Encrypted Credit Card Manager

Last updated August 2026

The short version: Everything stays on your phone — there is no server. Card details, due dates, notes, and reminders never leave the device they're entered on. We don't collect anything — no account, no analytics, no crash reporting, no advertising, no third-party trackers of any kind. Camera and microphone are on-device only — card scanning and voice search process locally and are never uploaded anywhere. Nothing is ever exported to a file or the cloud — the only way your data leaves the app at all is a direct, encrypted device-to-device QR transfer that you start yourself, or calendar sync you turn on.

1. What this app is

Encrypted Credit Card Manager is an offline app for organizing your credit cards and their payment due dates on your own device. It was built with one constraint from the start: card information is sensitive, so it should never have to leave your phone to be useful. This policy explains exactly what data the app touches, where it goes, and where it stays.

2. Data we do not collect

We don't operate a server for this app, and the app makes no network requests to us or anyone else. We block network access at the OS level — the app ships without the Android INTERNET permission, so it isn't merely unused, it's structurally removed. This means the operating system itself blocks any request the app tries to make outside of it — the app has no way to open a network connection even if it wanted to. We do not create accounts — there's nothing to sign in to, the app works fully offline from first launch. We do not collect analytics — no analytics SDK is included in the app. We do not show ads — no ad SDK is included. We do not use crash reporting — no crash or telemetry SDK is included. We do not sell or share data — we never receive it in the first place, so there's nothing to sell or share.

3. What's stored, and where

Every card you add — its number, nickname, cardholder name, issuer, due date, and any notes you attach to it — is written to your device's local storage. Nothing is synced to a cloud service, and the app has no file export or backup feature of any kind. The app can lock behind your device's biometric unlock (face or fingerprint) so opening the app requires the same authentication as unlocking your phone. That check happens through your operating system — we never receive or store your biometric data.

4. Permissions the app asks for

Camera — lets you scan a physical card so its details are read automatically instead of typed by hand. The photo is processed on-device for text recognition and is not saved or uploaded. Microphone / speech recognition — powers voice search inside the app. Audio is processed on-device by the operating system's speech recognizer and is not sent anywhere by us. Calendar — only used if you turn on calendar sync, to add your due dates to your device's own calendar app. Notifications — used to send you due-date reminders and the optional weekly digest, entirely on-device. Exact alarms — lets reminders fire at the precise time you set, rather than an approximate window. Every permission above is requested only when you use the matching feature, and every one of them is optional — the app works with any of them declined, just without that specific feature.

5. Moving to a new phone

This app has no backup, export, or cloud sync feature. The only way to move your data to another device is the built-in QR transfer: it encodes your cards directly into a QR code that your other device's camera reads. It does not create a file, does not touch a server, and nothing passes through anything in between.

6. Children's privacy

This app is not directed at children and does not knowingly collect any information from anyone, of any age — per the rest of this policy, it doesn't collect information from anyone at all.

7. Changes to this policy

If this policy changes, the date at the top of this page will change with it. Since the app collects nothing today, any future change that would add data collection would be described here plainly before it took effect.

8. Contact

Questions about this policy can be sent to support@ivarlabs.com.