Kardz is a Pakistan-focused bank-card discount finder. We help you match publicly available offers to card products you select. Kardz is an information service, not a bank or payment processor.
The important bit
We do not ask for or store your card number, CVV, PIN, expiry date, or bank-login credentials. Adding a card means selecting a card product, such as “HBL Platinum,” not entering payment credentials.
Information we collect
- Account information, including your Firebase user ID, email address, display name, sign-in provider, and account creation date.
- Your selected city and card-product library.
- Offers you save and savings activity recorded in Bachat.
- Notification and deal-category preferences you set in Profile.
- Product analytics events sent to PostHog when you sign up, add a card, run a search, open a venue, save an offer, or share an offer. These carry public identifiers and counts only — for example an offer ID, a card-product ID, the number of characters in a search and the number of results. They never carry your email, display name, or the text you typed. PostHog also records basic device and technical information.
- Crash and error diagnostics sent to Firebase Crashlytics in production builds, including stack traces, device model, OS version, and an installation identifier.
- A Firebase Cloud Messaging push token and its platform, stored on our servers so we can deliver the notifications you have enabled. You can turn individual notification types off in Profile → Notifications, and revoke the OS permission at any time.
- Your approximate location, only while you are using Near Me. When you grant location permission and open Near Me, the app reads your device’s current latitude and longitude in the foreground and sends them to our API to find venues within your chosen radius. We use the coordinates to answer that request and do not store them in our database or write them to our production logs. Kardz does not use background or continuous location tracking.
How we use information
- Match and rank offers for the card products you select.
- Show deals relevant to your city and chosen deal categories.
- Save offers and calculate your Bachat history.
- Find nearby venues while you are using Near Me.
- Send only the notification types you have enabled, and stop sending the ones you turn off.
- Diagnose crashes and fix defects.
- Secure, operate, measure, and improve the service.
We do not sell your personal information.
Services that process information
Kardz uses Firebase for authentication, Firebase Cloud Messaging for push notifications, Firebase Crashlytics for crash diagnostics, PostHog for product analytics, Google Maps and Places for venue locations, and infrastructure hosted on a secured VPS for the API and database. Apple or Google may process sign-in information when you choose their sign-in options. These providers process information under their own terms and privacy commitments.
Offer data
Discount information is collected from banks’ and issuers’ publicly available sources under permissions obtained by Kardz. This collection does not involve your personal information.
Retention and deletion
We retain account information while your account is active. Crash diagnostics and product-analytics events are retained by Crashlytics and PostHog under those providers’ own retention schedules, and are not linked to your Kardz profile once your account is deleted. Near Me coordinates are used to answer a single request and are not retained.
You can permanently delete your account from Profile → Delete account. This removes your Kardz profile and associated cards, saved offers, Bachat events, notification preferences, and push-token records, then deletes your authentication identity. If you cannot reach the in-app control, email us at developer@aptivmind.com from your account email address and we will delete it for you. Limited copies may remain temporarily in secured operational backups before normal rotation.
Your choices
You can decline optional permissions, choose which notification types you receive and which deal categories you see in Profile, remove saved offers, sign out, or delete your account in the app. For access, correction, or another privacy request, email developer@aptivmind.com.
Children
Kardz is not directed to children under 13. If you believe a child has provided personal information, contact us so we can remove it.
Changes
We may update this policy as Kardz changes. The date above identifies the latest version. See our Terms of Service.