provide, improve, and personalize your experience. This includes:

• Identity & Account Information: Your name, email address, and authentication credentials when you sign up.
• Guest Browsing: Browsing without an account may create an anonymous session identifier so the App can load public offers without asking for a name, email, or password.
• App Preferences & Usage: Your selected city, saved cards, notification preferences, favorited offers, votes, feedback, and app settings.
• Saved Card Metadata: Bank name, card name, card type, and similar eligibility metadata. We never ask for or store full card numbers, CVVs, expiry dates, bank passwords, bank logins, or transaction history.
• Location Data: If you grant permission, the App may use your approximate or precise location to show nearby merchant branches and offers. Location permission is requested only when you open location-based features such as the nearby map.
• Usage & Device Analytics: We collect usage metrics, screens viewed, features used, approximate location derived from usage context, and device information such as operating system and analytics identifiers through analytics tools such as Mixpanel.
• Push Notification Tokens: If you opt in to notifications, we collect and store device push notification tokens to deliver offer updates, reminders, and app messages.

2. How We Use Your Data

We use your data to power and customize your App experience, specifically:

• Personalizing deals based on the credit/debit cards you own.
• Customizing offers according to your selected city and saved card metadata.
• Showing nearby merchant branches and offers when you use map-based features.
• Securing your account and allowing access from multiple devices.
• Sending notifications only after you grant device permission and enable notification preferences in the App.
• Tracking application usage patterns to improve performance and guide feature development.

3. Data Security & Storage

Personal data and preferences are stored in secure cloud services hosted via Supabase and related service providers. We use HTTPS/TLS encryption in transit and Supabase Row Level Security (RLS) policies to protect user-specific profile, saved card, favorites, and preference data. We do not store or process financial credentials, banking passwords, card numbers, CVVs, expiry dates, or payment transactions.

4. Service Providers & Third-Party Tools

We do not sell, rent, or trade your personal data. We may share limited personal, device, and usage data with trusted service providers who help us operate the App, host the backend, send push notifications, and analyze usage, including Supabase, Expo, and Mixpanel. These providers are permitted to use your data only to perform services on our behalf and according to their own security and privacy obligations.

5. Account & Data Deletion

We provide users with control over their account data. You may request account deletion at any time in the App from Settings or Profile, or by contacting support@cardwise.pk.

Successful deletion removes your sign-in account, saved cards, favorites, profile data, votes, applications, feedback, notification preferences, and delivery tokens from our active database. We also submit an erasure request for your identified Mixpanel profile and events; processing can take up to 30 days. We may retain a restricted deletion-job identifier to track the request. Backups and provider security logs may remain for their normal retention periods and are not used to restore your account or for marketing.

6. Children's Privacy

Card Wise does not knowingly collect or solicit personal information from anyone under the age of 13. If we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible.

7. Terms & Acceptable Use

By using Card Wise, you agree not to:

• Attempt to scrape, reverse engineer, or exploit App code or deal data.
• Use automated systems or bots to access or interact with our APIs.
• Misrepresent your identity or register fake email addresses.