Privacy Policy

PointsCraft is built around a single privacy principle: your card data belongs on your device. We do not operate a cloud database of users, do not require an account, and do not collect, sell, or share the credit card information you enter.

What we don't collect

• Your real account numbers, expiration dates, or CVVs (we never ask for them).
• Your bank or card-issuer login credentials.
• Your transaction history or statements.
• The dollar amounts or names of specific benefits you've used.

What stays on your device

Card nicknames, network/issuer, point and mile balances, the recurring benefits you've added, and which benefits you've marked used. None of this is sent to a PointsCraft server, because no PointsCraft server exists for this data.

iCloud sync (optional)

If you enable iCloud sync, an encrypted copy of your card and benefit data is stored in your private iCloud container via Apple's CloudKit. Only your Apple ID can read it. PointsCraft does not operate or have access to this storage.

Analytics

In the iOS app: we use Firebase Analytics to understand which features people use — for example, “benefit marked used” or “goal completed.” We log generic event counts and category labels, never specific dollar amounts, benefit names, or personal information.

On iOS, we ask permission via Apple's App Tracking Transparency prompt before any tracking that links to identifiers used for advertising. If you decline, analytics still work but no cross-app tracking occurs.

On this website: we use Google Analytics 4 and Vercel Analytics to understand which pages and tools people find useful — for example, which card review pages get the most readers, which free tools get used, and which Apply CTAs are clicked. We log pages viewed, generic interaction events, and aggregated engagement metrics (scroll depth, outbound clicks). No information from the calculators on this site (the values you type into the annual-fee break-even tool, the welcome-bonus ROI tool, etc.) is ever sent off your device — those tools run entirely in your browser.

Notifications

Local notifications (benefit reminders, anniversary alerts) are scheduled on-device by iOS. PointsCraft does not operate a push server and does not send remote notifications.

Children

PointsCraft is not directed at children under 13 and we do not knowingly collect data from them.

Changes

If we make a material change to this policy, the “Last updated” date above will change and we'll surface a note in the app on next launch.

Contact

Questions? Email support@pointscraft.com.