Privacy Policy

Last updated 29 July 2026

Privacy is not a feature we added later. The app was built around it.

What stays on your device

Your wallet (the list of cards you hold and their reward rules), your name and profile details, and your search history live only on your phone. There are no accounts and no bank logins, so we hold no record of who you are.

What leaves the device, and why

Three things, each for a concrete reason. Card product names (for example “Emirates NBD Titanium”) go to our backend so it can fetch the public reward rules for that card. Merchant and venue searches go to our backend to find live offers. And if you leave usage insights on, requests carry a pseudonymous profile: a random id that rotates monthly, your age band, employment bucket, country and app version. Nothing that identifies you.

What we never collect

Card numbers (we never ask for them, only card product names), statements, bank credentials, your real identity, and your precise location. Coordinates are used on the device to suggest the venue you are at and are never stored on our servers.

Your opt outs

Both switches live in Profile inside the app. Opt out of usage insights to strip the pseudonymous fields from every request. Opt out of search history to stop storing recent searches on the device.

Retention

Server request logs are kept for 7 days, then deleted. Usage insights are kept only in aggregate, and because the random id rotates every month, they cannot be stitched into a long term profile.

Questions

Anything unclear, or want something removed? Use Write to us in the app, or see the support page.