CardWise Privacy Policy

Effective July 21, 2026

CardWise ("we," "our," or "us") is a product of Poshway LLC. We built CardWise to help you consolidate your credit cards, track balances, and maximize your rewards — all in one place. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using CardWise, you agree to the practices described in this policy. If you do not agree, please stop using the app and delete your account.

1. Information We Collect

Account information: When you register, we collect your email address and a securely hashed password. We do not store your password in plain text.

Financial data via Plaid: To link your credit cards, CardWise uses Plaid Technologies, Inc., a trusted financial data aggregator. Through Plaid, we receive:

• Credit card account names and types
• Current balances and available credit
• Reward point balances (where available)
• Transaction data for spending analysis

We do not receive or store your bank login credentials. Plaid handles authentication directly with your financial institution using bank-level 256-bit encryption. Plaid's privacy policy is available at plaid.com/legal.

Usage data: We collect anonymized data about how you use the app (screens visited, features used, session length) to improve the product. This data cannot be used to identify you individually.

Device information: We may collect your device type, operating system version, and app version for debugging and crash reporting purposes.

2. How We Use Your Information

• To provide the CardWise service — display your linked cards, balances, and rewards
• To generate personalized card recommendations based on your spending patterns
• To send you optional notifications about rewards, deals, and account activity
• To diagnose technical problems and improve app stability
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your financial data for advertising.

3. How We Store and Protect Your Data

Your data is stored in a secure database provided by Supabase, Inc., hosted on AWS infrastructure in the United States. All data in transit is encrypted with TLS 1.2 or higher. Access to your data is restricted by Row Level Security policies — you can only access your own records.

Plaid access tokens (used to retrieve your account data) are stored encrypted and are never exposed in our app's frontend code.

4. Data Sharing

We share your data only with the following trusted service providers, and only as necessary to operate the app:

• Plaid Technologies, Inc. — financial data aggregation
• Supabase, Inc. — database and authentication infrastructure
• Sentry, Inc. — crash reporting and error monitoring (anonymized)

We may disclose your information if required by law, court order, or to protect the rights and safety of Poshway LLC, our users, or the public.

5. Your Rights and Choices

• Access: You can view all data we hold about you within the app.
• Deletion: You can delete your account at any time from the Profile screen. This permanently deletes all your data within 30 days.
• Disconnect cards: You can remove any linked card at any time, which revokes our access to that account's data.
• Notifications: You can opt out of push notifications in your device settings at any time.

6. Children's Privacy

CardWise is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

7. Your US Privacy Rights

Depending on the state where you reside, you may have the following rights regarding your personal information:

• Right to know — what personal information we collect and how we use it
• Right to access — a copy of the personal information we hold about you
• Right to delete — request that we delete your personal information
• Right to correct — request correction of inaccurate personal information
• Right to opt out — of the sale or sharing of your personal information
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights

These rights apply to residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Florida, and other US states with applicable privacy laws. We extend these rights to all US residents regardless of state.

We do not sell or share your personal information with third parties for advertising purposes. To exercise any of your rights, contact us at the email below. We will respond within 45 days.

8. Changes to This Policy

We may update this Privacy Policy as the app evolves. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect. Continued use of CardWise after the effective date constitutes acceptance of the updated policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Poshway LLC
Email: [email protected]