Privacy Policy | Card Storage

1

Overview

This Privacy Policy governs the Card Storage mobile application and its associated backend services (collectively, the “Service”). The Service enables users to securely store encrypted images of sensitive documents such as credit cards, debit cards, ID cards, passports, and other personal documents.

Zero-Knowledge Encryption: All encryption and decryption of your stored images happen exclusively on your device. We never receive, store, or have access to your decryption keys or the plaintext content of your images.

2

Information We Collect

a. Account & Profile Information

Full Name (optional) Provided during profile updates.
Email Address (optional) Used for account identification and communication.
Phone Number (optional) Used for OTP-based authentication and account recovery.
Profile Image (optional) Uploaded by you for personalization.

b. Subscription Information

Selected subscription plan (Free or Paid)
Subscription status (Active, Expired, Cancelled)
Start and end dates of subscriptions

We do not collect or store any payment card details.

c. Uploaded Content

Critical Privacy Guarantee: All images you upload are encrypted on your device before being sent to our servers. We only store the encrypted data and have no technical ability to decrypt or view your original images.

Client-side encrypted image files
Limited anonymized metadata (file size, upload timestamp) for service functionality only

d. Technical & Usage Data

Device information (for security and compatibility)
IP address (temporarily for rate limiting and fraud prevention)
Server access logs (retained for a maximum of 90 days)
Anonymized usage statistics for service improvement

3

How We Use Your Information

To provide and maintain secure storage and retrieval of your encrypted content
To authenticate users via OTP or session tokens
To manage subscription plans and access levels
To detect and prevent abuse, fraud, or unauthorized access
To improve the Service and fix technical issues
To comply with applicable legal requirements

We do NOT: sell your data, share it for marketing purposes, use it for advertising, or attempt to access/decrypt your stored images.

4

Security Measures

Client-Side Encryption: Images are encrypted on your device using strong cryptographic standards before transmission
Transport Security: All communications are protected with TLS 1.3
Server-Side Protections: Encrypted data at rest, strict access controls, regular security audits
Key Management: Decryption keys never leave your device
Rate limiting and monitoring to prevent brute-force attacks

5

Data Sharing & Disclosure

With trusted service providers (cloud hosting, infrastructure) under strict data processing agreements
When required by law or to protect our rights and safety
In connection with a merger, acquisition, or sale of assets (with prior notice where feasible)

We never sell your personal information.

6

Data Retention

Account and profile data: Retained while your account is active
Encrypted images: Retained until you delete them or close your account
Upon account deletion: All associated data is permanently deleted within 30 days
Server logs: Retained for up to 90 days for security purposes

7

Your Privacy Rights

You may:

Access, update, or delete your profile information
Delete individual stored items or your entire account
Request information about your stored data
Contact us to exercise any applicable legal rights (GDPR, CCPA, etc.)

8

Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13.

9

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Material changes will be communicated via the app or email where appropriate.

10

Contact Us

Contact Information

Globizs Web Solutions Pvt Ltd

Konung Mamang, New Checkon Rd

Imphal, Manipur 795001

India

Email: contact@globizs.com