Privacy Policy

• We do not collect or store your credit card numbers, expiration dates, CVV, or any other payment instrument data.
• We do not connect to your bank, read transactions, or use any aggregator (Plaid, MX, Finicity, etc.).
• You add a card product(e.g. "Amex Platinum"); we map its benefits. You log when you use a benefit. That's the data.
• You sign in with Apple or Google — we only ever receive a stable user ID and an email address (and with Apple's "Hide My Email," just the relay address).
• You can delete your account and all associated data at any time from inside the app or at walletbuddy.app/delete-account.

We collect the minimum information needed to operate WalletBuddy.

Account information

• Sign-in identifier and email.When you sign in with Apple or Google, we receive a stable user identifier and an email address. If you use Apple's "Hide My Email," we only receive Apple's private relay address.
• Display name (optional). Only if your sign-in provider shares it or you provide it during sign-in.

Wallet & benefit usage data

• The credit card productsyou add to your wallet (e.g. "Chase Sapphire Reserve"). We do not ask for, see, or store your actual card number, expiration date, CVV, or cardholder name.
• The benefits you mark as used: which benefit, the date, and the dollar amount you logged.
• Notification preferences (which reset reminders you want to receive).

Subscription information

• If you purchase a WalletBuddy Pro subscription, the purchase is processed by Apple via in-app purchase. RevenueCat, our subscription-management provider, sends us the subscription details needed to unlock and manage Pro access, such as entitlement status, product ID, billing period type, expiration date, renewal status, store, environment, and transaction identifiers. We do not receive your Apple ID payment details.

Device & diagnostic data

• Product analytics (screens viewed, feature taps, app version, OS version, device model). We use PostHog for this; when you're signed in, analytics may be associated with your account ID and basic account properties such as email, display name, card count, subscription tier, and theme preference. Analytics are not tied to any payment identifier.
• Crash reports and performance traces to keep the app stable.
• Approximate region (derived from IP at the time of a request) for security and rate-limiting. Other than the optional Nearby feature described below, we do not collect GPS or precise location.

Location data

• When you use the Nearby feature, WalletBuddy requests your device's location while you're using the app to find nearby stores and restaurants and recommend which of your cards to use. Your location is processed on your device and sent only to Apple Maps to look up nearby places. It is never sent to or stored on WalletBuddy's servers, never linked to your account, and never used for tracking or advertising.

• Operate the core features of the app — your wallet, benefit tracking, and reset reminders.
• Find nearby stores and restaurants and suggest the best card to use, when you choose to use the Nearby feature.
• Send local and push notifications you've enabled (e.g. reset reminders).
• Process and validate subscription entitlements through Apple and RevenueCat.
• Diagnose bugs, prevent abuse, and improve product quality.
• Respond when you contact support.
• Comply with legal obligations.

We do not sell your personal information, and we do not use your data for cross-context behavioral advertising.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: (a) performance of a contract — to deliver the Service you requested; (b) legitimate interests — to keep the Service secure, improve product quality, and prevent fraud; (c) consent — for optional push notifications and certain analytics, which you can withdraw at any time in your device settings; and (d) compliance with legal obligations.

We share limited information with the providers below only as needed to run the Service. Each provider acts as a data processor on our behalf.

• Apple Inc. — Sign in with Apple, App Store distribution, in-app purchase, push notification delivery, and Apple Maps lookups for the Nearby feature.
• Google — Google Sign-In authentication, if you choose to sign in with Google.
• Convex — Our backend database and serverless functions. Your wallet and benefit data live here.
• RevenueCat — Subscription entitlement management.
• PostHog — Product analytics and crash telemetry.
• Expo (EAS) — App build, release, and over-the-air updates.
• Vercel — Hosting for walletbuddy.app.

We keep your account data for as long as your account is active. When you delete your account, we delete your wallet, your benefit usage history, and your account record within 30 days, except where we are required to retain limited records (e.g. subscription receipts) for legal, tax, or fraud-prevention purposes. Anonymized, aggregated analytics may persist with no link back to you.

We use industry-standard safeguards: TLS in transit, encryption at rest, hardened authentication via Apple, and least-privilege access to our backend. No system is perfectly secure, but because we do not store payment instrument data, the blast radius of any incident is intentionally small.

WalletBuddy is rated 17+ and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us at privacy@walletbuddy.app and we will delete it.

Depending on where you live, you may have the right to access, correct, port, restrict, or delete the personal information we hold about you, and to object to or withdraw consent for certain processing. You can exercise most of these rights from inside the app:

• Access / export: email us at privacy@walletbuddy.app and we'll provide a copy of your data.
• Delete account: Settings → Delete Account, or at walletbuddy.app/delete-account.
• Push notifications: manage in your iOS Settings.

You can also reach us at privacy@walletbuddy.app or through our support page. California residents may exercise rights under the CCPA/CPRA, and EEA/UK residents may lodge a complaint with their data protection authority.

Because the Nearby feature uses your precise location — which California and several other states treat as "sensitive" personal information — we want to be explicit: we use it only to provide that feature, we do not sell or share it, and we do not use it to infer characteristics about you. There is therefore nothing for you to "limit," and you can switch the feature off at any time by denying or revoking the location permission in your iOS Settings.

We process data in the United States. If you access WalletBuddy from outside the U.S., your information will be transferred to and processed in the U.S. by our service providers, who are bound by appropriate safeguards (standard contractual clauses where required).

If we make material changes, we will post the updated policy here and, where appropriate, notify you in the app. Continued use after the effective date means you accept the updated policy.

Questions or privacy requests? Email us at privacy@walletbuddy.app, or reach us through our support page.