Privacy Policy.
1. Overview
CardFlow is developed and operated by CHAN HO FUNG, a sole proprietor based in Hong Kong. This Privacy Policy explains what information is processed when you use the CardFlow app, purchase or activate a licence, visit our website, or contact support.
CardFlow is designed to minimise data collection. Your photos and videos remain on the storage locations you choose and are not uploaded to us.
2. Data the app does not collect
The CardFlow app contains no advertising identifiers, behavioural tracking, or third-party analytics. It does not upload the media you offload. File contents, camera media, and local offload activity remain on your Mac unless you choose to share an exported report or support information.
3. Information we process
Purchases and licence delivery: Purchases are processed by Paddle. We receive the email address, transaction details, and licence information needed to issue your licence and provide purchase support. We do not receive your full payment-card details.
Licence activation: When you activate CardFlow, the app sends a licence identifier and a pseudonymous device identifier to our licensing service. This information is used only to validate the licence and enforce the activation limit for the tier you purchased.
Support: If you contact us, we process the information contained in your message and any files you choose to provide so that we can respond and resolve the issue.
Updates: CardFlow periodically checks an HTTPS update feed. Routine offloading and verification take place locally on your Mac; update checks and licence activation require a network connection.
4. Service providers
We use the following service providers:
- Paddle acts as our merchant of record and handles checkout, payments, taxes, invoicing, and related transaction records.
- Cloudflare provides website delivery, security, and licensing infrastructure.
- Resend delivers transactional emails, including licence information.
These providers process information only as needed to deliver their services and do so under their own terms and privacy policies.
5. Data retention
Licence and activation records are retained for as long as reasonably necessary to provide, secure, and support your licence. Support correspondence is retained only for as long as it remains useful for customer service or record-keeping. Paddle may retain transaction records as required by law.
6. Your rights
Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal data. Send requests to [email protected]. Requests may be subject to legal or operational limitations. Deleting licence or activation records may prevent future activation or support of that licence.
7. Cookies
Our website does not use advertising or analytics cookies. Essential cookies may be set by Paddle during checkout or by Cloudflare for security and service delivery. Those cookies are governed by the relevant provider's policy.
8. Changes to this policy
We may update this Privacy Policy when our product, service providers, or legal obligations change. The effective date at the top of this page identifies the current version.
9. Contact
For privacy questions or requests, contact [email protected].