Your privacy.
In plain language.

What we don’t collect

Points Points! helps you compare rewards and understand benefits. Your selected credit card products, loyalty preferences, and personalized reward calculations are handled on your device. You do not need a Points Points! account, bank login, card number, CVV, expiration date, or transaction-history connection.

We don’t collect your name, email address, mailing address, payment credentials, or personal wallet and rewards data. Your card selections, loyalty balances, goals, and personalized reward calculations stay on your device. No Points Points! account or bank connection is required. We never sell your data because we don’t have your data.

This notice distinguishes the website from the app and its optional services.

This website

This website includes no tracking analytics, advertising scripts, tracking cookies, account registration, or sign-up forms.

Fonts, scripts, and images are served with the site. If the site is hosted on GitHub Pages, GitHub logs and stores visitor IP addresses for security purposes. Hosting is governed by GitHub’s hosting disclosure and privacy statement.

Your local app profile

The app stores selected card products, programs, statuses, memberships, goals, benefit selections, personal valuations, and other preferences locally. These are selections and information you enter, not a connection to a financial account. Points Points! does not operate a server containing your wallet or financial profile.

Relevant local information can be shared with the app’s widgets and extensions through on-device storage. iOS backup and device settings may affect retention. Widgets and notification previews may be visible to anyone who can see your screen.

Optional permissions & Apple services

If you allow location access, the app can use it for nearby recommendations. Location and map features may send Apple the information needed to provide those services. Location permissions and notification previews are controlled in iOS Settings.

Depending on support and availability, optional Apple Intelligence features may use an on-device model or Apple’s Private Cloud Compute. A service-assisted request can include your question and relevant context. System dictation is subject to Apple’s settings. See Apple’s privacy information.

If you enable the Safari extension, permitted page context can help identify a recommendation. Supported optional checkout context may include a purchase amount. The extension does not collect payment credentials; you control its website access through Safari settings.

App usage analytics

For a dedicated walkthrough of the events, excluded information, and your controls, read App Analytics Details.

The app includes a limited usage-analytics setting. For the US-launch configuration, it is enabled by default for new installations without an existing choice. Saved opt-outs are preserved. You can turn off Share limited usage analytics during setup or in Wallet → Privacy & Data. The core recommendations work without it.

When enabled and configured, PostHog US Cloud receives app foreground activations and deliberate external merchant or official card-link taps. These events use public merchant, issuer, or product identifiers, plus a schema version. SDK metadata can include timestamps, a random installation identifier, a session identifier, and limited app/device information. This is pseudonymous information, rather than fully anonymous information.

These analytics exclude your wallet contents, owned-card selections, loyalty balances, goals, benefit usage, financial calculations, location, searches, assistant questions, and raw outbound URLs. The integration disables session replay, automatic screen capture, advertising identifiers, and identity merging. Network providers still receive ordinary connection information, including IP addresses.

Turning analytics off stops new transmission and clears pending local analytics captures. It does not delete previously delivered events. See PostHog’s privacy information.

No personal-data collection or sales. Independent recommendations.

We don’t collect your identity, contact, or personal wallet and rewards data. We do not sell user data to advertisers, affiliate networks, or partners.

We plan to earn money through referrals using affiliate networks and partnerships. If you choose a qualifying partner link, we may earn a commission. Affiliate compensation and partnerships never influence which cards we recommend or how we rank them.

Following a referral link takes you to an external service. Affiliate networks or partners may use referral identifiers, cookies, or connection information under their own privacy policies to attribute a referral. Your local wallet profile and personalized reward calculations are not provided to them as part of a referral.

The no-collection commitment above covers your identity, contact details, payment credentials, and personal wallet and rewards data. Limited app analytics can still send pseudonymous usage and installation information, and hosting and optional third-party services can receive connection information such as IP addresses. Those practices and their controls are described above.

External links

Opening an App Store, merchant, issuer, or other external link takes you to a service with its own data practices. Public rules and artwork requests can expose ordinary connection information to their hosting providers.

Your controls

You can manage optional permissions through iOS Settings and use Wallet → Privacy & Data to manage analytics or delete your local Points Points! profile. Local deletion does not revoke iOS permissions, remove device backups, or delete information held by third-party services.

Updates to this notice

This notice should reflect the app version and services actually offered. We will update it as practices change. The date above identifies this version.