Privacy Policy

Last updated: 21 October 2026

Cardly is a private wallet for your credit and debit cards with bill and expiry reminders. It is built so that your card details never leave your phone.

What stays on your phone

• Card details — card number, CVV (if you add one), cardholder name, expiry, issuer, nickname, finish and any card image you upload.
• Reminders — due days, reminder times, tone and wording, and which bills you marked as paid.
• Backups — if you export one, the encrypted file is saved wherever you choose. If you turn on automatic backup, an encrypted file is kept in Cardly's private storage on this phone (it's included in your phone's own iCloud or Google backup, and only your backup password opens it). We never receive either.
• Your first name and what you use Cardly for, if you choose to enter them during setup. They stay on this phone.

All of this is encrypted on your device with a key kept in your phone's secure hardware (iOS Keychain / Android Keystore). Cardly does not upload, sync, sell or share it. We cannot see it, recover it, or hand it to anyone.

When you scan a card, the camera picture and any photos you pick are read on your phone (Apple Vision on iPhone, Google ML Kit on Android) and then discarded. They are never saved by Cardly or uploaded.

What we collect

• Sign-in identity — when you sign in with Apple, Google or email, Google Firebase Authentication receives your email address (or Apple's private relay address) and a user ID. This is used only to identify you. It is never linked to your cards.
• Crash reports — if the app crashes, Google Firebase Crashlytics receives a technical report (device model, OS version, the code that failed). Crash reports never include card details.

We do not use advertising, analytics or tracking. We do not read your SMS, emails, contacts or bank accounts.

Permissions

• Camera — to scan a card. Optional; you can type details instead.
• Photos — to pick a card photo to scan, or an image for a card's look. Only the photo you pick is used.
• Face ID / fingerprint — to unlock Cardly and reveal full card numbers. Biometric data stays with your phone's operating system.
• Notifications — to remind you before bills are due. Notifications show only a card's name and last four digits.

Deleting your data

In Settings → Delete account and cards, Cardly deletes your sign-in account and every card, image, reminder and key on the phone. Uninstalling the app also removes all card data from the phone.

Children

Cardly is not directed at children under 13.

Contact

Questions: support@pranavalle.com