Your cards are personal.We treat them that way.

Depending on how you use CardsHere, we may collect and hold:

• Account and contact information, such as your name, email address, mobile number and account identifiers.
• Authentication and security information, including sign-in provider details, verified contact methods, session information, multi-factor authentication status and registered passkeys. CardsHere does not receive your Google or Facebook password, or the private key stored on your passkey device.
• Wallet and loyalty-card information, including retailer or brand, card name, membership or card number, barcode value and format, labels, categories, notes, colours and logos.
• Photos and imported files you choose to provide, such as card screenshots and front or back card photos.
• Sharing information, including invitations, shared-wallet membership, co-ownership, permissions and activity needed to operate those features.
• Communications and support information, including messages you send us and delivery records for essential emails and verification texts.
• Technical information, such as IP address, browser or device type, app version, request times, security events and diagnostic logs created when the service is used.

Please use CardsHere for loyalty, membership and similar cards—not payment-card security codes, account passwords, government identifiers, health records or other information you do not need at checkout.

We use personal information to:

• create and secure your account, keep you signed in and verify your identity;
• store, display, scan, import, edit and organise your cards;
• operate shared wallets, co-ownership, invitations and the permissions you select;
• send requested verification codes, sign-in messages, invitation notices, security notices and service updates;
• provide support, troubleshoot failures and improve reliability and accessibility;
• detect misuse, protect accounts and investigate security incidents; and
• comply with applicable law and enforce our rights.

We do not currently use wallet contents to target advertising, and we do not sell personal information. If that practice ever changes, this policy and any required choices or notices will be updated before the change takes effect.

CardsHere uses your verified mobile number only for account security, two-factor verification and preventing duplicate CardsHere accounts. We do not use your email address or mobile number for marketing, sell or share them for advertising, or send promotional spam.

People you choose. When you invite someone, use co-ownership or place cards in a Shared Wallet, the invited people can receive and use the information permitted by their role. Co-owners may have broad access to view, add, edit or remove wallet content. Review permissions before sending an invite.

Service providers. We use suppliers that process limited information to provide CardsHere:

• Supabase for authentication, databases and protected file storage;
• Vercel for website and server hosting;
• Resend for transactional email delivery;
• Kudosity for SMS verification delivery; and
• Google and Meta/Facebook when you choose those sign-in or linked-account options.

These providers may process information in Australia, the United States and other countries where they or their infrastructure operate. Privacy protections and laws can differ between countries. We take reasonable steps appropriate to the service and information involved when engaging providers.

We may also disclose information where required by law, to respond to a valid legal process, to prevent serious threats or fraud, or as part of a business transfer with appropriate safeguards. We do not disclose your wallet to loyalty-card brands merely because you save one of their cards.

When you select screenshots or card photos for import, CardsHere analyses them for a barcode and recognisable brand information. Initial barcode and text recognition is designed to run in your browser or app on your device. A selected image is only stored with your account when you choose to save it as part of a card.

Saved card photos are uploaded to protected Supabase storage. The app requests time-limited signed links when it needs to display them. People with access to the relevant shared or co-owned wallet may also be able to view those photos.

Automated scanning is used to suggest card details and reduce typing. It does not make decisions that significantly affect your legal rights or interests. You can review and correct recognised details before saving them.

CardsHere uses access controls, encrypted network connections, account authentication, database row-level protections and protected photo links. Optional multi-factor authentication and passkeys provide additional account security. No online service can guarantee absolute security, so protect your sign-in methods and tell us promptly if you suspect unauthorised access.

We keep information for as long as needed to operate your account, provide shared-wallet features, meet legal and security obligations, resolve disputes and maintain necessary records. Retention periods vary by data type. Backups and security logs may remain for a limited period after active information is deleted.

Deleting a card removes it from the active wallet, subject to backups and any copy another authorised wallet participant has legitimately retained. Account deletion requests may require us to verify your identity and deal appropriately with co-owned or shared content before deletion is completed.

You can start a deletion request through our dedicated data deletion page. Requests sent by Meta/Facebook are accepted through a signed, server-to-server callback and receive a confirmation code for tracking.

CardsHere uses essential browser storage and cookies to maintain secure sessions, remember necessary app state and protect restricted areas. We do not currently use third-party advertising cookies.

You can:

• view and edit your cards, labels, notes, photos and sharing permissions in the app;
• decline optional photos, social sign-in, shared-wallet features or additional authentication methods;
• leave a Shared Wallet where the available role and ownership rules allow;
• ask for access to personal information we hold about you or ask us to correct it; and
• request account and personal-information deletion, subject to identity verification and lawful retention requirements.

Send access, correction or deletion requests to support@cardshere.com. Describe what you need and the account involved. We may ask for enough information to confirm that the request relates to you.

If you are under 16, use CardsHere with the involvement of a parent or guardian. A parent or guardian who believes a young person has provided personal information without appropriate involvement can contact us.

CardsHere is operated in Australia. For privacy questions, complaints or requests, email support@cardshere.com. We will acknowledge and investigate privacy complaints, may ask for further details, and will explain the outcome or available next steps.

If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner (OAIC).

We may update this policy when CardsHere, our providers or legal requirements change. The latest version will remain at this URL with its effective date. We will provide additional notice where a change materially affects how existing personal information is handled.

You must provide accurate account information, keep your sign-in methods secure, and tell us promptly if you suspect unauthorised access. You are responsible for activity carried out through your account unless applicable law says otherwise.

CardsHere is intended to organise loyalty, membership, gift and similar cards. Do not use it to store payment-card security codes, passwords, unlawful material, malicious code, government identity documents or information you do not have a right to use.

You must not interfere with the service, probe or bypass security, scrape it at unreasonable volume, impersonate another person, or use CardsHere to harm another person or break the law.

You keep ownership of content you submit. You give CardsHere a limited licence to host, process, copy, display and transmit that content only as reasonably needed to operate, secure and improve the service and provide features you request. This licence ends when the content is deleted, subject to backups, lawful retention and copies legitimately shared with other users.

You are responsible for card details, photos, notes and invitations you add. Shared-wallet and co-owner roles can give other people access to view, add, change or remove content. Check the stated permissions before inviting someone and review access regularly.

Retailer names and logos belong to their respective owners. CardsHere is an independent card organiser and is not endorsed by, affiliated with or responsible for a brand merely because that brand appears in the app.

We aim to keep CardsHere reliable, but the service may occasionally be unavailable, changed or updated. We may add, remove or alter features for security, legal, technical or product reasons. Where practical, we will give reasonable notice of material changes.

Barcode scanning, photo recognition, brand matching and imported details can be incomplete or inaccurate. You should review card details before saving or presenting them. We do not guarantee that a retailer will accept a displayed barcode or honour a loyalty, membership or gift-card benefit.

You are responsible for keeping your device, browser and app reasonably current. App updates may be offered through an app store, CardsHere or an authorised build and distribution service.

We may restrict or suspend access where reasonably necessary to protect users or the service, investigate misuse, comply with law, or address a serious breach of these terms. You may stop using CardsHere and request deletion of your account at any time.

Nothing in these terms excludes, restricts or modifies any right or guarantee that cannot lawfully be excluded, including rights under the Australian Consumer Law. To the maximum extent permitted by law, CardsHere is not liable for indirect or consequential loss, lost loyalty benefits, or loss caused by information you entered, third-party services, retailer decisions or use contrary to these terms.

These terms are governed by the laws applicable in Queensland, Australia, and courts with jurisdiction there, subject to any mandatory rights you have elsewhere. Questions about these terms can be sent to support@cardshere.com. We may update these terms and will identify the current version by the effective date on this page.