CardStack

Privacy Policy

Last updated: March 27, 2026

Overview

CardStack (“we,” “our,” or “the app”) is a credit card benefits and rewards tracking application for iPhone and iPad, operated by SPACE ROBOTS INC. We are committed to protecting your privacy and being transparent about how your information is handled. This policy explains what data we collect, how we use it, and your rights.

Information We Collect

Information you provide

  • Account information such as your name or email if you sign in using Sign in with Apple.
  • Credit card and benefits information you manually enter or manage within the app.

Cloud storage To provide sync, backup, and cross-device access, we store account data and synced content (e.g. profile information, your cards and benefit tracking, Plaid link state, and transaction-related data) on our servers using trusted infrastructure providers. This data is associated with your account and protected in line with this policy.

Financial account information (if you connect accounts) If you choose to connect financial accounts, CardStack uses Plaid Inc. (“Plaid”) to securely access account and transaction information on your behalf. By using this feature, you grant CardStack and Plaid the right to access and process your financial information in accordance with this policy and Plaid’s Privacy Policy.

We may receive information such as:

  • Account identifiers
  • Transaction history
  • Balance or rewards-related data

We use this data solely to provide features such as tracking credits, generating insights, and improving recommendations. We do not sell your financial data.

Local data storage Certain data, such as manually entered card details and benefit tracking information, may also be stored locally on your device using Apple’s secure storage mechanisms.

Email and communications If you provide an email address (e.g. via Sign in with Apple), we may use it to send you transactional messages (such as a welcome email) and, with your preferences, optional communications such as a weekly digest, new-credits alerts, and product announcements. You can unsubscribe from optional emails at any time via the link in those emails. We may use a third-party email delivery provider (e.g. Resend) and, when configured, add your contact details to an audience list for sending such communications.

Analytics and diagnostics We may collect limited, non-identifying analytics and crash reports to understand feature usage, improve performance, and fix bugs. This may include device type, operating system version, and general usage patterns.

How We Use Information

We use information to:

  • Provide and operate CardStack features
  • Track benefits, credits, and usage
  • Generate insights and recommendations
  • Improve reliability and user experience
  • Respond to support requests
  • Maintain security and prevent misuse

We do not sell or rent personal or financial information.

Service Providers

We may use trusted third-party service providers to operate the app, including:

  • Plaid (financial data connectivity)
  • Stripe (payment processing and subscription management for web purchases)
  • Cloud hosting and database providers (e.g. for account and sync data)
  • Email delivery services (for transactional and optional marketing emails)
  • Analytics and crash reporting tools

These providers are contractually obligated to protect your information and use it only to provide services on our behalf.

Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect your information, including encryption in transit, secure authentication, and access controls.

Data Retention

We retain information only as long as necessary to provide the service, comply with legal obligations, or resolve disputes. Data obtained via Plaid is retained only as needed to support app functionality.

Data Deletion

You may request deletion of your account and associated data at any time by contacting [email protected]. Where technically feasible, we will delete or de-identify your information promptly.

If you disconnect your financial accounts, access to related data will be revoked.

Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal information. You may exercise these rights by contacting us.

Children’s Privacy

CardStack is not intended for children under 13, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy periodically. We will notify users of material changes by updating the “Last updated” date at the top of this page.

Contact Us

If you have any questions about this privacy policy or your data, please contact us at [email protected].