Cardly for iPhone - Privacy Policy

Last updated: October 1, 2026

Samantha Toha, trading as Woohoo Software ("we", "us", or "our"), publishes the Cardly app for iPhone ("App"). This Privacy Policy explains what the App does with information, and what it does not do. The Android app has its own Privacy Policy.

1. Your Data

Your card data — card names, barcodes, card numbers, PINs, gift-card balances and transactions, notes, and any card pictures you add — is private. Only you can see it: we do not have access to, collect, or store your card data. Your cards are stored on your device.

No user accounts are required to use the App. We do not collect your name, email address, or any other personally identifiable information.

2. iCloud Sync

If you leave Sync with iCloud switched on and your iPhone is signed in to iCloud, the App keeps a copy of your cards in your own iCloud account so they appear on your other devices. That copy is in Apple's private CloudKit database for your Apple Account:

• We cannot read it, and we have no access to your iCloud account or credentials
• Gift-card PINs are not part of that copy — see section 3
• Sync is not a backup: deleting something in the App deletes it everywhere it has synced
• You can turn sync off in Settings inside the App, or in your device's iCloud settings

3. Gift-Card PINs

PINs are kept apart from the rest of your cards, in the iOS Keychain, and can be read only while your iPhone is unlocked. If iCloud Keychain is switched on, Apple syncs them to your other devices end-to-end encrypted, together with your passwords; if it is off, they stay on this iPhone. We have no access to them.

When you copy a PIN, it is copied for this iPhone only, so it is not shared with your other devices through Universal Clipboard, and it is cleared from the clipboard after two minutes.

4. Camera and Pictures

The App uses the camera to scan a card's barcode and to photograph your cards. Barcode reading happens on your device. Pictures you take, or (with Premium) choose from your photo library, are stored with the card they belong to — the App sees only the photos you pick, and nothing is uploaded to us.

5. Face ID and App Lock

The optional app lock uses Face ID, Touch ID, or your device passcode. Unlocking is handled entirely by iOS — we do not collect, store, or have access to your biometric data or passcode.

6. Export and Import

You can export your cards as a file and import a file into the App. The file is created on your device and shared only where you choose to send it; we never receive it.

• The file holds your card numbers, so keep it somewhere private
• PINs for gift cards that are not used up are locked with a password you choose (AES-256 encryption) before they are written to the file, unless you choose to leave them out
• We cannot recover a forgotten password. Your cards still import without it, just without those PINs

7. Widgets and Controls

Home Screen and Lock Screen widgets and Control Center controls show and open your cards. They read your cards on your device and send nothing to us.

8. Expiry Reminders

Reminders before a gift card expires are scheduled locally on your iPhone, using the expiry date and balance you entered. Nothing about them is sent to us.

9. Purchase Data

The App offers one optional one-time purchase, Cardly Premium, handled entirely by Apple's App Store. We receive only an anonymous confirmation that the purchase belongs to your Apple Account — we do not have access to your payment details.

10. Advertising and Tracking

Cardly does not use any advertising network and does not track you across other companies' apps or websites. The free version shows a built-in "More Apps" tile promoting other Woohoo Software apps. That tile is part of the App itself: no advertising network is involved and no information about you is collected for it. Tapping it opens the App Store, with a tag telling Apple that the visit came from Cardly. Premium removes it.

We do not track your shopping. Cardly has no connection to the shops whose cards you store, so what you buy, where you buy it, and what you spend are not visible to us.

11. Analytics and Crash Reports

We use Firebase (Google) for crash reporting and basic usage analytics, to help us find and fix problems and to understand which parts of the App are used. None of it includes your cards or anything on them. For more information, see Firebase Privacy.

• Crash reports (Firebase Crashlytics): what the App was doing when it crashed, with your device model and iOS version
• Usage analytics (Google Analytics for Firebase): events such as opening the App, the screens you visit, the length of a session, and the one-time purchase if you make it
• When you add a card: its card type (Rewards, Gift, Member, Other, or "custom" for a type of your own, never its name), whether it was scanned or typed in, and whether it has pictures
• An identifier Firebase assigns to this installation of the App, and an approximate location worked out from your IP address, never from GPS
• Never your card names, numbers, barcodes, PINs, balances, notes or pictures
• The App does not use your device's advertising identifier, and none of this is tied to your name or email address — the App has no accounts to tie it to

Apple may also share anonymised crash reports with us if you have opted in to sharing analytics with app developers in your device settings.

12. Data Security

Your data is protected by the security built into your iPhone and your iCloud account, including the optional app lock. PINs are held in the iOS Keychain, and sync uses Apple's encrypted connections.

13. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

14. Your Control Over Your Data

• You can edit or delete your cards and balances at any time within the App
• Delete all data, under Settings › About, removes every card, picture, PIN and setting from the App in one go; with sync on, the deletions reach your other devices too
• Deleting the App removes its data from that device
• If sync was on, the copy in your iCloud account can be removed under Settings › [your name] › iCloud › Manage Storage on your device

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page.

16. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: woohoosoftware@gmail.com