CardVault — Privacy Policy

Last updated: 2026-07-26

CardVault is a loyalty and membership card manager built to work entirely on your device. This page explains exactly what that means.

Data we collect

None. CardVault has no account system, no sign-in, and no backend server run by us. The cards, folders, and photos you add are stored only in the app's local storage on your device.

iCloud sync & sharing

If you enable backup, your cards are synced via Apple's own iCloud/CloudKit sync to your own private iCloud database — DFB Software never receives or has access to this data. If you choose to share an individual card with someone (e.g. a family member), CardVault uses Apple's own CloudKit sharing (CKShare) to grant access to that one card to the specific person you invite; this sharing happens directly between iCloud accounts and is not visible to or routed through DFB Software.

Face ID / PIN lock

If you enable the app lock, your PIN is hashed and stored only in your device's Keychain, and Face ID authentication is handled entirely by iOS. Neither your PIN nor any biometric data ever leaves your device or is seen by DFB Software.

Tracking & analytics

CardVault contains no third-party advertising SDKs, analytics SDKs, or tracking of any kind. We don't use the App Tracking Transparency framework because we don't track you.

Purchases

CardVault offers an optional one-time premium unlock, processed entirely by Apple through StoreKit. Payment details are handled by Apple under Apple's own privacy policy — DFB Software never sees or stores your payment information.

Contact

Questions about this policy or your data can be sent to support@dfbsoftware.dk.