Effective 7 October 2026
This policy covers the PickCard app for iPhone, its widgets and its share extension. PickCard is made by an independent developer (contact below). There is no PickCard server and no account system: everything described here happens on your own iPhone.
Everything below is stored on your iPhone, in PickCard’s own storage, and only there.
PickCard never asks for, and has no field for, a full card number, an expiry date, a CVV, a PIN, an online banking login or password, your name, your email address or your phone number. It does not read your messages by itself: it only sees a message you share to it or that your own Shortcuts automation passes to it.
On your iPhone, protected by iOS data protection like any other app’s data. If you back up your iPhone to iCloud or a computer, that backup includes PickCard’s data under your own Apple account or on your own computer. PickCard has no account of its own and no access to those backups.
PickCard’s widgets and share extension read the same storage on the same iPhone. A widget shows the card to reach for, card names and dates. A widget shows amounts (the available credit on a card, the amount of an expected charge) only if you turn on Show amounts in widgets in Settings, which is off until you do. A Lock Screen widget never shows an amount, and turning the setting off removes amounts from the data widgets read. While PickCard is locked after its trial, widgets show only a prompt to unlock it.
Nothing. PickCard has no server, makes no network calls of its own and fetches nothing, not even exchange rates: any rates you type stay on the phone. It contains no third-party code at all, and no analytics, advertising or crash-reporting code. It cannot see your data, and neither can we.
On iPhones with Apple Intelligence, PickCard can suggest a category for a purchase using Apple’s on-device model. It sees the merchant name and nothing else: no amounts, cards, dates or message text. The suggestion is made on your iPhone and nothing is sent anywhere. You can turn suggestions off in Settings, and every suggested category says so and can be changed.
You choose what PickCard sees. You can share a message to it from Messages, set up a Shortcuts automation that passes messages containing a card’s last four digits, or type an entry yourself. Nothing is pre-programmed for any bank: PickCard reads a message only in a format you taught it, from your own messages, on your own phone.
| Permission | Why | Required? |
|---|---|---|
| Notifications | Reminders before a statement closes and a payment is due, and when it’s time to switch cards | Optional |
| Face ID or passcode | The app lock, if you turn it on. iOS checks it; PickCard only learns whether the check passed | Optional |
Both are optional, and PickCard works without either.
Because we never receive your data, there is no copy of it anywhere for us to delete.
PickCard is meant for adults managing their own cards, and is not directed to children under 13.
PickCard works from the details you enter and the messages you share. Its dates and balances are estimates: always check your bank’s statement and terms. PickCard is not a bank and is not affiliated with any bank or card network.
Depending on where you live, you may have rights to access, correct, export or delete personal data held about you (for example under the GDPR or CCPA). With PickCard you exercise all of them directly in the app, because the only copy of your data is on your iPhone: edit or remove anything, use Export, or use Erase everything. Apple holds the records of your App Store account and download under its own policies.
If this policy changes, the new text ships inside the app and is published on this page with a new effective date. There is no mailing list to notify, because PickCard does not know who you are.
Questions about privacy? Email thilinaabeyrathna@gmail.com.