Card Nudge Privacy Policy

Effective Date: May 31, 2025

Welcome to Card Nudge ("we," "us," or "our"), a mobile application designed to help you manage your credit cards and payments. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our app, accessible via package ID in.fnlsg.card and website https://card.fnlsg.in.

1. Information We Collect

We collect the following types of information to provide and improve our services:

• Personal Information:
  • User Account Data: When you log in using Google or GitHub via our authentication provider (Supabase), we collect your user ID and email address to create and manage your account.
  • Settings Data: We collect user preferences, such as language, currency, theme mode, notification settings, and reminder times, to personalize your experience.
• Financial Information:
  • Bank Details: Information about banks (e.g., name, code, logo path, support number, website, color, priority, favorite status) is stored for both default banks (predefined) and user-added banks.
  • Credit Card Details: We collect card details, including name, bank ID, last 4 digits, billing date, due date, card type, credit limit, current utilization, archived status, and favorite status.
  • Payment Information: Payment data, such as card ID, due amount, payment date, paid status, minimum due amount, paid amount, due date, and statement amount, is stored to track your transactions.
• Usage Data:
  • Sync status and connectivity information to manage data synchronization between your device and our cloud service.
• Device Information:
  • Information about your device (e.g., OS version, device type) to ensure compatibility and optimize performance.

2. How We Collect Information

We collect data through:

• Direct Input: When you enter bank, credit card, payment, or settings information in the app.
• OAuth Login: When you authenticate via Google or GitHub, we receive your user ID and email from Supabase.
• Local Storage: We use Hive to store data locally on your device for offline access.
• Cloud Sync: Data is synchronized with our Supabase backend when you are online, using secure HTTPS connections.
• Deep Links: We process redirect URLs (e.g., https://card.fnlsg.in/login-callback) for OAuth authentication.

3. How We Use Your Information

We use your information to:

• Provide core app functionality, such as managing credit cards, tracking payments, and syncing data.
• Personalize your experience based on your settings (e.g., language, currency, notifications).
• Authenticate users securely via Google or GitHub OAuth.
• Improve app performance and fix bugs using anonymized usage data.
• Ensure data integrity with triggers (e.g., validating bank IDs in the cards table).

4. How We Share Your Information

We do not sell or rent your personal information. We may share data only in the following cases:

• With Service Providers: We use Supabase for authentication and data storage. Supabase processes your data under strict confidentiality and security standards.
• For Legal Reasons: We may disclose data if required by law or to protect our rights, safety, or property.
• With Your Consent: We share data only with your explicit permission.

5. Data Storage and Security

We take data security seriously:

• Local Storage: Data is stored securely on your device using Hive, encrypted where applicable.
• Cloud Storage: Data synced to Supabase is encrypted in transit (HTTPS) and at rest.
• Row-Level Security (RLS): Supabase uses RLS to ensure only authorized users access their data.
• Authentication: OAuth tokens are securely handled via Supabase.
• Despite our efforts, no system is 100% secure. We cannot guarantee absolute security but strive to protect your data.

6. Your Choices and Rights

You have the following rights:

• Access and Update: View and edit your data within the app.
• Delete: Request deletion of your account and data by contacting us at ashwini@fnlsg.in.
• Opt-Out: Disable notifications or cloud sync in the app settings.
• Data Portability: Request a copy of your data in a structured format.

7. Third-Party Services

We use third-party services that may collect data:

• Supabase: Handles authentication, data storage, and sync. See Supabase’s Privacy Policy.
• Google OAuth: For login. See Google’s Privacy Policy.
• GitHub OAuth: For login. See GitHub’s Privacy Policy.

8. Children’s Privacy

Card Nudge is not intended for users under 13. We do not knowingly collect data from children under 13. If we learn such data has been collected, we will delete it promptly.

9. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you via the app or email. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

For questions or concerns about this Privacy Policy, contact us at:

• Email: ashwini@fnlsg.in
• Website: https://card.fnlsg.in