Privacy Policy
Introduction
This Privacy Policy explains how we handle information in our iOS app and on this website.
The short version: your card data stays on your phone. We don't collect it, send it anywhere, or store it on our servers.
What We Collect
Kartička collects and stores the following data only on your device:
- Card Data: Barcode numbers, card names, and associated store names
- Card Images: Photos of physical cards (if you choose to add them)
- User Preferences: App settings, favorites, and display preferences
What We Do NOT Collect
We do not:
- Collect payment data or financial information
- Track your purchases or shopping habits
- Use third-party analytics SDKs or tracking services
- Share data with third parties
- Display advertisements or use ad tracking
- Access your contacts, location, or other personal data
- Monitor which stores you visit or cards you use
Data Storage
Local Storage
All card data is stored on your device. Nothing leaves your phone unless you turn on cloud sync.
Cloud Sync (Optional)
If you enable cloud sync:
- Your cards are synced to your personal iCloud account
- Data is encrypted and stored in your private iCloud storage
- Only you can access this data through your Apple ID
- We do not have access to your iCloud data
- You can disable cloud sync at any time in app settings
Cloud sync is optional. Standard Apple iCloud privacy policies apply.
Camera Permission
- Purpose: To scan barcodes and QR codes on your loyalty cards
- Usage: Only activated when you explicitly tap the scan button
- Storage: Camera images are processed locally and not stored or transmitted
- Control: You can deny this permission and manually enter card numbers instead
Premium Purchase
If you purchase Kartička Premium:
- Payment is processed entirely through Apple's App Store
- We do not collect or store your payment information
- Purchase history managed via Apple ID
- We may store a purchase status flag to unlock premium features
No Ads, No Tracking
No ads. No tracking. No third-party data sharing. The app uses no analytics SDKs or behavioral profiling; this website counts visits only if you allow it (see "This Website").
This Website
This website (karticka.caskcoded.com) is hosted on Vercel. It asks before it measures anything: only if you allow "Analytics" do we count visits with our own cookieless measurement (the page, where the visit came from, the device type, the country and how fast the page loaded). This measurement stores no cookie and no IP address, and it has nothing to do with the app or your cards. The only cookie the website itself may set is NEXT_LOCALE, which remembers the language you chose (listed below).
You can change your choice at any time:
Cookies and third-party services
This is the complete list of services this website uses. Optional services start only with your consent.
Necessary storage
- Record of your choice
- Remembers what you chose in the cookie settings. Stored only in your browser.
cc-consent:karticka(localStorage, 180 days).
Vercel
- Provider
- Vercel Inc., USA (Hosting (processor))
- Purpose
- Running the website and delivering its pages.
- Category
- Necessary
- Data
- IP address and technical request data in server logs.
- Cookies and storage
- No cookies or storage
- Where it is processed
- USA and Vercel's global network
- Provider's policy
- https://vercel.com/legal/privacy-policy
next-intl
- Provider
- Cask Coded s. r. o. (Language setting)
- Purpose
- Remembers the chosen website language so that further pages are shown in the same language.
- Category
- Necessary
- Data
- The code of the chosen language (such as sk or en).
- Cookies and storage
- NEXT_LOCALE (cookie, until the browser is closed, only after a language switch or when it differs from the browser language)
- Where it is processed
- The browser and this website's server
- Provider's policy
- This policy
Cask-Coded Analytics
- Provider
- Cask-Coded, for Cask Coded s. r. o. (Audience measurement (processor))
- Purpose
- Own cookieless measurement of visits and page speed through this website's server. Starts only with your consent.
- Category
- Analytics
- Data
- Page visited (without address parameters), traffic source and campaign (UTM), device, browser and operating system type, country, page-load speed and responsiveness (Core Web Vitals), form submissions and button clicks (without their content). Neither the IP address nor the full browser identifier is stored; the anonymous visitor identifier changes every day.
- Cookies and storage
- No cookies or storage
- Where it is processed
- Cask-Coded infrastructure (Vercel, Supabase)
- Provider's policy
- This policy
App Analytics
Kartička uses Apple's built-in App Analytics framework to collect a small number of anonymous events. These help us understand how the app is used and improve the experience. The following events are recorded:
- card_added - when a new card is added
- card_presented - when a card barcode is displayed at checkout
- iap_purchased - when the premium upgrade is purchased
- wallet_added - when a card is added to Apple Wallet
These events are anonymous and aggregated by Apple. They contain no personal data, no card details, and no device identifiers. We cannot identify individual users from this data.
Data Deletion
You can delete any or all of your card data at any time directly within the app. Deleting the app from your device removes all locally stored data. If you enabled cloud sync, you can also remove data from iCloud via your device settings.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact:
Email: studio@caskcoded.com
Company: Cask Coded s. r. o.
Sokolovská 178/10, Košice - mestská časť Západ, 040 11, Slovakia
In short: your card data stays on your device. We don't collect it, send it anywhere, or store it on our servers.