Privacy Policy

1. Who we are

Unspent is an iOS application published by Cartava App LLC, a limited liability company organized in the State of Ohio, United States (“Cartava App LLC”, “we”, “us”). This policy explains how the Unspent app handles information. It applies to the Unspent app and this website.

2. Information we collect

None. Unspent does not collect, transmit or store personal information on any server operated by or for Cartava App LLC. Specifically, we do not collect:

• Gift card numbers, PINs, barcodes or images of your cards
• Card balances, expiry dates, transaction history or notes
• Your location, movement history or the stores you visit
• Your name, email address, phone number or payment information
• Usage analytics, event logs, crash reports or advertising identifiers
• Device identifiers, IP addresses or cookies

Unspent does not require an account and there is nothing to sign up for. We operate no backend that could receive this data, so there is no Cartava App LLC database that can be breached, leaked, subpoenaed or sold.

3. Information stored on your device

The information you enter into Unspent — your cards, balances, expiry dates and notes — is written to your iPhone’s protected application storage, which is encrypted by iOS when your device is locked. You can additionally require Face ID, Touch ID or your device passcode to open the app.

This data is yours. It is not readable by us, and it is not accessible to other apps on your device.

4. Location

If you enable nearby alerts, Unspent asks iOS for permission to use your location so it can notify you when you are close to a store where you hold a balance. That matching happens entirely on your device: your coordinates are never transmitted to Cartava App LLC or to any third party, and no location history is retained by us.

You can revoke location access at any time in iOS Settings, or turn nearby alerts off inside the app. Unspent continues to work without location access.

5. Camera

Unspent uses your camera only to scan gift card barcodes when you choose to add a card. Images are processed on device and are not uploaded anywhere. Unspent does not access your photo library unless you explicitly select an image to import.

6. Third parties

Unspent contains no advertising, no third-party analytics, no tracking SDKs and no social media integrations. We do not share information with third parties because we do not hold any.

Two things are outside our control and worth knowing about. First, Apple collects its own App Store and device-level data under Apple’s privacy policy when you download or use any app; that relationship is between you and Apple. Second, if you have iCloud Backup or device backups enabled, iOS may include Unspent’s on-device data in your own encrypted backup, which is governed by Apple’s terms and controlled by you in iOS Settings.

7. Your rights

Privacy laws such as the GDPR, the UK GDPR and the CCPA/CPRA give you rights to access, correct, delete, port and restrict the use of your personal information, and to opt out of its sale or sharing.

Because Cartava App LLC holds no personal information about you, there is nothing for us to disclose, correct, export or delete on your behalf, and we have never sold or shared personal information. You exercise these rights directly: your data lives on your device, where you can edit or delete any card at any time, and deleting the Unspent app removes all of it. We do not discriminate against anyone for exercising a privacy right.

8. Data retention and deletion

We retain nothing, because we receive nothing. On-device data is retained for as long as you keep it. Deleting a card removes it immediately; deleting the app removes everything Unspent has stored, and that action cannot be undone by us or by you unless you hold your own device backup.

9. Children’s privacy

Unspent is not directed to children under 13 and we do not knowingly collect information from anyone, including children. Because no information is collected, there is no children’s data for us to hold or delete.

10. Security

Unspent’s primary security property is architectural: data that is never transmitted cannot be intercepted, and a company that stores nothing cannot be breached. On your device, Unspent relies on iOS file protection, device encryption and optional biometric locking. Keeping your device updated and passcode-protected is the most important step you can take.

11. International users

Unspent processes data only on your own device, wherever you are. No international transfer of your personal information to Cartava App LLC takes place.

12. Changes to this policy

If this policy changes, the revised version will be posted on this page with a new “last updated” date. Material changes will also be noted in the app’s release notes. Continued use of Unspent after an update means you accept the revised policy.

13. Contact

Questions about this policy, or about privacy in Unspent, can be sent to support@cartava.app.

Cartava App LLC
Ohio, United States