Card Cubbie

Card Cubbie Privacy Policy

Effective date: July 4, 2026
Company: Arch Harbour LLC d/b/a Card Cubbie, a Florida limited liability company
Contact: support@cardcubbie.com

1. Overview

This Privacy Policy explains how Arch Harbour LLC d/b/a Card Cubbie (“Card Cubbie,” “we,” “us,” or “our”) collects, uses, shares, retains, and protects information when you use the Card Cubbie mobile application, websites, software, subscriptions, wallet features, reminders, sponsored offers, shared wallet features, and related services (collectively, the “Service”).

Card Cubbie helps users organize physical and digital gift cards in a digital wallet, create Cubbie wallets, use shared wallet features, receive reminders, and access related features.

This Privacy Policy applies globally, but some rights and disclosures apply only to users in particular countries, states, provinces, or regions.

2. Controller / responsible entity

For purposes of applicable privacy laws, the responsible entity is:

Arch Harbour LLC d/b/a Card Cubbie
privacy@cardcubbie.com

3. Information we collect

We collect information in several ways: information you provide, information created when you use the Service, information from your device, information from app stores and service providers, and information generated through wallet sharing or reminders.

3.1 Account information

We may collect:

  • name;
  • email address;
  • password hash or authentication credential information;
  • account ID;
  • login method;
  • profile preferences;
  • country, region, city, ZIP/postal code, or other location information you provide;
  • communication preferences;
  • privacy choices and consent records.

3.2 Gift card and wallet information

When you add gift cards or wallets, we may collect information such as:

  • retailer, restaurant, merchant, or company name;
  • merchant category or company category;
  • gift card name, nickname, or description;
  • gift card number;
  • PIN or access code;
  • barcode, QR code, or other redemption code;
  • card image, screenshot, or uploaded photo;
  • card balance, if you enter or obtain it through supported features;
  • expiration date or reminder date, if applicable;
  • purchase or receipt notes you add;
  • wallet names;
  • wallet organization preferences;
  • shared wallet roles, members, permissions, invitations, and activity.

Gift card numbers, PINs, barcodes, card images, and similar redemption data may have monetary value. We treat this information as high-risk wallet information.

3.3 Shared wallet information

If you use shared wallets, including the primary Family Cubbie wallet, we may collect:

  • invitee email addresses or identifiers;
  • membership status;
  • roles and permissions;
  • wallet activity;
  • card additions, edits, moves, deletions, or other shared wallet actions;
  • information visible to other shared wallet members based on permissions.

When you invite someone to a shared wallet, that person may see information you choose to share.

3.4 Subscription and purchase information

If you purchase Card Cubbie Plus, we may receive subscription status and purchase metadata from Apple, Google, RevenueCat, or another authorized provider, such as:

  • product ID;
  • entitlement status;
  • subscription start/end dates;
  • renewal status;
  • billing retry or grace period status;
  • transaction identifiers;
  • app store account region;
  • RevenueCat app user ID or customer identifiers.

We do not receive your full payment card number from Apple or Google for in-app subscription purchases.

3.5 Device, app, analytics, and log information

We may collect:

  • device type, operating system, app version, language, country, and time zone;
  • IP address;
  • approximate location inferred from IP address;
  • device identifiers or app instance identifiers;
  • app interactions, screens viewed, buttons tapped, feature usage, and session data;
  • crash logs, diagnostics, performance data, and error reports;
  • security logs, fraud-prevention logs, and audit records.

3.6 Notifications and reminders

If you enable reminders or push notifications, we may collect:

  • push notification token;
  • reminder preferences;
  • reminder schedule;
  • reminder interactions;
  • notification delivery and engagement data.

3.7 Location information

We may collect location information if you choose to provide it or enable location-based features.

Depending on your settings and the feature used, location information may include:

  • country, state, city, ZIP/postal code, or other coarse location;
  • precise device location, only if enabled through your device permissions.

You can disable location permissions through your device settings.

For free users, we may collect information about sponsored offer and affiliate interactions, such as:

  • offer impressions;
  • offer clicks;
  • offer dismissals;
  • retailer/category match that caused an offer to appear;
  • affiliate campaign IDs;
  • destination URL metadata;
  • general app context where the offer was shown.

We do not use gift card numbers, PINs, barcodes, or full card images to target sponsored offers.

3.9 AI Smart Reminder information

If you use AI-enabled Smart Reminders, we may process limited wallet context to generate reminder suggestions, such as:

  • retailer name;
  • merchant category;
  • balance or balance range;
  • gift card age;
  • expiration or reminder dates;
  • prior reminder interactions;
  • coarse location if you enabled relevant location-based features.

We do not intend to send gift card numbers, PINs, barcodes, card images, passwords, or authentication tokens to AI providers for Smart Reminders.

3.10 Information from third parties

We may receive information from:

  • app stores;
  • RevenueCat or subscription management providers;
  • authentication providers;
  • cloud hosting providers;
  • analytics and crash reporting providers;
  • customer support tools;
  • affiliate networks;
  • merchants or offer partners when you interact with offers;
  • other users who invite you to a shared wallet.

4. Third-party marketing and tracking setting

Card Cubbie includes a privacy setting for potential future third-party marketing or tracking features.

As of the effective date of this Privacy Policy:

  • third-party marketing/tracking is off by default;
  • we do not ask users to enable third-party marketing/tracking during signup;
  • this setting is a placeholder for potential future use;
  • we do not sell or share personal information with data brokers through this placeholder setting;
  • if we later activate third-party marketing, cross-context behavioral advertising, data broker sharing, or similar tracking, we will provide additional notice and obtain any consent required by law and platform rules before doing so.

We do not use gift card numbers, PINs, barcodes, full card images, or authentication credentials for third-party marketing.

5. How we use information

We use information to:

  • provide, operate, maintain, secure, and improve the Service;
  • create and manage accounts;
  • store, sync, organize, display, and back up gift card and wallet information;
  • provide shared wallet and household control features;
  • process subscriptions and manage Card Cubbie Plus entitlements;
  • provide reminders, notifications, and AI-enabled Smart Reminders;
  • personalize the in-app experience;
  • show first-party contextual sponsored offers to free users;
  • measure sponsored offer impressions and clicks;
  • provide customer support;
  • troubleshoot, debug, and improve app performance;
  • detect, investigate, and prevent fraud, abuse, security incidents, and policy violations;
  • comply with legal obligations, app store rules, tax/accounting obligations, and enforce our Terms;
  • communicate with you about service, account, subscription, security, legal, and support matters;
  • send marketing messages where permitted and where you have not opted out.

If you are in the European Economic Area, United Kingdom, Switzerland, Brazil, or another jurisdiction that requires a legal basis for processing, our legal bases may include:

  • Contract: to provide the Service, manage your account, store wallet data, provide subscriptions, and support shared wallet features.
  • Consent: for optional features such as certain marketing communications, location-based features, certain AI-enabled features, or future third-party marketing/tracking where required.
  • Legitimate interests: to secure, maintain, improve, and analyze the Service; prevent fraud; provide first-party contextual offers; and understand feature performance, where those interests are not overridden by your rights.
  • Legal obligation: to comply with laws, tax/accounting rules, app store obligations, lawful requests, and regulatory requirements.
  • Vital interests or public interest: only where applicable and legally permitted.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that occurred before withdrawal.

7. How we share information

We may share information as described below.

7.1 Service providers

We may share information with vendors and service providers that process information on our behalf, such as:

  • cloud hosting and database providers;
  • authentication providers;
  • subscription management providers such as RevenueCat;
  • Apple App Store and Google Play for purchases and subscription management;
  • analytics and crash reporting providers;
  • customer support providers;
  • email and notification providers;
  • AI service providers for AI Smart Reminders;
  • security, fraud prevention, and debugging providers;
  • professional advisors such as lawyers, accountants, and auditors.

Service providers are authorized to process information only as necessary to provide services to us or as otherwise permitted by law.

7.2 Shared wallet members

If you use shared wallets, information in the shared wallet may be visible to other members based on their permissions. You control whom you invite and what permissions you assign, subject to available features.

7.3 App stores and subscription providers

If you purchase Card Cubbie Plus, Apple, Google, RevenueCat, or another provider may process purchase and subscription information to complete transactions, verify entitlement, manage renewals, handle refunds, and provide subscription support.

If you click a sponsored or affiliate offer, we or our partners may receive information needed to route the offer, attribute the click, measure conversion, prevent fraud, and pay commissions.

Information shared in this context may include affiliate campaign IDs, click IDs, device/app metadata, approximate location, and destination URL data. We do not share gift card numbers, PINs, barcodes, or full card images with sponsored offer or affiliate partners for ad targeting.

We may disclose information if we believe disclosure is reasonably necessary to:

  • comply with law, regulation, legal process, or governmental request;
  • enforce our Terms or other agreements;
  • detect, prevent, or address fraud, security, abuse, or technical issues;
  • protect the rights, property, or safety of Card Cubbie, users, merchants, app stores, service providers, or others.

7.6 Business transfers

We may share or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction. If required by law, we will provide notice or obtain consent.

7.7 Aggregated or de-identified information

We may use and share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. For example, we may publish or share insights about gift card categories, redemption reminder trends, or general wallet usage.

We will not attempt to re-identify de-identified information except as permitted by law, such as to test whether our de-identification processes work.

8. Selling or sharing personal information

As of the effective date of this Privacy Policy, Card Cubbie does not sell personal information or share personal information for cross-context behavioral advertising through third-party marketing/tracking features.

We may display first-party contextual sponsored offers to free users based on retailer or category information in their wallets. We do not use gift card numbers, PINs, barcodes, or full card images for advertising.

If we later sell personal information, share personal information for cross-context behavioral advertising, work with data brokers, or activate third-party marketing/tracking, we will update this Privacy Policy, provide required notices, and provide required opt-out or consent mechanisms.

9. Your choices and controls

You may have the following controls, depending on your location and app version:

  • access, update, or delete account information;
  • add, edit, move, or delete gift cards;
  • create, rename, manage, or delete wallets;
  • manage shared wallet members and permissions;
  • disable push notifications through device settings;
  • disable location permissions through device settings;
  • manage reminder settings;
  • manage marketing email preferences;
  • manage privacy preferences in Settings;
  • request account deletion;
  • request access, correction, deletion, restriction, portability, or objection where applicable;
  • opt out of sale/share if applicable in the future.

Deleting the app from your device does not necessarily delete your account or server-stored data. Use the in-app deletion flow if available or contact us to request deletion.

10. Data retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, and support business operations.

General retention approach:

  • active account information: retained while your account is active;
  • accounts submitted through the in-app deletion flow: access is deactivated immediately, account and owned wallet data is retained for exactly seven years, and eligible personal and owned data is then permanently purged;
  • shared wallet activity and transaction or audit facts: retained as needed to preserve shared records, with the deleted account’s identity link removed at the end of the seven-year period;
  • subscription records: retained as needed for entitlement, accounting, tax, fraud prevention, chargeback, and legal purposes;
  • analytics and logs: retained for a limited period appropriate to the purpose;
  • consent records: retained as needed to demonstrate compliance;
  • backup copies: may persist for a limited time before being overwritten or deleted.

When we delete information, we may delete, anonymize, or de-identify it unless retention is required or permitted by law.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These may include encryption in transit, encryption at rest for sensitive wallet data, access controls, logging, monitoring, and vendor review.

No system is perfectly secure. You are responsible for protecting your device, account credentials, and access to shared wallets.

Because gift card numbers, PINs, barcodes, and card images may have monetary value, you should treat access to your Card Cubbie account like access to a financial or payment-related account.

12. International transfers

Card Cubbie is based in the United States. We and our service providers may process information in the United States and other countries where privacy laws may differ from those in your location.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, standard contractual clauses, adequacy mechanisms, or other legally recognized transfer mechanisms.

13. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without legally required parental consent.

If you believe a child under 13 has provided personal information to us, contact us so we can take appropriate action.

Users under the age of majority should use the Service only with the involvement and consent of a parent or legal guardian.

14. U.S. state privacy notices

This section applies to residents of California and other U.S. states with consumer privacy laws, to the extent those laws apply to Card Cubbie.

14.1 Categories of personal information we may collect

Depending on how you use the Service, we may collect:

  • identifiers, such as name, email address, account ID, device identifiers, and IP address;
  • customer records information, such as account details and subscription records;
  • commercial information, such as subscription status, offer interactions, and gift card retailer/category information;
  • internet or electronic network activity, such as app interactions, logs, diagnostics, and analytics;
  • geolocation data, such as approximate location and precise location if enabled;
  • audio, electronic, visual, or similar information, such as uploaded gift card images or screenshots;
  • inferences, such as reminder preferences or offer relevance based on retailer/category;
  • sensitive personal information, such as account credentials, precise location if enabled, and gift card redemption data like card numbers or PINs.

14.2 Purposes

We collect and use these categories for the purposes described in “How we use information,” including service delivery, account management, wallet functionality, subscriptions, reminders, security, analytics, customer support, legal compliance, and first-party contextual sponsored offers.

14.3 Disclosure

We may disclose categories of personal information to the categories of recipients described in “How we share information,” including service providers, app stores, subscription providers, shared wallet members, affiliate partners when you click offers, legal/compliance recipients, and business transfer recipients.

14.4 Sale/share

As of the effective date of this Privacy Policy, we do not sell personal information or share personal information for cross-context behavioral advertising through third-party marketing/tracking features.

If this changes, we will provide required opt-out mechanisms.

14.5 Sensitive personal information

We do not use or disclose sensitive personal information for purposes that would require a right to limit under California law unless we provide the required notice and choice.

14.6 Your U.S. state privacy rights

Depending on your state, you may have rights to:

  • know/access personal information;
  • receive a portable copy of personal information;
  • correct inaccurate personal information;
  • delete personal information;
  • opt out of sale, sharing, or targeted advertising;
  • limit certain uses of sensitive personal information;
  • appeal a denied privacy request;
  • not be discriminated against for exercising privacy rights.

To exercise rights, contact us at privacy@cardcubbie.com or use in-app privacy controls where available. We may need to verify your identity before fulfilling a request.

15. European Economic Area, United Kingdom, and Switzerland privacy rights

If you are in the EEA, UK, or Switzerland, you may have rights to:

  • access your personal data;
  • correct inaccurate or incomplete personal data;
  • delete personal data;
  • restrict processing;
  • object to processing;
  • receive a portable copy of personal data;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with a data protection authority.

You may exercise these rights by contacting us at privacy@cardcubbie.com or through in-app controls where available.

You also have the right to complain to your local data protection authority. We encourage you to contact us first so we can try to resolve your concern.

16. Brazil, Canada, Australia, and other regions

Depending on where you live, you may have additional privacy rights under local law, such as access, correction, deletion, portability, consent withdrawal, complaint, or objection rights.

We will respond to requests as required by applicable law.

17. Automated decision-making and profiling

Card Cubbie may use limited automated processing to provide reminders, organize wallets, suggest AI Smart Reminders, detect fraud/security issues, and show first-party contextual sponsored offers to free users.

We do not intend to use automated decision-making that produces legal or similarly significant effects about you without appropriate notice and rights required by law.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the app, by email, or by other reasonable means.

The updated Privacy Policy will be effective when posted or as stated in the notice. Your continued use of the Service after the updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

19. Contact us

For questions or privacy requests, contact:

Arch Harbour LLC d/b/a Card Cubbie
support@cardcubbie.com