Glintstack / Pockard / Privacy policy
Pockard Privacy Policy
- No account is needed. If you never sign in, your cards stay on your phone and nothing about you is sent to us.
- Your card numbers and notes are encrypted. On your phone, and before they ever reach our servers. We can't read them.
- No analytics, no ads, no tracking. We don't sell or share your data with anyone.
- You can export or delete everything, at any time, from inside the app.
1. Who we are
Pockard is made by Glintstack (Pty) Ltd, a South African software company ("Glintstack", "we", "us"). We are the responsible party for your personal information under the Protection of Personal Information Act, 2013 (POPIA).
Questions about this policy, or requests about your information, go to our Information Officer at glintstack@gmail.com.
2. Using Pockard without an account
This is how Pockard works by default, and it works fully offline. In this mode we receive nothing from you. The app stores the following on your device only:
- Your loyalty cards: the name you give each card, the store it belongs to, the card number, the barcode format, the colour, the category, any notes you add, whether it's a favourite or archived, and when you last opened it. These are kept in a database encrypted with AES-256 (SQLCipher). The key is held in your phone's secure storage.
- App settings: your theme, whether biometric lock is on, and whether you've finished onboarding.
- A random install ID: a random identifier created on your phone. It isn't linked to your name or to your device's hardware IDs, and it's only used when you share a card (see section 4).
- A history of cards you've shared: which card was shared and when. It stays on your phone.
Camera, photos and biometrics
- Camera. Pockard uses the camera only to scan a card's barcode. Scanning happens entirely on your phone. Camera images aren't saved or uploaded.
- Photos. If you add a card from a photo, you choose the image with your phone's photo picker. Pockard reads the barcode from it on your phone. The image isn't copied, stored or uploaded.
- Fingerprint / face unlock. Your phone's operating system handles this. Pockard only learns whether the check passed. We never receive any biometric data.
3. If you choose to sign in
Signing in is optional. It turns on cloud backup and lets you keep your cards in step across your devices. Before your account is created, we ask for your consent. When you sign in, we process:
| Information | Readable by us? | Why |
|---|---|---|
| Your email address and an account ID | Yes | To create your account and sign you in |
| Card numbers and notes | No, encrypted on your phone before upload | So your cards can be restored and synced |
| Card display details: name, store, barcode format, colour, category, favourite/archived status, sort order, when the card was last opened, and when it was created and changed | Yes | So sync can put the right cards in the right order on each of your devices |
| Cloud backup of your whole wallet | No, encrypted on your phone. We can see only the number of cards and the backup's size | So you can restore your wallet on a new phone |
| Recovery key backup (if you create a recovery key) | No. It's an encrypted copy of your card key that only your recovery key can unlock, and we never see the recovery key itself | So a new phone can unlock your cards |
| The date and version of the privacy policy you accepted | Yes | POPIA requires us to be able to show you consented |
| Account tier | Yes | Reserved for any paid features in future. Today Pockard is free for everyone and this is the same for every account |
How you sign in
You can sign in with a one-time link sent to your email, or with Google or Apple. If you use Google or Apple, that company confirms who you are and shares your email address with us. Their own privacy policies cover what they process. We never see your Google or Apple password.
Pockard is free. There are no in-app purchases and no subscriptions, and we hold no payment information of any kind.
4. Sharing a card
When you share a card, Pockard creates a link on your phone. The link carries the card's name, number, barcode format, store, notes, the time it was shared and your random install ID, all encrypted. The decryption key sits in the part of the link after the #, which web browsers never send to any server.
- Shared cards aren't stored on our servers. The link itself carries the card.
- Anyone who has the full link can add that card, including the number and notes. Share it only with people you trust.
- Once you've sent a link, it can't be recalled. Removing it from your share history in the app doesn't stop someone who already has it.
- If someone opens the link in a web browser, the encrypted part may reach the web server for pockard.app. That server can't decrypt it.
5. Technical information
When the app talks to our servers (only if you sign in), our hosting provider handles the usual technical details of each request: your IP address, the time, and the type of request. These are used to deliver the service, keep it secure and prevent abuse, such as by limiting how often a request can be made. They're kept in logs that are cleared routinely. We don't use them to build a profile of you.
6. What we never do
- We don't collect analytics or crash reports. Pockard contains no analytics SDK, no crash-reporting SDK and no advertising SDK.
- We don't access your location, contacts, call logs, SMS or browsing history.
- We don't sell, rent or trade your information, or use it for advertising.
- We don't store card numbers or notes unencrypted on our servers.
If we ever add crash reporting or analytics, we will update this policy first and ask you to accept the new version in the app before it takes effect.
7. Our legal grounds
We process information only when POPIA allows it:
- Consent: for creating your account and storing your cards in the cloud. You can withdraw it at any time by deleting your account.
- To provide the service you asked for: backup, sync and sign-in.
- Our legitimate interest in keeping the service secure and preventing abuse (section 5).
8. Who else is involved
| Provider | What they do | Where |
|---|---|---|
| Supabase, Inc. | Hosts our database, sign-in and server functions, and sends the email sign-in links | Data stored in Zurich, Switzerland (Amazon Web Services) |
| Google or Apple | Confirms your identity, only if you choose to sign in with them | Under their own policies |
| Google Play / Apple App Store | Distributes the app and updates | Under their own policies |
Supabase processes your information only on our instructions, under a data processing agreement.
9. Information stored outside South Africa
If you sign in, your account information is stored in Switzerland. POPIA (section 72) allows this transfer because Switzerland has data protection law that gives you comparable protection, and our hosting provider is contractually bound to protect your information. Your card numbers and notes are encrypted on your phone before they leave it, so they can't be read where they're stored, not even by us.
10. How we keep it safe
- Cards on your phone are kept in an AES-256 encrypted database, and the key sits in your phone's secure storage.
- Card numbers, notes and backups are encrypted with AES-256-GCM on your phone before upload, using a key we never hold.
- Recovery keys are protected with Argon2id, a slow password-hashing method designed to resist guessing.
- All traffic to our servers is encrypted in transit (HTTPS).
- Database rules make sure each account can reach only its own records.
No system is perfectly secure. If we discover a breach that affects your information, we will notify you and the Information Regulator as POPIA requires.
11. How long we keep it
- Cards on your phone: until you delete them, use Delete all my data, or uninstall the app.
- Your account, synced cards and backup: until you delete them or your account. We keep one backup per account, and each new backup replaces the last.
- Deleted cards: when you delete a synced card, a small deletion marker with no card number is kept so your other devices remove it too. Markers are purged after 30 days.
- Account deletion: removes your account, email address, synced cards, backup, recovery key backup and consent record from our servers immediately and permanently.
12. Your rights
Under POPIA you can, at any time, without asking us first:
- See your information: in the app, go to Settings → My data → Export my cards to download it as a file. Or email us for a copy of what we hold about your account.
- Correct it: edit any card directly in the app, or email us.
- Delete it: in the app, go to Settings → My data → Delete all my data. If you no longer have the app, follow the steps on our account deletion page.
- Object or withdraw consent: sign out and delete your account, or email us.
- Complain to the Information Regulator of South Africa at inforegulator.org.za. We'd appreciate the chance to fix things first, but you don't have to come to us first.
We respond to emailed requests within 7 days.
13. Children
Pockard isn't aimed at children. You can use it without an account at any age, because nothing is sent to us. Anyone under 18 should have a parent or guardian's permission before creating an account. If you believe a child has created an account without that permission, email us and we'll delete it.
14. Changes to this policy
If we change this policy in a way that matters, we'll show you the new version in the app and ask you to accept it before you continue. The effective date at the top always shows the current version.
15. Contact
Information Officer, Glintstack (Pty) Ltd, South Africa
glintstack@gmail.com