CorpCard Privacy Policy

Last updated: 26 August 2026 Effective: 26 August 2026

The short version

CorpCard connects to your credit cards so it can show you your charges and ask you, once a day, which ones were for work.

• We never see or store your bank username or password. Those go directly to Plaid, our bank-connection provider. They never touch our servers or the app.
• We don't know your name or your email address. Signing in with Apple gives us an anonymous identifier and nothing else. We don't ask for the rest.
• We don't sell your data. Not to advertisers, not to data brokers, not to anyone, for any price.
• We can't move your money. Our access to your accounts is read-only.
• You can delete everything, at any time, from within the app.

The rest of this document is the detail behind those five sentences.

1. Who we are

CorpCard is operated by Easton Orbe, an independent developer based in New York, United States, trading as CorpCard.

Contact address: 45 West 10th Street, New York, NY

For any privacy question, or to exercise any right described here, contact easton.orbe@gmail.com. We aim to respond within 30 days, and will tell you if we need longer.

2. What we collect

2.1 Information you give us

We do not collect your name or email address. CorpCard uses Sign in with Apple and deliberately requests no name and no email. What we receive is an opaque identifier Apple generates for you, specific to this app, which is not usable to contact or identify you anywhere else.

Email addresses you send reports to are stored only on your device, so you don't retype finance@ every month. They are never transmitted to us.

2.2 Information from your bank, via Plaid

When you connect a card, Plaid Inc. retrieves data on your behalf and passes it to us. This includes:

• Transaction date, amount, merchant name and raw description
• The account name and last four digits of the card
• Whether a charge is pending or posted
• Plaid's own suggested category for the transaction

We request transactions and account identification only. We do not request, and cannot access, any ability to move funds.

We never receive your bank credentials. You enter them inside Plaid's own interface. They are transmitted directly to Plaid and are never seen by, stored by, or transmitted through CorpCard.

Your use of Plaid is also governed by Plaid's End User Privacy Policy, at https://plaid.com/legal/#end-user-privacy-policy. We encourage you to read it; it describes what Plaid does with your information independently of us.

2.3 Information collected automatically

Very little, and less than most apps of this kind:

We use no analytics. No Firebase, no Amplitude, no Mixpanel, no PostHog, no advertising SDK, no attribution SDK — none. Nothing in CorpCard tracks how you use it.

We use no third-party crash reporting. If a crash report reaches us, it is because you chose to share diagnostics with developers in your iOS settings, and it arrives through Apple, aggregated.

We collect no push notification token. The daily reminder is scheduled by your own device and delivered by it. No server is involved, and nothing about your reminder leaves your phone.

2.4 What we do not collect

• Bank usernames, passwords, PINs or security answers
• Your full card number
• Your name or email address
• Location data
• Your contacts, photos, calendar, or microphone
• Any biometric data — Face ID is handled entirely by your device, and we only ever receive a yes-or-no answer

3. What we do with it

We use your information only to:

1. Show you your charges and let you categorise them
2. Improve the app's category suggestions for you — this learning happens on your device, from your own history, and is not pooled with other users
3. Generate the CSV reports you export or email
4. Operate and support the service
5. Detect and prevent fraud and abuse
6. Comply with law

We do not use your financial data to build advertising profiles, we do not sell or rent it, and we do not share it with your employer.

We will never sell your personal information. If that ever changes we will notify you first and obtain consent where required — but our intention is that it does not change.

4. Who we share it with

We share personal information only with providers who process it on our behalf, under contract, and only as needed to run the service:

You may also share your own data deliberately — when you email a report to your manager or finance team, or export a CSV. That message goes from your own email account, to a recipient you choose. We don't send it for you, and we don't receive a copy.

We may disclose information if legally required (a subpoena, court order or similar), or to protect our rights or someone's safety. Where we are permitted to tell you, we will.

If CorpCard is ever sold, or moved into a company, your information may transfer with it. We will notify you before that happens and before any new policy applies to you.

5. Where it lives, and for how long

Data is stored on servers in the United States, operated by Render and Neon.

• Transactions and categorisations are kept while your account is open, so your year-to-date and life-to-date totals work.
• When you disconnect a card, we stop retrieving new data from it immediately and instruct Plaid to remove our access. Charges you already categorised stay in your history unless you delete them.
• When a connection goes unused for 45 days, we remove it automatically and instruct Plaid to revoke our access. Your history stays; you reconnect the card when you come back. We would rather drop a connection you aren't using than keep reading your bank indefinitely.
• When you delete your account, we delete your personal data within 30 days, and instruct Plaid to remove all connections. We may keep anonymised, non-identifying aggregate figures, and whatever records tax or accounting law requires us to retain.

You can delete individual charges at any time, or everything at once, from Settings.

6. Security

• Data is encrypted in transit (TLS) and at rest.
• Bank credentials never reach us, so they cannot leak from us.
• Plaid access tokens are held server-side and are never sent to the app.
• Your session token is held in the iOS Keychain, not in ordinary app storage.
• Access to production data is limited to people who need it. Today that is one person.

No system is perfectly secure, and we won't pretend otherwise. If a breach ever affects your personal information we will notify you and the relevant regulators as required by law, and tell you plainly what happened.

7. Your rights

Wherever you live, you can:

• See what we hold about you
• Correct anything wrong
• Delete your data
• Export it — the CSV export in the app does this without asking us
• Object to a use of it, or withdraw consent

If you're in California, the CCPA/CPRA gives you rights to know, delete, correct, and to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined. You may exercise your rights at easton.orbe@gmail.com, and we will not discriminate against you for doing so.

CorpCard is offered in the United States only. We do not currently offer the service in the European Union or the United Kingdom.

8. Children

CorpCard is not directed at anyone under 18 and we do not knowingly collect information from children. If we learn we have, we will delete it. Contact us at easton.orbe@gmail.com if you believe a child has given us information.

9. Changes

We will post any change here and update the date at the top. If a change materially affects how we handle your information, we will tell you in the app before it takes effect. Continuing to use CorpCard after that means you accept the updated policy.

10. Contact

Easton Orbe, trading as CorpCard 45 West 10th Street, New York, NY easton.orbe@gmail.com