Privacy Policy

Things we know about you:

• Your card lineup — Which credit and debit cards you carry. We only need the card type (e.g. "DBS Live Fresh"), not your actual card number. We literally cannot steal your money even if we wanted to. Which we don't. We're nice.
• Transaction data — Amounts and merchant categories you manually enter. Yes, we know you spent $47 at "Dining" last Tuesday. No, we will not judge your bubble tea habit. That's between you and your statement.
• Approximate location — Only if you say yes. We use it to show you nearby deals — not to track whether you actually went to the gym or just drove past it.
• Anonymous usage stats — Which screens you visit and buttons you tap, via PostHog. Think of it as us watching which aisles get the most foot traffic in a store. We can't see your face; we just see "someone looked at the rewards page 14 times today."
• Device info — Phone model, OS version, crash logs. Mostly so when something breaks, we can say "ah yes, the iPhone 12 on iOS 17.4 bug" instead of shrugging.

Things we absolutely do NOT collect:

• Recommend the best card to use — That's… the whole app. Your card and spend data powers the engine that tells you "use this card here, you absolute legend."
• Track your trapped rewards — We calculate rewards you could be earning but aren't, because your spending hasn't hit the minimum threshold yet. Someone has to deliver the bad news.
• Nudge you (gently) — Optional notifications about spending cycles, cap warnings, and signup bonuses about to expire. Think of us as that friend who actually reads the T&Cs.
• Make the app less buggy — Anonymised analytics help us figure out what's broken, slow, or confusing. We use this data to fix things, not to build a psychological profile of you.

Short answer: almost nobody.

• PostHog (analytics) — Gets anonymous usage data. Cannot identify you. Does not care about your bubble tea.
• Google Cloud Platform — Hosts our backend. Contractually obligated to protect your data and definitely not reading it for fun.
• Law enforcement — Only if legally required. If the police ask for your card reward optimisation history, something has gone very wrong and we have questions too.

Your data lives on your own device. Your cards, transactions, preferences, routing rules, and reward calculations all stay right there on your phone. There are no user accounts and no cloud sync — if you switch phones, you start fresh. We keep it this way on purpose: the best way to protect your data is to not have it in the first place.

The only thing that touches our servers (hosted on Google Cloud Platform in Singapore) is anonymised analytics and the merchant promotions feed. The analytics are truly anonymous — no user ID, no email, no way to trace events back to you. Even we couldn't figure out which data is yours if we tried.

We keep your data on your device for as long as you keep the app. If you decide SmarterWallet isn't for you (impossible, but theoretically), you can:

• Nuke it yourself — Settings → Reset Data. Wipes everything on your device — cards, transactions, preferences, cached rules, the lot. It's the digital equivalent of flipping the table.
• Uninstall the app — Since everything lives on your device, uninstalling removes it all. There's no account to close, no server to call, no breakup email to write. Clean and simple.

We use industry-standard encryption (TLS in transit, AES at rest), rate limiting, and access controls. Our analytics pipeline has an allowlist — we explicitly define every event and property we track, so rogue data can't sneak in even if a developer has a moment of weakness.

That said, no system is 100% bulletproof. If you suspect something fishy, contact us immediately at [email protected] and we'll look into it faster than you can say "3.33% cashback on eligible spend."

Yes, we ask for location permission. No, we're not tracking you. Here's the deal:

• Why — We cluster nearby merchant promotions so we can tell you "hey, there's 8% cashback at the café 60 metres away." That's it.
• How precise — Approximate. We use 60-metre clustering thresholds. We know you're near Orchard Road, not which fitting room you're in.
• Can you say no — Absolutely. The app works perfectly fine without it. You just won't get nearby deal alerts. The cashback calculator, card picker, and everything else work the same.
• How to revoke — Device settings → SmarterWallet → Location → Never. Done. We won't sulk.

SmarterWallet is not designed for children under 13. If your child is optimising credit card rewards before they can legally have a credit card, we're impressed but also concerned. Please contact us and we'll delete their data promptly.

Depending on where you live, you may have the right to:

• Access — Ask what data we have about you. Honest answer: just anonymous analytics we can't link to you.
• Delete — Settings → Reset Data wipes everything on your device. Since we don't store your personal data server-side, that's all there is.
• Object — Tell us to stop processing specific data. We'll listen.

To exercise any of these, email us at [email protected]. We respond faster than most banks process cashback.

We may update this policy from time to time. If we make significant changes, we'll post the updated version here with a new effective date. We won't bury the changes in 47 pages of legalese — if something meaningful changes, we'll tell you in plain English. Or at least plain Singlish.