Privacy

Privacy policy

Last updated September 30, 2026

CardSmart is built to need very little about you. This policy covers the CardSmart mobile app and this website.

What we never collect

  • Card numbers, security codes or expiry dates
  • Bank or card-issuer logins
  • Your credit score or Social Security number

In the app

  • Which card products you hold (for example “Sapphire Reserve”) and which credits you’ve marked as used — this is the product.
  • An optional first name, used to greet you.
  • Reminder settings. Reminders are scheduled on your device.

On this website

  • Launch-list email. If you sign up, we store your email, which phone you use (if you tell us), which page you signed up on, and the campaign that referred you. We use it only to tell you about CardSmart and upcoming credit resets. Every email has a one-click unsubscribe.
  • Cookieless analytics. We count page views and store-button clicks. We don’t set cookies or use advertising trackers. To count unique visitors we use a one-way hash of your IP address and browser that changes every day, so it can’t identify you or follow you across days. We keep the page path, referring site, campaign tags, device type and country. If your browser sends Do Not Track or Global Privacy Control, we don’t compute the hash at all.

Sharing

We don’t sell or rent personal information, and we don’t share it for cross-context advertising. We use service providers (hosting, email delivery) who process data only on our behalf. If we add partner links in the future, partners receive an anonymous click identifier, not your name or email.

Retention and deletion

Launch-list emails are kept until you unsubscribe or ask us to delete them. Analytics events are aggregated and don’t identify you. To delete your data, see Delete your data or email hello@getcardsmart.com.

Your rights

Depending on where you live (for example California under the CCPA/CPRA), you can ask to know, correct or delete the personal information we hold. Email us and we’ll respond within 30 days. We won’t treat you differently for asking.

Children

CardSmart is not directed to children under 13, and we don’t knowingly collect their information.

Changes

If this policy changes in a meaningful way, we’ll update the date above and tell subscribers by email.