Privacy Policy for Kartilo

• We do not sell your data.
• We do not use third-party advertising or analytics SDKs.
• We do not track you across apps or websites.
• We do not require you to create an account.
• Your cards are always stored locally on your iPhone.
• If you turn on iCloud sync (on by default, can be switched off), your cards also sync through your own private iCloud storage — not through our servers.
• If you choose to share specific cards with family members, those cards are stored in a shared iCloud area that the people you invite can see and edit.

This may include the issuer or store name, a barcode or card number, the barcode format, a chosen card color, an optional photo of the front and/or back of the card, favorite status, and display order.

The camera is used only to read the barcode shown on your physical card; the camera image itself is not stored or transmitted.

When you choose a photo or a screenshot from another wallet app to add or import a card, the App reads the barcode and/or card tile from that image on your device. The App does not upload the image — it keeps only the card details it extracts, and any photo you separately choose to save with the card.

If iCloud sync is enabled, Kartilo stores your cards in your own private iCloud database using Apple's CloudKit service, so the same cards appear on your other devices signed in with the same Apple ID. We do not operate our own servers for this data and cannot see it — it is handled by Apple under Apple's own terms and privacy practices. You can turn sync off at any time in the App's iCloud & Family settings; your cards then remain only on that iPhone.

You can choose to share individual cards with people you invite ("Familie"), using Apple's CloudKit sharing and the standard Messages/Mail share sheet. An invitation goes only to the specific people you invite — it is not a public link. Cards you share this way, including any notes you added to them, are visible to everyone you invite; you decide for each person whether they can only view those cards or also add and edit them, and you can remove a person at any time.

If you end the family as its owner, the shared cards disappear for everyone you invited, and you keep them as your own cards. If an invited person leaves the family instead, the shared cards disappear only from that person's own device.

You can export one or more cards as a .bonuscards file (including any saved logos) or as a BCARDS1: QR code (without logos), to transfer them outside iCloud — for example to a device without iCloud, or to share a card with someone outside your family. These exports never include any notes you added to the card. They are shared the same way you share any file or QR code on your device (e.g. AirDrop, Messages); we do not see or receive them.

The App's settings also offer a backup of all your cards as a single .bonuscards file, including any notes you added. This file does not include front/back card photos. Like any export, it only goes where you choose to save or send it — we do not receive it.

Kartilo includes a small built-in directory that matches common card issuer names (for Switzerland, Germany, and Austria) to that issuer's own website, so the App can offer a link to it. This directory is built into the App; looking it up does not require a network connection.

Widgets and the Control Center button display your card data, including the barcode, directly on your device. Siri and Shortcuts let you ask for a card by name. Spotlight search can show your card names (not numbers). None of this leaves your device.

The App offers an optional, repeatable in-app purchase (a consumable "tip", base price CHF 3.00, converted by Apple into your local currency) to support ongoing development. It does not unlock any feature. The purchase, payment, and any receipt are handled entirely by Apple through StoreKit — we do not receive your payment details. The App stores locally only the number of tips you've given, so it can show a short thank-you.

The App stores a few preferences locally on your device (not in iCloud): card sort order, display brightness, whether iCloud sync is turned on, the tip counter above, and which family cards you've chosen to hide on this device (a per-device choice, not synced through iCloud).

For troubleshooting, the App also keeps a local sync log of at most 500 lines, containing only shortened internal identifiers — never card names or numbers. This log stays on your device unless you choose to send it: tapping "Send Report" under Settings → iCloud & Family → Troubleshooting shares the report text through the standard share sheet.

None of this leaves your device otherwise, except that turning on iCloud sync applies to your cards as described in section 3.

We do not knowingly collect or receive through the App:

• your name, email address, or phone number
• precise location
• contacts, browsing history, or health data
• your payment details — purchases are handled entirely by Apple
• advertising identifiers

We also do not use the App to profile users for advertising.

Kartilo does not track you across third-party apps, websites, or services. The App's privacy manifest declares that tracking is disabled and lists no collected data types, since iCloud data belongs to you and purchases are handled by Apple.

The App does not include third-party advertising or analytics SDKs. It relies only on Apple platform services: CloudKit for optional iCloud sync and Family Sharing, Vision for on-device barcode and text recognition, StoreKit for the optional tip, and standard system sharing (AirDrop, Messages, Mail).

Apple Privacy Policy: https://www.apple.com/legal/privacy/

Data stored locally is retained until you delete it or delete the App. Data stored in your private iCloud, or shared with family, is retained until you delete the card, turn off sync, end the family, or remove it through Apple's iCloud settings.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data.

Contact us at kartilo@domtelier.com. Because Kartilo primarily stores information on your device and in your own iCloud account, most requests can be fulfilled by deleting cards within the App, turning off iCloud sync, or deleting the App.

Kartilo is not directed to children under 13, and we do not knowingly collect personal information from children through the App.

We may update this Privacy Policy from time to time, including before launch. If we make material changes, we will update the effective date at the top of this page.

Dominik Schmitt — Domtelier

Email: kartilo@domtelier.com