Privacy Policy for BonusCards

• We do not sell your data.
• We do not use third-party advertising or analytics SDKs.
• We do not track you across apps or websites.
• We do not require you to create an account.
• Your cards are always stored locally on your iPhone.
• If you turn on iCloud sync (on by default, can be switched off), your cards also sync through your own private iCloud storage — not through our servers.
• If you choose to share specific cards with family members, those cards are stored in a shared iCloud area that the people you invite can see and edit.

This may include the issuer or store name, a barcode or card number, the barcode format, a chosen card color, an optional photo of the front and/or back of the card, favorite status, and display order.

The camera is used only to read the barcode shown on your physical card; the camera image itself is not stored or transmitted.

When you choose a photo or a screenshot from another wallet app to add or import a card, the App reads the barcode and/or card tile from that image on your device. The App does not upload the image — it keeps only the card details it extracts, and any photo you separately choose to save with the card.

If iCloud sync is enabled, BonusCards stores your cards in your own private iCloud database using Apple's CloudKit service, so the same cards appear on your other devices signed in with the same Apple ID. We do not operate our own servers for this data and cannot see it — it is handled by Apple under Apple's own terms and privacy practices. You can turn sync off at any time in the App's iCloud & Family settings; your cards then remain only on that iPhone.

You can choose to share individual cards with people you invite ("Familie"), using Apple's CloudKit sharing and the standard Messages/Mail share sheet. Cards you share this way are visible to, and can be edited by, everyone you invite, for as long as the sharing stays active. Ending the family removes shared cards from everyone except the person who added them originally.

You can export one or more cards as a .bonuscards file (including any saved logos) or as a BCARDS1: QR code (without logos), to transfer them outside iCloud — for example to a device without iCloud. These exports are shared the same way you share any file or QR code on your device (e.g. AirDrop, Messages); we do not see or receive them.

BonusCards includes a small built-in directory that matches common card issuer names (for Switzerland, Germany, and Austria) to that issuer's own website, so the App can offer a link to it. This directory is built into the App; looking it up does not require a network connection.

Widgets and the Control Center button display your card data, including the barcode, directly on your device. Siri and Shortcuts let you ask for a card by name. Spotlight search can show your card names (not numbers). None of this leaves your device.

We do not knowingly collect or receive through the App:

• your name, email address, or phone number
• precise location
• contacts, browsing history, or health data
• payment information (the App does not currently offer purchases)
• advertising identifiers

We also do not use the App to profile users for advertising.

BonusCards does not track you across third-party apps, websites, or services. The App's privacy manifest declares that tracking is disabled and lists no collected data types.

The App does not include third-party advertising or analytics SDKs. It relies only on Apple platform services: CloudKit for optional iCloud sync and Family Sharing, Vision for on-device barcode and text recognition, and standard system sharing (AirDrop, Messages, Mail).

Apple Privacy Policy: https://www.apple.com/legal/privacy/

Data stored locally is retained until you delete it or delete the App. Data stored in your private iCloud, or shared with family, is retained until you delete the card, turn off sync, end the family, or remove it through Apple's iCloud settings.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data.

Contact us at bonuscards@domtelier.com. Because BonusCards primarily stores information on your device and in your own iCloud account, most requests can be fulfilled by deleting cards within the App, turning off iCloud sync, or deleting the App.

BonusCards is not directed to children under 13, and we do not knowingly collect personal information from children through the App.

We may update this Privacy Policy from time to time, including before launch. If we make material changes, we will update the effective date at the top of this page.

Dominik Schmitt — Domtelier

Email: bonuscards@domtelier.com