Privacy Policy
CardMaster is a local-first credit-card reward tracking app. This policy explains how the app handles information.
Information Stored on Your Device
CardMaster may store wallet card selections, card labels, the card digits you choose to enter, notes, reward-task progress, benefit-credit history, repayment schedules, appearance settings, and language settings. This information stays in the app's local storage on your device by default unless you use the optional Pro concierge as described below. CardMaster does not require an account.
If you explicitly enable Live Sync, selected app data is stored in your private iCloud account using Apple's CloudKit service. The developer does not operate this storage and cannot access its contents. You can leave Live Sync off and continue using CardMaster locally.
CardMaster does not create automatic iCloud Drive backups. A portable backup file is created only when you choose Export backup file, and you control where that file is saved and when it is imported.
Information We Collect
CardMaster does not use advertising identifiers, third-party analytics, cross-app tracking, or advertising. The app does not sell personal information.
The app connects over HTTPS to CardMaster's own servers to download card artwork, cryptographically signed card-catalog updates, the daily reference exchange rates used to show your cashback in the currency you pick, and the daily sign-up-bonus feed shown on card details. No third-party service is contacted for these content downloads. The app can also open official bank or card-product links at your request.
The optional Pro concierge sends data only after you agree in the app and ask it a question. Each request may include up to 16 recent user and assistant messages, including pending, completed and dismissed action details and local card choices, plus visible card product names, authorized card nicknames and internal identifiers, reward-task titles and progress, cashback totals, and up to 30 recent spend amounts, currencies, dates, and entry types. Card digits and existing transaction notes are excluded from the automatically assembled context, but nicknames, text you type and task titles may contain sensitive information. Updated versions request renewed consent before sharing nicknames. The request goes through CardMaster's service to DeepSeek to generate an answer. Conversation history is stored on your device; you can stop future sharing or clear that local history from the conversation options. DeepSeek's API caches request context on disk by default; unused caches are usually cleared within hours to days. Other processing or retention by DeepSeek may follow its own policies.
Apple processes Pro subscriptions and one-time purchases. CardMaster's service verifies a signed Apple transaction and stores a keyed hash of the original transaction identifier, monthly request counts, and short-lived rate-limit records to enforce access and usage limits. Prior-month counters are removed when a later request is handled; they may remain longer if no further request occurs. The quota database does not store prompts, messages, amounts, or AI responses. The Pro application does not intentionally log chat content; infrastructure and service providers may retain limited operational or security metadata under their own practices. If these practices change, this policy and the App Store privacy disclosure will be updated before the change is released.
Device Permissions
CardMaster may request notification permission only when you enable repayment reminders. Notifications are generated from repayment schedules stored on your device. The Pro voice input feature may request microphone and speech recognition permissions when you choose to dictate a message.
Data Control and Deletion
You can edit or remove wallet cards and progress inside the app. Library includes an option to clear all local CardMaster data. Deleting the app also removes its local app data, subject to normal device backup behavior controlled by Apple and your settings. Live Sync data already stored in iCloud remains governed by your iCloud account and Apple's controls. Exported backup files remain wherever you chose to save them.
Security
Downloaded content updates are checked using SHA-256 and Ed25519 signatures before they can be applied. These checks protect catalog integrity and do not transmit your wallet or progress data.
Children
CardMaster is not designed to collect personal information from children and does not provide account creation, messaging, advertising, or user-generated public content.
Independent Product
CardMaster is not affiliated with, endorsed by, or operated by any bank or card network. It does not connect to bank accounts, process payments, automatically verify purchases, or provide financial advice.
Changes to This Policy
Material changes will be reflected in an updated policy with a new effective date. Privacy disclosures will be kept consistent with the app's actual behavior.
Contact
For privacy questions, email the address above.
存储在您设备上的信息
CardMaster 可能会保存您在 App 内选择的钱包卡片、卡片备注、您主动录入的卡号后几位、笔记、奖励任务进度、权益额度使用记录、还款计划、外观设置和语言设置。默认情况下，这些信息仅保存在您设备上的 App 本地存储中；您主动使用下述 Pro 卡片管家时除外。CardMaster 不要求注册账号。
如果您主动开启实时同步（Live Sync），所选数据会通过 Apple 的 CloudKit 服务存入您私人的 iCloud 账户。该存储由 Apple 运营，开发者无法访问其中内容。您可以一直不开启实时同步，在本地使用 CardMaster。
CardMaster 不会自动创建 iCloud Drive 备份。只有当您主动选择「导出备份文件」时，App 才会生成可迁移的备份文件，保存位置和导入时机完全由您控制。
我们收集的信息
CardMaster 不使用广告标识符、第三方分析、跨 App 跟踪或广告，也不会出售个人信息。
App 会通过 HTTPS 连接 CardMaster 自己的服务器，下载卡面图片、经过加密签名的卡片目录更新、用于按您所选货币显示回赠金额的每日参考汇率，以及卡片详情页显示的开卡奖励数据。这些内容下载请求不涉及第三方服务。App 也会在您主动点击时打开银行或卡产品的官方链接。
可选的 Pro 卡片管家仅在您于 App 内同意并主动提问后发送数据。每次请求可能包含最多 16 条近期用户与 AI 消息（包括待确认、已完成和已取消的操作详情及本地卡片选择），以及可见卡片的产品名称、经授权的卡片昵称与内部标识符、奖励任务名称与进度、返现汇总、最多 30 条近期消费的金额、货币、日期和记录类型。App 自动整理的上下文不包含卡号或已有交易备注，但昵称、您输入的文字和任务名称可能包含敏感信息。更新后的版本会在分享昵称前重新征求同意。请求会经 CardMaster 服务发送至 DeepSeek 生成回答。对话历史保存在您的设备上；您可以在对话选项中停止后续分享或清除本地历史。DeepSeek API 默认在磁盘缓存请求上下文；未使用的缓存通常在数小时到数天内清除。DeepSeek 的其他处理或保留行为可能受其自身政策约束。
Apple 处理 Pro 订阅及一次性购买。CardMaster 服务验证 Apple 签名交易，并保存原始交易标识符的密钥哈希、月度请求计数及短期限流记录，以控制访问与使用额度。旧月份的计数会在后续请求时清除；若没有新的请求，可能保留更久。额度数据库不保存提示词、消息、金额或 AI 回答。Pro 应用服务不会主动记录聊天内容；基础设施及服务提供商可能依其自身惯例保留有限的运维或安全元数据。若这些做法发生变化，我们会在发布相应变更前更新本政策和 App Store 隐私披露。
设备权限
只有当您开启还款提醒时，CardMaster 才会请求通知权限。提醒基于存储在您设备上的还款计划生成。您选择语音输入 Pro 消息时，App 可能请求麦克风与语音识别权限。
数据控制与删除
您可以随时在 App 内编辑或移除钱包卡片和进度。「卡片库」中提供了清除全部本地 CardMaster 数据的选项。删除 App 也会移除其本地数据（受 Apple 及您的设置所控制的常规设备备份行为影响）。已存入 iCloud 的实时同步数据仍受您的 iCloud 账户和 Apple 的控制。导出的备份文件保留在您选择的保存位置。
安全
下载的内容更新在应用前会经过 SHA-256 与 Ed25519 签名校验。这些校验用于保护目录完整性，不会传输您的钱包或进度数据。
儿童
CardMaster 不以收集儿童个人信息为目的，也不提供账号注册、消息通讯、广告或用户生成的公开内容。
独立产品
CardMaster 与任何银行或卡组织均无关联，也未获得其背书或由其运营。它不连接银行账户、不处理支付、不自动核验消费，也不提供财务建议。
本政策的变更
如有重大变更，我们会更新本政策并标注新的生效日期，并确保隐私披露与 App 的实际行为保持一致。
联系方式
如对隐私有疑问，请发送邮件至上述地址。