Privacy Policy

YourCardSentry is a spending-control app. You connect the bank accounts and credit cards you want to watch, set one spending limit for a period that matches your paycheck, and we tell you how much of it is left — and warn you before you run out.

This policy covers the marketing website at yourcardsentry.com and the app at app.yourcardsentry.com. We are the controller of the data described here. We are not a bank, and we do not hold or move money.

Every category below exists because a feature you use needs it. We do not collect anything on the basis that it might be useful later.

This section is as much a part of the policy as the one above, and it is worth being specific rather than silent.

• No demographic information. We do not ask for and do not store your age, date of birth, employment status, income band, ethnicity, race, religion, nationality, health, or preferred language.
• No home address, marital status, household size or dependants.
• No social security number, no government ID, no credit report. We do not lend money and we do not run credit checks.
• No analytics and no trackers. There is no Google Analytics, no advertising pixel, no session recorder and no third-party script on this website. We do not keep web access logs, so we have no record of which pages you read or what IP address you read them from.
• No location data. We do not ask your browser or your phone where you are.
• No contacts, photos, or files.

If we ever need one of these, we will ask for it at the moment we need it, tell you what it is for, and update this policy first.

We use Plaid to connect to your bank. You sign in on your own bank’s page, inside Plaid. Your banking credentials go from your device to your bank; they are never transmitted to, seen by, or stored by YourCardSentry.

Plaid’s access is read-only. There is no code path in this product that can move, send or spend your money, because we never request the permission that would allow it. We ask Plaid only for account details and transaction history.

Plaid holds its own relationship with you and handles your data under its own privacy policy, linked above.

We do not sell your personal information, and we never have. We do not share it with advertisers, data brokers or analytics companies, and we do not use it to train machine-learning models.

We use a small number of service providers to run the product. They process data on our instructions and for no purpose of their own:

• Plaid — connecting your bank accounts and retrieving transactions.
• Google Firebase — authentication and sign-in.
• Amazon Web Services — hosting, the database, and backups. Your data is stored in the AWS us-west-2 region, in the United States.
• Amazon Simple Email Service — sending your budget alerts. Postmark is configured as an alternative provider for the same emails; whichever is in use receives your email address and the content of the alert.

We may also disclose data where the law requires it — a valid subpoena, court order or lawful government request — or where it is necessary to investigate fraud or protect someone’s safety. If YourCardSentry is ever acquired or merged, your data would transfer with the business, and this policy would continue to apply until you were told otherwise.

This marketing website sets no cookies at all. There is nothing to consent to and no banner to dismiss.

The app at app.yourcardsentry.com does not use cookies either, but it does store two things in your own browser so you stay signed in between visits: a session token, and a refresh token kept by Firebase. Both are first-party, both are used only for sign-in, and signing out removes them. Clearing your browser’s site data for that address has the same effect.

We keep your account, your linked accounts, your transactions and your budget history for as long as your account is open. Past budget periods are kept on purpose — seeing what you spent last period is part of the product.

When you ask us to delete your account, we delete your personal data and disconnect your institutions from Plaid. Two things outlast that deletion, and we would rather say so than leave it implied:

• Encrypted database backups roll on a 7-day window, so deleted data can persist in a backup for up to seven days before it ages out.
• A record that an address bounced or complained is kept after deletion, because its only purpose is to stop us mailing that address again.

You can, at any time:

• Choose which accounts are watched. An account you stop monitoring stops counting toward your budget.
• Disconnect an institution entirely. There is no button for this in the app yet — email us and we will unlink it and delete the transactions that came from it.
• Turn alert emails off in your notification settings, or change the thresholds you are warned at.
• Ask for a copy of your data, in a portable format.
• Ask us to correct anything that is wrong.
• Ask us to delete your account and everything in it.

Self-service export and deletion are not built into the app yet. Until they are, email privacy@yourcardsentry.com from the address on your account and we will handle it by hand. We will respond within 30 days, and we will not charge you or treat you differently for asking.

Depending on where you live, you may have additional rights — for example under the California Consumer Privacy Act or the GDPR — including the right to object to or restrict certain processing, and the right to complain to your local data-protection authority. The same address reaches us for all of them. Where the GDPR applies, our legal basis is the performance of our contract with you for everything in What we collect, except operational logs and suppression records, which rest on our legitimate interest in keeping the service working and our email deliverable.

Traffic to this website and to the app is encrypted in transit with TLS. The database is encrypted at rest, and network access to it is restricted to our own servers and a short allow-list of administrative addresses. Credentials and secrets are held in encrypted parameter storage rather than in our source code.

Your bank access tokens are excluded from logs and from every API response by design, and there are tests that fail if that ever stops being true.

Every query in the app is scoped to your account, so one account can never read another’s data.

No system is perfectly secure, and we will not claim otherwise. If we discover a breach affecting your personal data, we will tell you and the relevant regulators as the law requires.

YourCardSentry is not directed at children, and we do not knowingly collect personal information from a child under 13.

Today there is only one way to get an account: an adult signs up for themselves. Inviting other people into an account is not built yet, so every person using the product created their own account and gave us their own information.

The product is designed for households, and we intend to add family members — including a restricted role for a teenager who can see the household limit and their own spending, but not anyone else’s transactions. When that ships, an adult will be the one who adds a family member and manages their data, and we will update this policy before it is available, not after.

If you believe a child has given us personal information, email privacy@yourcardsentry.com and we will delete it.

When the product changes what it collects, this page changes with it — as part of shipping the feature, not afterwards. We will update the effective date at the top, and for a change that materially affects you we will email you before it takes effect.

Questions about this policy, or about your data, go to privacy@yourcardsentry.com. A real person reads it.