Privacy policy

Who we are

Cardigan is run by , .

The person in charge of protecting your personal information is . Write to with any question or request about your information.

What we collect

Your account: your email address and name, and if you sign in with Google, the name, email address and picture Google shares with us.

Your profile: your province or territory, your time zone, and the day you confirmed you’re 18 or older.

What you enter about your household: the names you give the people you track, the cards each person holds or held, when they were opened and closed, and what you log about them (perks used, spending toward bonuses, points balances, certificates and notes).

Your reminder settings, and for push notifications, the address your browser’s push service gives us for this device, with a short label such as “Chrome on Android”. If you turn on the calendar feed: its secret link, and when a calendar app last fetched it.

Sign-in records: the browser and IP address of each signed-in session, to keep your account secure.

How you use the app, in broad strokes: when you sign up, add a card, log something, or open the app from a reminder. Not what you looked at, and nothing about your device. We count these to see whether the beta works for people.

Reports and feedback you send us, with your account, so we can follow up.

If you joined the waitlist: your email address, your province or territory, and proof of your consent (the date, the exact wording, the page and a scrambled form of your IP address).

We never ask for card numbers, bank logins or loyalty program logins, and the app refuses a card number if someone types one.

Why

To run the service you asked for: to work out your perks’ periods, fees, deadlines, eligibility dates and points expiry, to remind you about them the way you chose, and to let the people in your household share it. To keep accounts secure, to answer you, and to meet our legal obligations.

We don’t sell your information, we don’t show ads, and we don’t use your cards to suggest other cards. Anything beyond running the service would need your separate, express consent first.

Your card details are sensitive

Which cards you hold, and when you opened them, can say something about your finances. We treat this information as sensitive: access is limited to what running the service needs, it’s encrypted in transit and at rest, and it stays out of our logs and error reports.

Where it’s stored and processed

Our database is in Montreal, Canada (Supabase). The app itself runs on servers in the United States (Vercel), so your information passes through them while you use it.

Other service providers handle parts of the service for us, under written agreements: Resend (United States) sends our emails, Sentry (United States) receives error reports with personal details removed, and Google handles “Sign in with Google”. Push notifications travel through your browser maker’s push service (Apple, Google or Mozilla), encrypted so that only your device can read them.

Information handled outside Canada may be accessible to the courts and authorities of those countries.

Who sees it

The people in your household who sign in see your household’s cards and history: that’s the point of sharing it. We look at your information only to keep the service running, to fix a problem you report, or when the law requires it. Our service providers process it only on our instructions.

If you turn on the calendar feed, its link is a secret: anyone who has it can see the names of the people and cards in your household, the dates in the feed, and the amounts that go with them (a credit left, a fee, a points balance), without signing in. Keep it to yourself. If it gets out, reset the link in Settings, under Notifications: the old one stops working at once.

How long we keep it

As long as you have an account. When you delete it, your login and your own settings are removed right away. A household is erased with everything in it within 24 hours of its last login being deleted. Our database backups roll over within 7 days, so after that it’s gone from them too.

Records of the reminders we sent are kept for 90 days. Usage records are kept for 13 months, or until you delete your account. Reports about our card data are kept to keep the catalogue right; deleting your account removes the link to you from them. Waitlist entries are kept until you unsubscribe, and records of your consents for as long as we need them to show what you agreed to.

Your rights and choices

You can see and correct what you entered in the app at any time. In Settings, under Privacy and your data, you can download all of it (JSON and CSV), see and withdraw your consents, and delete your account. Before you’ve finished setting up, each setup step has a link to delete your account. Every reminder email has a link to turn reminder emails off without signing in.

You can also ask us, at , for a copy of your information, a correction, or its deletion. We answer within 30 days.

If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to your province’s privacy commissioner (in Quebec, the Commission d’accès à l’information).

Cookies and trackers

We use one kind of cookie: the one that keeps you signed in. There are no advertising or analytics trackers on our pages. The app saves a few choices on your device, such as whether you dismissed the “add to home screen” suggestion.

Age

Cardigan is for adults: you must be 18 or older to use it.

Changes to this policy

If we change this policy in a way that matters, we’ll tell you in the app or by email before the change takes effect. The date at the top shows the latest version.