RightCard Privacy Policy

Version française

Effective date: October 29, 2026 · Last updated: October 29, 2026

RightCard helps you choose the best credit card for any purchase. It is built to be privacy-first: an account is optional, we collect no unnecessary personal information, we never connect to your bank, and there is no third-party tracking.

The short version

• An account is optional for recommendations. You can search stores, pick categories and keep your wallet without signing in. Syncing your bank offers needs a free account. If you create one, we store only the identifier you sign in with: a Sign in with Apple identifier (which can be a private Hide My Email relay address), a Google account identifier and its email address, or an email address. We never ask for your name, phone number, or address.
• No bank login, ever. RightCard never connects to your bank or card through Plaid or any other aggregator, and never sees your account numbers, balances, or transactions.
• No third-party tracking or ads. RightCard contains no advertising, attribution, or third-party analytics SDKs. We keep only minimal first-party usage data (your app version, your device type and the date you last opened the app) to understand active usage — never sold or shared.
• Location is optional and stays on your device. By default we use only a fixed, country-level region hint — no location access. If you use Best card here, RightCard looks up the stores around you when you ask, and, once you have allowed location, when you open the app at a store so your best card is already on the Home screen. If you turn on the optional Offer alerts nearby feature, it uses your location in the background to alert you at a store where you have an offer, or where a different card than your usual one is better. Your location is used only on your device (and by Apple Maps to find nearby stores) and is never sent to our servers or logged. The one thing kept is a store you choose to Remember: its location stays on your phone so it can alert you there, until you forget it or delete the app.
• Photos stay on your phone. When you scan a photo or screenshot, add cards from a photo, point your camera at a store's sign, or use Apple's Visual Intelligence to search with RightCard, the text in the picture is read on your device. The picture is never uploaded or kept.
• Voice search isn't recorded. When you tap the microphone to say a store's name, Apple's speech recognition turns it into text, on your iPhone whenever it can. RightCard never receives your voice, and nothing is recorded or kept.
• Notifications are local. Any reminders — an offer about to expire, your sweep streak, or a nearby offer — are scheduled on your device. We don't run a push server, and nothing about them leaves your phone.
• Your recommendations run on your device and work offline.

What we store, and where

On your device:

• The cards you select in “Manage Cards” and your reward-valuation preference.
• A cached copy of public card and merchant data for offline use.
• A secure, device-only session token (kept in the iOS Keychain; never synced to iCloud and excluded from backups).

On our backend (Supabase):

• An anonymous identity — a randomly generated ID and access token, created automatically with no sign-up and not linked to your name or contact details. We still treat it as personal information.
• The list of cards in your wallet, so it comes back on a new phone or after a reinstall.
• If you create an account, the sign-in identifier you used: a Sign in with Apple user identifier (and the email Apple shares with us, which may be a private @privaterelay.appleid.com relay address), a Google account identifier and its email address, or the email address you registered. Creating an account does not change what app data we hold — it keeps the same identity, so your synced offers simply become recoverable and syncable across your devices.
• The card offers you choose to sync from your bank, stored only as { card, merchant, percentage/amount, expiration, source }, plus whether it works online or in store, whether the offer is activated on your card, and whether you've marked it used. These are private to your identity and isolated by row-level security so no other user can read them. We never store account numbers, balances, or transactions.
• What you tell us about cards and stores. If you use “Request a card”, we store the card name you typed and your device's country. If you tap “Earned less here?” on a store's answer, we store the store's name, the category RightCard answered with, what your statement showed (the base rate or another category) and the card it recommended. No amounts, no dates, no statement text. Both are tied to your identity, so you can undo a store report. We only change a store's answer for everyone after at least three different people report the same thing.
• A minimal usage record — your app version, your device type and the date you last opened the app, tied to your identity — used only to measure active usage. No spend, no transactions, no personal profile.

Your App Store country. The app reads which country's App Store you downloaded it from, so it can show your country's cards. Only the country (for example "CA") is sent, to load that country's cards; your App Store account is never read or sent.

All network traffic uses HTTPS.

Your account (optional)

Recommendations, search and your wallet work without an account. An account backs up the offers you've synced, makes them available on your other devices (and after a reinstall), and is required to sync bank offers.

• You can sign in with Sign in with Apple (including Hide My Email, so we only ever see a private relay address), with Google (we receive your Google account's email address — nothing else from your Google account), or with an email and password. That is the only information an account adds.
• An account is never a bank login. We never ask you to connect a card, link a bank, or share credentials.
• Your data stays isolated to you by row-level security — no other user can read it.
• You can sign out at any time, or permanently delete your account and its data from inside the app (see “Deleting your data”).

Location and notifications (optional)

Location. RightCard does not use your location by default; merchant search uses a fixed, country-level region hint. Best card here uses your location, with your “While Using” permission, to find the stores around you: when you open it, and when you open the app while standing at a store so the answer is waiting on the Home screen. If you enable Offer alerts nearby, RightCard uses background location (with your “Always” permission) to notice when you arrive at a store where you have an offer on one of your cards, or where a different card than your usual one is better, and to show you a reminder. Your location is used only on your device, to ask Apple Maps what stores are nearby (and, on the Offers filter in Nearby, where the stores for your offers are) and to match them against what's already on your phone. It is never sent to our servers and never logged. When you tap Remember on a store, RightCard keeps that store's location on your phone so it can alert you when you walk in; it never leaves the device, and it's removed when you tap Forget or delete the app. All of this is off by default, you can turn it off at any time, and the app works fully without it.

Camera and photos. RightCard can read a photo or screenshot you choose, a picture you take, what the camera sees while you point it at a store's sign, or what Apple's Visual Intelligence passes it when you search with RightCard, to find a store or card name. The text is read on your device with Apple's on-device text recognition. The image is never sent to our servers and is not kept.

Voice search. Voice search is optional and asks for the microphone and speech recognition the first time you use it. RightCard listens only while the voice search screen is open. Apple's speech recognition turns what you say into text, on your iPhone whenever it can; when it can't, Apple's servers do it under Apple's privacy policy. RightCard only gets the text (a store name) and uses it to search, the same as if you had typed it. Your voice is never sent to our servers, recorded, or kept.

Notifications. RightCard's reminders — for offers about to expire, your weekly sweep streak, and nearby offer alerts — are local notifications scheduled on your device. We do not operate a push-notification server; no notification content or schedule is sent off your phone. Notifications are opt-in.

Browser extensions (optional)

RightCard has two optional extensions that read your bank's offers page for you: the Safari extension that ships inside the iPhone app, and a desktop extension for Chrome (Firefox to follow). Both work the same way: only on your bank's website, and only after you have signed in there yourself, they read the offer details shown on the page (merchant name, percentage or amount, expiration, and whether it works online or in store) so those offers appear in RightCard and, if you turn auto-add on, get added to your card for you.

• They run only on supported card-issuer domains: American Express, Chase, Citi, Bank of America, Wells Fargo and U.S. Bank. (The Safari extension is also permitted on Capital One, where it deliberately does nothing: Capital One's offers are shopping links, not card offers.) They do not run on any other website.
• They never read or transmit your username, password, account numbers, balances, or transaction history.
• A bank page never sees your RightCard session. On iPhone the extension hands offers to the app, which does the syncing. On desktop your sign-in lives in the extension's own background process, which web pages cannot read.
• The desktop extension requires a RightCard account, so your phone and your computer share one set of offers. You sign in with a six-digit code we email you. The extension keeps that session in the browser's extension storage on that computer; signing out ends it and clears the extension's local data. The extension talks only to our backend (Supabase) over HTTPS.
• "Check this site." When you click the desktop extension's icon while on a store's website, the browser tells the extension that one tab's address at that moment, and the extension answers whether you hold an offer for that store. The address is matched on your computer and is not stored or sent anywhere. At any other time the extension cannot see which sites you visit; it has no permission to.
• Offers synced from a browser carry a source label (for example "Chrome") so the app can say where a sync came from. That is the only thing recorded about your browser.

Feedback and email from you

When you send feedback from the app (Settings › Send Feedback), through the form on rightcard.ai/feedback, or by email, we get what you write and the email address you give us. Feedback also carries your RightCard user ID (and your account email, if you have an account), the app version, the iOS version and which screen it came from, so we can reproduce a problem. Nothing else about you or your cards is attached.

If you choose to add a screenshot in the app, it reaches us only as an attachment to that email. Your phone shrinks it first and removes its location and camera details. It isn't saved in RightCard's database; it stays only in that email.

• We use your email address only to reply to you about your feedback, and to tell you when something you asked for is ready. It is not added to any mailing list.
• Feedback sent from the app is stored with the rest of RightCard's data (Supabase) and emailed to us through Brevo. The web form is run by Tally. They process it for us and nothing else. To have your feedback and address deleted, email us (below).
• Our website and the support@ address run through Cloudflare (United States). Email sent to support@ is kept in our Gmail inbox (Google, United States). Besides feedback emails, Brevo (European Union) also sends sign-in codes and account emails.

Sharing of data

We do not sell, rent, or share your data with third parties. We have no advertising or data-broker relationships. The service providers named above handle data only to run RightCard.

Deleting your data

• Use Settings → Account → Delete account to permanently delete your account and the offers synced to it.
• Use Settings → Clear synced offers to remove the offers stored under your identity while keeping the app.
• Deleting the app removes your device-only session.
• In the desktop extension, Cards & offers → Account → Sign out on this computer clears everything the extension kept on that computer; Clear synced offers there removes the offers stored under your account, the same as in the app.
• Deleting your account also deletes your card requests and store reports.
• To request deletion of any remaining data, email us (below).

How long we keep data

• Synced offers stay until you clear them, delete your account, or a later sync shows your bank no longer offers them. Expired offers stop being used in answers.
• Your anonymous identity stays until you delete it, or until 24 months pass with no use. An account you created stays until you delete it. Deleting your account removes your offers, card requests and store reports.
• Card requests and store reports are deleted after 2 years.
• Feedback and support emails are deleted after 2 years, or sooner if you ask.
• The Android waitlist keeps your email until we send the launch email, then deletes it.
• When the reason we kept something is gone, we delete it.

Where your data is stored

RightCard's backend (Supabase) is in the United States (Ohio), and so are Cloudflare, which runs our website, and Google, which holds our support inbox. Our email provider (Brevo) and the feedback form on our website (Tally) keep data in the European Union. So your data is stored outside Quebec and outside Canada, in the United States and the European Union, and may be accessed by the authorities there under their laws.

How we protect it

Data is encrypted in transit (HTTPS). Each person's rows are locked to their own identity, so no other user can read them. Only the developer can reach the database, with two-factor sign-in.

When you delete something, a copy can stay in our database provider's backups for a short time before those are overwritten.

Your rights

You can ask for a copy of your data in a file you can reuse, ask us to correct it, or ask us to delete it. You can also withdraw your consent at any time, for example by turning off a feature or deleting your account. Email support@rightcard.ai. We answer within 30 days, and it's free.

If you live in Canada

• The person in charge of protecting personal information at RightCard is its founder, our Privacy Officer. You can reach them at support@rightcard.ai.
• Location features are off until you turn them on, in the app or in iOS Settings. RightCard doesn't build a profile of you.
• If a breach of your data puts you at risk of serious harm, we'll tell you, the Commission d'accès à l'information du Québec and the Office of the Privacy Commissioner of Canada.
• Syncing your cards' offers (such as Amex Offers) works with US cards only for now. If you use RightCard with Canadian cards, offers the Safari extension reads wait on your phone and aren't sent to RightCard. They're sent only if you switch the app back to US cards.
• If you have a complaint, please write to us first. You can also contact the Office of the Privacy Commissioner of Canada, or in Quebec the Commission d'accès à l'information.

How we handle your information

RightCard is run by one person, its founder, who is the Privacy Officer and the only person at RightCard with access to your data. RightCard keeps a written record of what we hold, how long we keep it and how we delete it, and we review it every year. If you complain, the Privacy Officer answers in writing within 30 days, says what was done, and tells you how to reach the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada if you're not satisfied. RightCard doesn't make decisions about you. Its answers are suggestions you can ignore.

Children's privacy

RightCard is not intended for anyone under 18. We do not knowingly collect personal information from children.

Changes to this policy

If we change this policy, we will update the effective date and publish the updated version at this same URL.

Contact