Privacy Notice

What we collect

DIGI CardFolio collects information reasonably necessary to operate the platform and its related services.

Depending on how you use the service, this may include:

• Account details such as email address, sign-in provider, profile name, avatar, and account settings.
• Profile and public card content such as biography text, links, images, contact details, QR content, and public sharing settings.
• Retailer Reward and Retailer Campaign information such as company details, campaign setup, reward tiers, customer joins, stamps, redemptions, invite records, purchase or qualifying activity records, and campaign analytics.
• Wallet pass information used to create or update Apple Wallet and Google Wallet passes, including pass identifiers, campaign or reward metadata, status changes, and related device or platform delivery data.
• Habit Tracker information such as goal titles, schedules, dates, success levels, streak requirements, check-ins, optional notes, group members, invite statuses, progress visibility settings, and public habit-share data where sharing is enabled.
• Invitation and communication data such as invite email addresses, invitation messages, QR or DIGI Card lookup values, transactional email records, and customer support contact details.
• Security, moderation, and operational data such as IP address, device or browser information, logs, abuse reports, image checks, anti-fraud indicators, analytics events, link tracking, purchase logs, and promotion logs.
• Billing and subscription information processed through Stripe or similar payment processors.

How we use it

We use this information to provide, secure, improve, and support the service. This includes:

• Authenticating users and maintaining accounts, cards, campaigns, wallets, and habit trackers.
• Generating public card pages, reward-wallet views, campaign joins, habit share pages, QR experiences, and wallet passes.
• Sending transactional communications such as account messages, campaign invitations, habit invitations, reward notifications, support replies, and security notices.
• Processing subscriptions, purchases, retailer campaign administration, reward issuance, redemptions, pass updates, and feature entitlements.
• Measuring usage, troubleshooting errors, preventing fraud, enforcing platform rules, reviewing abuse, and protecting users, retailers, and the platform.
• Supporting features that rely on cameras or QR scanning, shared links, invite lookups, or public/shareable views.

Security tools: This site may use anti-abuse and security tools, including Google reCAPTCHA or similar services. Where used, those services are governed by the provider's own terms and privacy policies.

Sharing and visibility

Some information is visible only to the account owner or retailer operator, while other information may be visible to invited participants, campaign participants, customers, or the public depending on the selected settings.

• Public profiles, public card content, shared campaign links, shared wallet views, and shared Habit Tracker pages may be visible to anyone with the relevant URL or slug.
• Habit Tracker progress may be private or shared depending on the user's selected visibility setting.
• Group Habit Tracker members may see information needed to participate in the challenge, including participant identity and progress where sharing is enabled.
• Retailers and campaign operators may see customer or participant information needed to administer campaigns, validate redemptions, handle invitations, or prevent abuse.
• We may share information with service providers who help us host the platform, process payments, deliver emails, support wallet passes, analyse usage, or provide security and moderation services.
• We may disclose information where required by law, court order, regulatory request, or to protect the rights, safety, security, or property of users, retailers, or DIGI CardFolio.

Third-party wallets: Apple Wallet and Google Wallet are third-party services. If you add a pass to a device wallet, Apple or Google may process related wallet and device information under their own policies.

Retention and contact

We keep data for as long as reasonably necessary to operate the platform, provide support, maintain audit and fraud-prevention records, comply with legal obligations, and resolve disputes.

• Account, profile, campaign, reward, wallet, invite, and Habit Tracker records may remain for operational, billing, fraud, or legal reasons even after some content is no longer publicly visible.
• Logs and moderation records may be retained for security, troubleshooting, anti-abuse, and compliance purposes.
• Where a feature is deleted or closed, some backup, audit, or log copies may remain for a reasonable period.

Cross-border processing: Some providers or infrastructure used by DIGI CardFolio may process data outside your home jurisdiction.

Children: The service is not intended for children under 13.

Contact / data requests: For privacy, access, correction, deletion, or other legal requests, please use our Contact Us form.

Connected tools

Depending on the features you use, we may handle saved-card and contact information in Networking Folio; text, media, messages, Polls and responses in shared-content features; booking, invitation, attendance and check-in information; and analytics events needed to operate the relevant feature. Visibility depends on the settings, public link or QR code used. Where you add another person’s information, invite them or export their contact information, you are responsible for having the authority to do so and using it lawfully.