Privacy Policy

Account Information

• Email address (for authentication and communication)
• Account preferences and settings
• Profile information you choose to provide

Credit Card Information

• Card names and types you add to track
• Benefit details
• Signup bonus progress and spending requirements
• Labels and notes you create for organization

Usage Data

• How you interact with our service
• Device information (browser type, operating system)
• IP address and general location
• Performance data and error logs

• Provide and maintain our credit card tracking service
• Send notifications about benefit expirations and resets
• Track your signup bonus progress and spending milestones
• Improve our service and develop new features
• Ensure account security and prevent unauthorized access
• Provide customer support and respond to your requests

Kai is an optional AI-powered assistant that helps you understand and optimize your credit card benefits. Here's how we handle your data when using Kai:

What Kai Accesses

When you use Kai, it can access information about your kardfolio wallet including your card names, benefit details, and usage progress. This context helps Kai provide personalized recommendations. Kai sees only the last 4 digits of your card numbers (for identification purposes), never full card numbers, account credentials, or financial transactions.

How Conversations Are Processed

• No Storage: Your conversations with Kai are not stored on our servers. Each session is ephemeral and processed in real-time.
• Third-Party Processing: Kai uses OpenRouter to route requests to AI models (such as GPT, Claude, or Grok). We have configured our OpenRouter account with the following privacy settings:
  • Prompt and completion logging is disabled
  • Training on your inputs is disabled
  • Free endpoints that may train on data are disabled
  • Publishing prompts to public datasets is disabled
• No AI Training: Your conversations are not used to train AI models. OpenRouter does not route your requests to providers that train on user data.

Local Session Storage

For your convenience, recent Kai conversations may be temporarily cached in your browser's local storage for up to 24 hours. This data never leaves your device and is cleared when you explicitly end the conversation using the close button or start a new chat.

Metadata We Collect

We collect anonymous usage metrics about Kai interactions (such as response times and token counts) to monitor service quality. These metrics do not include the content of your conversations.

We do not sell, rent, or trade your personal information to third parties. We may share your information only in these limited circumstances:

• Service Providers: Trusted partners who help operate our service (Supabase for secure data storage and authentication, Vercel for hosting, Resend for email notifications, OpenRouter for AI assistant processing, Stripe for payment processing, PostHog for analytics and feature management)
• Legal Requirements: When required by law or to protect our rights and users' safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We implement industry-standard security measures to protect your information:

• All data is encrypted in transit using HTTPS
• Data is stored securely in Supabase's managed PostgreSQL database
• Access to personal information is limited on a need-to-know basis
• Regular security assessments and updates
• Secure authentication through Supabase
• We never store complete credit card numbers

kardfolio uses cookies and browser local storage to provide essential functionality and improve your experience:

Essential Cookies

• Authentication: Supabase sets secure cookies to maintain your login session. These are required for the service to function.

Local Storage

• Kai Conversations: Recent AI assistant conversations are temporarily cached in your browser for up to 24 hours. This data never leaves your device and is cleared when you close the conversation.
• UI Preferences: Settings like sidebar state and display preferences are stored locally for convenience.
• Analytics: PostHog may cache feature flag states locally to improve performance.

We do not use advertising cookies or third-party tracking cookies. You can clear local storage at any time through your browser settings.

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Portability: Export your data in a machine-readable format
• Notification Control: Manage your email notification preferences

To exercise these rights, contact us at support@kardfolio.app. We will respond to your request within 30 days.

We retain your information for as long as your account is active or as needed to provide our services. When you delete your account, we will permanently delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes.

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service. Your continued use after changes indicates acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy or our data practices, please contact us at support@kardfolio.app.