Privacy Policy

Data controller and contact

The data controller is Berkan Çalıkoğlu. Privacy questions may be sent to support@bcalikoglu.com.

Information stored on your device

Card numbers, expiry dates, cardholder names, bank names, card notes, IBAN details, favorites, and app preferences are stored only when you add them. The app does not require an account and does not send this information to the developer.

• Card PINs
• CVV/CVC values
• Online-banking passwords or usernames
• SMS or one-time verification codes

Encryption and security

Vault data is encrypted with AES-256-GCM in private app storage. The encryption key is protected by Android Keystore or iOS Keychain and is bound to your device. An enabled app lock or biometric authentication provides additional protection for sensitive actions.

Transfers and backups

Cards & IBANs does not connect to developer-operated servers and does not use advertising, analytics, tracking, or crash-reporting services. The Android app does not request internet permission and vault data is not backed up to the cloud automatically.

An optional backup is encrypted with a password you choose and is sent only to the location or share target you choose. The developer does not receive, store, or recover the backup or password.

Copying, sharing, and deletion

Copying or sharing an IBAN occurs only when you initiate it. Your data remains on your device until you delete it; deleting a record, vault, or the app removes associated local data.

Changes

If the app or its data practices change, this policy will be updated and the new date will be posted on this page.