nascard Wallet — Privacy Policy

Effective Date: July 31, 2026

nascard Wallet lets you digitize, organize, and securely store your physical cards on your Android device. This policy explains how we handle your data.

──────────────────────────────

1. DATA WE COLLECT

──────────────────────────────

Card Data (stored locally on your device only):

• Card holder name, number, expiry date, and fields you enter

• Front and back photos of your physical cards

• Card type, custom notes, barcodes and QR codes

Subscription Data (via Whop):

• Email address and subscription/purchase history

Usage Data:

• Approximate device location (on-device only, for nearby card suggestions — never sent to our servers)

• Crash reports and basic app analytics

We do NOT collect biometric data, precise GPS location, contacts, messages, or call logs.

──────────────────────────────

2. DEVICE PERMISSIONS

──────────────────────────────

Camera — to photograph cards and scan barcodes. Photos stay on your device.

Storage — to import card images from your gallery and save encrypted backup files.

Microphone — required by the camera component. We do not record audio.

Biometrics/PIN — for the optional app lock. Biometric data never leaves your device.

All permissions are optional. Declining one disables that feature only.

──────────────────────────────

3. HOW WE USE YOUR DATA

──────────────────────────────

• Card photos are sent to OpenAI's API for AI-powered OCR (text extraction). No photo is stored on our servers after processing.

• Location is used on-device only for nearby card suggestions. It is never transmitted to our servers.

• Encrypted backup files are stored locally on your device only. We cannot access them.

• Email and payment data are handled by Whop for Pro subscription management.

• Card expiry dates are used to send local push notifications on your device.

──────────────────────────────

4. DATA STORAGE & SECURITY

──────────────────────────────

• AES-256 encryption for all backup files

• On-device storage only — your cards are never uploaded to our cloud

• Optional biometric/PIN app lock

• Privacy blur on sensitive fields by default

If you uninstall the app without a backup, your data cannot be recovered by us.

──────────────────────────────

5. THIRD-PARTY SERVICES

──────────────────────────────

OpenAI — processes card images for OCR. Images are not used to train AI models (API usage). See: openai.com/policies/privacy-policy

Whop — manages Pro subscriptions and payments. See: whop.com/privacy

Expo (React Native) — app framework that may collect anonymous crash data. See: expo.dev/privacy

Google Play Services — standard analytics. See: policies.google.com/privacy

──────────────────────────────

6. DATA SHARING

──────────────────────────────

We do NOT sell, rent, or trade your personal data.

We share data only with:

• OpenAI and Whop (as service providers, described above)

• Legal authorities (only if required by law)

• Your explicit consent (card sharing feature)

──────────────────────────────

7. YOUR RIGHTS

──────────────────────────────

You may request access, deletion, correction, or export of your data at any time. You can also revoke app permissions in Android Settings at any time.

──────────────────────────────

8. CHILDREN'S PRIVACY

──────────────────────────────

nascard Wallet is not directed to children under 13. We do not knowingly collect data from children under 13.

──────────────────────────────

9. CHANGES TO THIS POLICY

──────────────────────────────

We may update this policy occasionally. The effective date at the top will reflect the latest version. Continued use of the app constitutes acceptance of the updated policy.

──────────────────────────────

10. CONTACT US

──────────────────────────────

For any privacy questions or data requests:

Email: septnova.contact@gmail.com