Privacy Policy

Effective July 21, 2026

The short version

Your card inventory lives on your own computer, not our servers. We collect the minimum we need to run accounts and subscriptions: your email address, your subscription status, and pseudonymous usage analytics. Payments are handled by Paddle; we never see your card details. We do not sell your data.

Data stored on your device

Your inventory, scan images, storage locations, and app settings are stored in a local database on your machine. They are not uploaded to us. Uninstalling the app leaves this data on disk so it survives reinstalls; you can delete the app's data folder to remove it.

Account data

If you sign in, we store your email address and a pseudonymous account identifier issued by Microsoft Entra, our sign-in provider, together with your subscription status and your pull sheet usage count. This is what feature access decisions are based on. You can export or delete this data at any time from within the app; deletion removes your email immediately and retains only anonymized billing records we are legally required to keep.

Payments

Purchases are processed by Paddle.com, our merchant of record. Paddle collects your payment details, billing address, and tax information under Paddle's privacy policy. We receive your subscription status and a customer reference from Paddle, never your payment card details.

Analytics and diagnostics

The app and website use PostHog for pseudonymous usage analytics and error reporting (which features are used, crash traces). Analytics events do not include your inventory contents. Payment pages load Paddle's checkout script, which Paddle uses for fraud prevention.

Where data lives and how long

Account and subscription data is stored on Microsoft Azure servers in the United States and retained while your account exists. Webhook and billing event records are retained for accounting and fraud-prevention purposes. Analytics data is retained per PostHog's standard retention and is not tied to your email.

Your rights

You can access, export, correct, or delete your personal data. Use the in-app account controls or email john@johncwaters.com. If you are in the UK, EU, or another jurisdiction with data protection rights, those rights (access, rectification, erasure, portability, objection) apply to the data above, and you may also complain to your local supervisory authority.

Changes

Material changes to this policy will be posted here with a new effective date.