Draft — pending legal review
Privacy Policy
Cardelier helps you choose which of your Singapore credit cards to use for a purchase. This policy explains what personal data we handle, why, and the choices you have. We follow Singapore's Personal Data Protection Act 2012 (PDPA).
Using the app without an account
You can pick your cards, log spending and get recommendations without signing in. In that case your cards, card settings, logged transactions and preferences stay on your device and are not sent to us.
To keep card rules up to date, the app downloads rule updates from our servers. Those requests carry your IP address, the app version and the platform (iOS or Android). We use them to deliver updates, keep the service secure and count which app versions are in use.
What we collect when you sign in
- Sign-in details. If you use Sign in with Apple, a user identifier from Apple and the email address Apple shares with us, which may be a private relay address. If you sign in with Google, a user identifier from Google and the email address on your Google account. We never see your Apple or Google password.
- Data you choose to sync. The cards you hold and their settings (such as the card anniversary month), the transactions you log (card, spending category, amount, payment method, currency, date, the merchant name if you enter one, and which card the app recommended when you logged it from a recommendation), benefit usage you mark, alert settings, and app preferences such as your reward goal and appearance.
- Membership. If you subscribe, Apple sends us the subscription product, transaction identifiers, purchase and expiry dates, and whether it was refunded. We never receive your payment card details.
We do not collect card numbers, bank account numbers, bank logins, your location or your contacts.
Feedback
When you use Report a problem, we receive your message, the app version and your device's OS version, and your email address if you choose to give it. If you are signed in, the feedback is linked to your account.
How we use your data
- To sign you in and keep your data in sync across your devices.
- To check your membership with Apple and unlock member features.
- To answer feedback and fix problems.
- To protect the service, for example by limiting repeated sign-in attempts.
- To understand how Cardelier is used and improve it, for example which cards and spending categories are common and how often people pay with the recommended card.
What we don't do
- We do not sell your personal data.
- We do not use your data for advertising or track you across other companies' apps and websites.
- We do not give your logged transactions to card issuers or other third parties.
Who else handles your data
We share data only as needed to run the service: with Apple or Google when you sign in with them, with Apple when you buy a subscription, and with our hosting provider that runs our servers. These providers may only use the data to provide their service to us.
Where your data is stored
Our servers are located in Singapore.
How long we keep it
We keep your account data for as long as your account exists. Feedback sent without an account is kept only as long as we need it to deal with the issue.
Deleting your account
You can delete your account in the app. This immediately deletes from our servers your account, all your synced data, feedback linked to your account and your subscription records. We keep only a record that an account was deleted, with no information about who you are. Copies held in server backups are removed when those backups are rotated out. Deleting your account does not cancel an App Store subscription: cancel it in your Apple ID settings.
Security
The app talks to our servers over encrypted connections (HTTPS). Only the Cardelier team can access personal data on our servers, and only to run, support and improve the service. Each time a team member opens an individual account's data, it is logged.
Your rights
Under the PDPA you can ask to access or correct your personal data, or withdraw consent to its use. Signed-in users can delete everything at any time by deleting their account. For any other request, contact us through Report a problem in the app or at hello@cardelier.net.
Changes to this policy
If we change this policy we will update the date above, and tell you in the app if the change is significant.
This page mirrors the text served inside the app (card-server 10fc1a6). The in-app version is the one that applies.