Privacy Policy
Last updated 27 October 2026
What we collect
Nothing. My Cards has no account, no sign-in, no server, no analytics and no tracking. On the App Store its privacy label is Data Not Collected.
Your data stays on your iPhone
- Your cards, payments, budgets, trips and documents are stored only on your iPhone.
- Bank messages (SMS and email) and bank statements you bring in are read on the phone. Their text is never sent anywhere and is never logged.
- Passwords of protected statement PDFs are used once to open the file and are never saved.
- If your iPhone has Apple Intelligence, reading is done by Apple's on-device model, on the phone, offline.
- The app never connects to your bank and makes no network calls.
- iOS encrypts the app's data with your passcode. So that payments can be saved while the phone is locked, My Cards can open its data in the background once you have unlocked the iPhone after turning it on. Documents such as tickets and receipts can only be opened while the iPhone is unlocked.
Backups
Backups go only where you choose: a folder you pick in the Files app (for example iCloud Drive, under your own Apple account) or a file you share yourself. You can lock backups with a password (AES-256 encryption); it is kept in your iPhone's Keychain, on this phone only. Before automatic backup starts, the app asks you to set one: without it, anyone who gets into that folder can read the backup.
Subscriptions
My Cards Plus is sold and handled by Apple through the App Store. We never see your payment details.
Face ID
The optional lock uses Face ID or your passcode through Apple. The app never sees your face data.
Children
My Cards is not directed at children and collects no data from anyone.
Changes
If this policy changes, the new version is posted on this page with a new date.
Contact
Questions: khaled.ismael.dev@gmail.com
If you use "Contact support" in the app, the email it prepares includes the app version, iOS version, phone model, language and an anonymous ID made on your phone, so we can help. It is sent only if you send the email, and you can delete these lines first.