Privacy policy
we collect nothing. literally.
The short version. CardTijori collects nothing. It has no servers, no account, no analytics, and no ads. The Android app doesn't have permission to use the internet at all. Your cards stay on your phone, encrypted.
What the app stores, and where
- Card details you enter (nickname, card number, name on card, expiry, bank, optional CVV) are saved in an encrypted database on your phone only.
- Your PIN is never stored. The app keeps an encrypted key that only your PIN (or your fingerprint or face, if you turn that on) can unlock.
- App settings (theme, auto-lock time, biometric on/off) are stored on your phone.
None of this is sent to us or anyone else. We have no copy of your data and no way to see it.
What the app does not do
- No internet access. The Android release build doesn't request the internet permission, which you can check in your phone's app settings. On iOS, the app contains no networking code or third-party SDKs that could send data.
- No analytics, crash reporting, advertising, or tracking of any kind.
- No account, login, or cloud sync.
- No payments. CardTijori doesn't process, send, or tokenise payments. It's an encrypted notebook for your own card details.
Backups
If you create a backup, the app makes an encrypted .tijori file protected by a password you choose. You decide where the file goes (for example Files, Google Drive, or email) using your phone's share sheet. Whatever service you pick handles the file under its own privacy policy. The file is encrypted before it leaves CardTijori, and we can't open it or reset its password.
The encrypted database is excluded from your phone's automatic cloud backups (Android Auto Backup and iCloud Backup), so it isn't copied off your device without you choosing to export a backup.
Permissions
- Fingerprint / Face ID (optional): to unlock the app. Your biometric data never reaches CardTijori; the phone only tells the app whether the check passed.
- Vibration: for small haptic feedback.
Clipboard
When you copy a card detail, it goes on your phone's clipboard so you can paste it. CardTijori clears it after 30 seconds if it's still there, and marks it as sensitive so Android 13+ hides it from clipboard previews. Other apps you paste into can read what you paste.
Children
CardTijori isn't directed at children under 13 (or the minimum age in your country) and collects no data from anyone.
Links
Links in Settings (like this policy or the support email) open in your browser or mail app. That happens outside CardTijori.
Your rights
Because we collect no personal data, we hold nothing to access, correct, export, or delete. You can delete everything the app stores at any time with Settings → Erase everything, or by uninstalling the app.
Changes
If this policy changes, we'll update this page and the effective date above. Any change that involved collecting data would ship in an app update, and we'd say so in the release notes.
Contact
Questions: ashishsoni.cp@gmail.com