Privacy policy

Kaunsa Card? helps people in Pakistan discover card offers and compare possible savings. We do not issue bank cards, process payments or connect to your bank account.

We do not ask for card numbers, PINs, CVVs, bank passwords or payment credentials. The cards in your wallet are card types, not access to your actual bank cards. We do not sell your personal information or use advertising cookies.

For email sign-in, we use your email address to send and verify a short-lived code. If you choose Google sign-in when available, Google shares your name, email address and profile image when available. We request identity, email and profile permissions; we do not request your Gmail messages, Drive files, contacts or calendar.

Your Google name can fill an empty card display name. You can edit it in Account, and later Google sign-ins preserve a name you have already saved.

Signed-in accounts sync selected card types, favourites, city, language, savings and cashback entries, and usage counters. Savings entries may contain merchant and card-type names, dates, bill amounts and amounts saved. Importing existing guest data is optional.

Necessary sign-in cookies keep your session secure. Session records include expiry information and may include an IP address and browser information. Blocking these cookies can prevent account features from working.

Browser storage keeps guest selections, signed-in account caches and pending sync changes. Theme, motion preferences and the current bill input stay on your device; a bill amount you deliberately log in a savings entry can sync with that entry. Public pages and assets may be cached for faster loading and offline use.

Signing out clears the local account cache, but retains your guest data. Clearing this site’s browser data removes local selections and settings; it does not delete your account or information already synced. See Privacy choices before clearing unsynced changes.

Near Me uses your browser’s location permission, or an area you choose. If permission was granted previously, the browser may provide your location when you revisit Near Me. The nearby search sends coordinates, search radius, selected card types and bill input to our server to calculate results. We do not save precise coordinates to your account.

The map loads tiles from OpenStreetMap. Its servers receive ordinary requests such as your IP address and the map area requested. External directions links open the destination in the map service you choose, under that service’s own policy.

The optional assistant sends your recent conversation, selected card types, city and bill input to Google’s Gemini API to generate an answer. We do not attach your account email or display name to these requests, but anything you type in the conversation is included.

Google’s processing depends on the applicable Gemini API terms. These distinguish paid and unpaid services; unpaid services may use submitted content and responses to improve Google’s products and may involve human review. Do not enter sensitive, confidential or financial account information.

Our usage records track a hashed client identifier, time and token counts for abuse prevention and service limits. They do not store conversation text. This does not control Google’s own retention or processing.

If you report whether an offer worked, we keep the selected offer and card type, optional branch and note, outcome, time and a hashed client identifier used to limit abuse. The administrator can review reports. Reports are separate from your account and are not automatically removed when you delete it.

If you create a savings image to share, the totals and optional card-type and place names needed to render it are sent to our server. Choosing to share or download the image places that information in the destination you choose, where its own privacy settings apply.

Please avoid personal or payment information in report notes. If you email support, your email address, message and any attachments are used to respond and handle your request. Contact us if a report includes information you want removed, with enough detail to locate it.

A small sample of visits sends loading, responsiveness and layout-stability measurements. These events contain a metric, value, rating and general page type. They do not include your name, email, wallet, bill, search terms, restaurant identifiers or location, and do not create analytics cookies.

You can turn these optional measurements off for this browser in Privacy choices. We also honour the browser’s Do Not Track setting for these measurements. Hosting services may separately keep routine request, security and error logs, including IP addresses, requested URLs and browser information.

Vercel hosts the app, Amazon Web Services stores account and related service records, and our email provider delivers sign-in codes and handles support mail. Google handles Google sign-in and assistant requests when you use them. OpenStreetMap supplies the nearby map. Information may be processed in countries outside Pakistan.

These providers process information needed for their functions under their own terms and privacy policies. Relevant policies include Vercel, AWS, Google and OpenStreetMap Foundation.

We restrict administrative access and use safeguards such as authenticated account access, encrypted connections, hashed sign-in codes and rate limits. No online service can guarantee complete security.

We keep your profile and synced state while your account exists. Delete account in Account removes your profile, active sessions, linked sign-in records and synced personal state. You may need to sign in again first. Deletion cannot be undone.

Sign-in codes expire after five minutes and sessions have a 30-day expiry that may renew with use. Expired verification and rate-limit records are scheduled for cleanup. Assistant usage records expire after 90 days; provider cleanup can occur after expiry rather than at that exact moment. Reports and routine service logs have separate retention and are not erased by account deletion.

You can request access, correction or deletion of information by contacting us. We may need to verify that a request concerns your information. Browser data on other devices and information held independently by providers require their own controls.

For privacy or support requests, email abdullahnaeem884@gmail.com. Do not include passwords, sign-in codes or card numbers.

We may update this policy as the service changes. The date at the top identifies the current version; review it when using new features.