Privacy Policy

Last updated: May 2026

1. Introduction

CardWise SG ("we", "our", or "us") operates v2.cardwise.sg. This Privacy Policy explains how we collect, use, and protect your information when you use our credit card rewards calculator.

2. Information We Collect

We collect the following information to provide and improve our service:

• Account Information: When you create an account, we collect your email address and authenticate you via Supabase Auth (email/password or Google OAuth). We do not store passwords directly — authentication is managed securely by Supabase.
• App Data: To sync your preferences across devices, we store the following in our Supabase database: your selected credit cards, per-card configurations (e.g. cycle start day, bonus category), spend tracker entries, miles portfolio entries, and app settings (e.g. dark/light mode). This data is linked to your account and protected by Row Level Security — only you can access your own data.
• Usage Data: We use Google Analytics to collect anonymous information about how you use our site, including pages visited, time spent, and browser type. No personally identifiable information is sent to Google Analytics.
• Cookies: We use cookies for session management (Supabase Auth) and anonymous analytics (Google Analytics). No financial data is stored in cookies.

3. How We Use Your Information

We use collected information to:

• Provide and sync your calculator preferences across devices
• Authenticate your account securely
• Understand how users interact with our calculator
• Improve our service and user experience

4. Data Sharing

We do NOT:

• Sell your data to third parties
• Share your personal information with banks or credit card companies
• Store any actual credit card numbers, CVVs, or financial account details

We use the following third-party services that may process your data:

• Supabase — our database and authentication provider. Data is stored on Supabase infrastructure. See Supabase's Privacy Policy.
• Google Analytics — anonymous usage analytics. See Google's Privacy Policy.
• Google OAuth — if you sign in with Google, your Google account email is shared with us for authentication only.

5. Your Rights (Singapore PDPA)

Under Singapore's Personal Data Protection Act, you have the right to:

• Access data we hold about you
• Request correction of inaccurate data
• Withdraw consent for data collection
• Request deletion of your account and associated data

To exercise any of these rights, contact us at the email below.

6. Data Security

We implement appropriate security measures to protect your information, including Row Level Security on all database tables (ensuring users can only access their own data) and encrypted connections. However, no method of transmission over the internet is 100% secure.

7. Data Retention

Your account data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

8. Children's Privacy

Our service is not intended for users under 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: bryanhxy@gmail.com

← Back to CardWise SG