Privacy Policy

Effective date: May 5, 2026  ·  Last updated: May 8, 2026  ·  Cartava App LLC · Ohio

1. Who We Are

Cartava App LLC ("we," "our," or "us") is an Ohio limited liability company that operates the Cartava gift card wallet application, available on the Apple App Store. We are committed to protecting your privacy and being transparent about how we handle your information.

Questions? Contact us at support@cartava.app.

2. Information We Collect

Cartava collects only what is necessary to provide the app's core functionality.

Information You Provide

• Gift card data: Card names, balances, card numbers, barcodes, PINs, and any notes you add. This is the core purpose of the app.
• Your birthday (month and day only): Optionally provided during onboarding. Used solely to send you a reminder a few days before and after your birthday to add any gift cards you may have received as presents. The year is not required. We never use your birthday for advertising or share it with any third party.
• Your name (optional): If you choose to add your name in Account settings, it is stored locally on your device only.

Information Collected Automatically

• Camera access: Used only when you scan a gift card barcode or QR code. We do not store photographs or images from your camera. Camera access is only active while you are actively scanning a card.
• Location (if enabled): Used to alert you when you are near a store for which you have a gift card. Location data is processed on-device and is never transmitted to our servers. If you grant "Always Allow" permission, the app may check your location in the background to deliver timely nearby store alerts. You can revoke this permission at any time in your iPhone Settings.
• Notification preferences: Whether you have granted or denied notification permission, stored locally.

3. How We Use Your Information

• To store and display your gift cards, balances, and card numbers within the app
• To send push notifications reminding you to use cards before inactivity fees apply
• To send birthday reminders so you can add gift cards received as presents
• To alert you when you are physically near a store you have a gift card for (if location is enabled)

We do not use your information for advertising, profiling, analytics, or any purpose beyond the direct functionality of the app.

4. How We Store Your Information

• CoreData: Gift card data including names, balances, card numbers, barcodes, and PINs
• iOS Keychain: Sensitive information such as your birthday
• UserDefaults / AppStorage: Non-sensitive preferences such as notification settings and onboarding completion status

This data is included in your standard iOS device backup (iCloud Backup or iTunes/Finder backup) unless you have disabled device backups. We do not have access to your backups.

5. Information We Do Not Collect

• Email address or password (no account creation required)
• Payment card numbers or banking information
• Photos or images from your camera roll
• Contacts or address book data
• Browsing history or activity from other apps
• Device identifiers for advertising purposes
• Analytics or usage data sent to any third-party service

6. Sharing Your Information

We do not sell, trade, rent, or share your personal information with any third parties for any purpose. Because all data is stored locally on your device, we do not have access to your personal information and therefore cannot share it.

7. Data Retention and Deletion

Your data exists only on your device. You can delete all of your Cartava data at any time by:

• Deleting individual cards: Open any card and tap "Delete Card"
• Deleting all data: Account tab → Delete Account. This permanently removes all gift cards, your birthday, your name, and all app data from your device. This action cannot be undone.
• Uninstalling the app: Deleting Cartava from your iPhone removes all locally stored data

8. Location Data

Cartava may request access to your location in two modes depending on the features you enable:

• When In Use: Location is accessed only while the app is open
• Always (Background): If you grant this permission, Cartava can send you a notification when you are near a store where you have a gift card, even when the app is not open. This is entirely opt-in and can be revoked at any time in Settings → Privacy & Security → Location Services → Cartava.

Location data is processed entirely on-device and is never transmitted to any server.

9. International Users and GDPR (European Union)

Cartava is designed and operated in the United States. If you are located outside the United States, including in the European Union or European Economic Area, please be aware that your use of the App is subject to U.S. law.

For users in the European Union and European Economic Area, the General Data Protection Regulation (GDPR) may apply. Because Cartava stores all data exclusively on your device and does not transmit personal data to any server operated by Cartava App LLC, we do not act as a data controller or data processor of your personal information in the traditional sense. Your data never leaves your device.

Under GDPR, to the extent applicable, you have the following rights:

• Right of access: All of your data is visible to you at all times within the app.
• Right to rectification: You can edit any information stored in the app at any time.
• Right to erasure ("right to be forgotten"): You can delete all data via Account → Delete Account, or by uninstalling the app.
• Right to data portability: Because all data is stored on your device, you have full local access to it at all times. An export feature is on our roadmap.
• Right to object: You can disable notifications and location access at any time in your iPhone Settings.

To exercise any of these rights or with questions about GDPR compliance, contact us at support@cartava.app.

10. UK Users

If you are located in the United Kingdom, the UK GDPR and the Data Protection Act 2018 may apply. The same rights and protections described in Section 9 apply to UK users. Contact us at support@cartava.app with any questions.

11. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) may grant you additional rights, including:

• Right to know: The categories and specific pieces of personal information we collect. As described in this policy, we collect only what is stored locally on your device for app functionality.
• Right to delete: You can delete all personal information via Account → Delete Account or by uninstalling the app.
• Right to opt out of sale: We do not sell your personal information and have never done so.
• Right to non-discrimination: We will not discriminate against you for exercising any CCPA rights.

To submit a CCPA request, contact us at support@cartava.app. We will respond within 45 days as required by law.

12. Children's Privacy

Cartava is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information through Cartava, please contact us at support@cartava.app.

13. Security

Sensitive data such as your birthday is stored in the iOS Keychain, which is encrypted by Apple at the hardware level. Gift card data stored in CoreData benefits from iOS device encryption when your device is locked. We recommend using a strong passcode and enabling Face ID or Touch ID for additional protection.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as the app evolves. When we do, we will update the "Last updated" date at the top of this page. Your continued use of Cartava after any changes constitutes your acceptance of the updated Privacy Policy.