Privacy Policy

MyCards (“we,” “us,” or “our”) operates the MyCards mobile application and the website at mycards.cards (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and what choices you have.

1. Information We Collect

1.1 Account Information

When you create an account we collect your email address, display name, username, and optional profile image. Authentication is handled by Supabase Auth; we store a hashed credential — never your plaintext password.

1.2 Content You Create

Cards, decks, text blocks, images, videos, audio clips, and links you upload or enter are stored in our database and, for media files, in cloud storage buckets provided by Supabase Storage. This content is associated with your user ID.

1.3 Usage Data

We record deck views and card views (viewer identity, timestamp) to provide you with analytics on who engaged with your content. We also collect basic device and session metadata (platform, app version) to diagnose issues and improve the Service.

1.4 Notification Preferences

Your notification preference choices (e.g., access requests, deck views, new features) are stored locally on your device and are not transmitted to our servers.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Display your profile, decks, and cards to people you share them with.
• Provide analytics on how your content is viewed.
• Process access requests for your private decks.
• Send transactional emails (e.g., password resets).
• Enforce our Terms of Service and protect against abuse.

3. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

• Public content. Decks and cards you mark as public are viewable by anyone with the link, including through the web viewer at mycards.cards.
• Service providers. We use Supabase (database, auth, storage) and Vercel (web hosting). These providers process data on our behalf under their own privacy policies.
• Legal requirements. We may disclose information if required by law, subpoena, or legal process.

4. Data Storage and Security

Your data is stored on Supabase-managed infrastructure. We use Row-Level Security (RLS) policies to ensure each user can only access their own data unless explicitly shared. Media files are stored in private buckets with signed URLs. All connections use HTTPS/TLS encryption in transit.

5. Data Retention and Deletion

We retain your data for as long as your account is active. You can delete all your data at any time from Settings > Delete All My Data, which permanently removes your profile, decks, cards, saved contacts, and associated media. After deletion, residual copies may remain in backups for up to 30 days before being purged.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Export your data in a portable format.

To exercise these rights, contact us at support@mycards.cards.

7. Children's Privacy

The Service is not intended for users under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

8. Cookies and Local Storage

The web viewer at mycards.cards uses essential cookies for session management only. The mobile app uses AsyncStorage for local preferences (theme, notification settings). We do not use tracking cookies or third-party analytics cookies.

9. Third-Party Links

Cards may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: support@mycards.cards