Privacy Policy

Last updated: 2026-10-06

This policy covers the WalletCard app and the website walletcard.cloud. In short: WalletCard does not collect or track personal data. Everything is stored locally on your device and, depending on your settings, in your personal iCloud account. No data is shared with third parties, there are no ads and no analytics services.

Controller

Email: [email protected]

Camera and text recognition

The camera is used solely to capture your cards: it takes photos of cards and barcodes. Text, card details and barcodes are recognised entirely on your device (Apple Vision; on supported devices also Apple Intelligence with Apple's on-device models). None of it is sent to us. If you pick an existing photo, that happens through Apple's system picker – WalletCard needs no access to your photo library. Pictures and recognised data stay on your device and, depending on your settings, in your own iCloud account.

iCloud and sharing

With iCloud on, WalletCard stores and syncs your cards in the private CloudKit container of your iCloud account across your devices. The widget, the Apple Watch app and, if installed, the pon app read your cards locally on the device through the shared app group; nothing leaves your device there either.

If you share a card via iCloud, the data stays within Apple's CloudKit infrastructure. Invitees can see the card's title and preview picture; with a public link, anyone who has the link can. You decide who may view or edit a card and can end a share at any time.

Deletion and retention

Cards stay stored until you delete them. Deleting a card in the app removes it from your device and your iCloud. You also manage your iCloud data yourself under Settings › Apple Account › iCloud. If you delete the app, the data remains in your iCloud account until you delete it there or through the app. When you end a share, the shared card disappears for all participants.

Feedback by email

When you send us a message from the app, your mail app opens. If you choose, the app attaches your device model, the app and iOS versions and a sync log so we can trace a problem; you see everything before sending and can remove it. We use these details only to answer your request.

Legal basis

The legal basis for processing personal data is Article 6(1)(b) GDPR (performance of a contract), as the app stores and optionally shares content at your request.

Processing by Apple

Storage and synchronisation via iCloud is handled exclusively by Apple Inc. as part of your iCloud usage. Apple's privacy policy applies: www.apple.com/legal/privacy/

This website

The website walletcard.cloud sets no cookies, uses no tracking and no analytics services, and loads nothing from third parties – not even fonts. The start page reads your browser's language setting (Accept-Language) once to forward you to the matching language version; this is not stored.

The website is delivered through Cloudflare (Cloudflare, Inc., USA). When you visit, Cloudflare processes technically necessary connection data, in particular your IP address, date and time of the request, the page requested and details of your browser and operating system. The website cannot be delivered without this data; it also serves stability and the defence against attacks. The legal basis is Article 6(1)(f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework. We keep no visitor logs ourselves.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection. Since WalletCard never receives your data, you can view, change and delete it yourself in the app and in your iCloud. You also have the right to lodge a complaint with a data protection authority, for example the Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg.

Contact

If you have any questions about privacy, feel free to contact us: [email protected]