Privacy Policy

Tivna is a private wallet for loyalty, club and discount cards, operated by Radek Coural ("we"). This policy covers both the iOS and the Android app. The app is designed so that your data stays yours: we run no server of our own and have no access to the contents of your cards.

The two apps differ in one respect that matters here — where your cards are kept — so that section is split by platform. Everything else applies to both.

Where your cards are stored

Card contents means the card names, barcodes, notes and folders you create.

Android

Card contents are stored only on your device, in the app's protected storage. There is no cloud sync and no account: the cards never leave the phone unless you export them yourself.

• Settings → Backup lets you export the library to a file of your choosing and import it again. Where that file goes, and who can read it, is entirely up to you.
• Android Auto Backup and device-to-device transfer are both switched off for this app, so the system does not copy your cards to Google Drive or to a new phone either.

iOS

Card contents are stored:

1. locally on your device (in the app's protected storage), and
2. in your private iCloud database (Apple CloudKit) when you are signed in to iCloud.

Only your Apple account can access your private iCloud database. Neither we nor any third party can see, collect or transfer the contents of your cards. Synchronization is provided by Apple under Apple's privacy terms.

Camera and photos

Camera and photo access is used solely to digitize a card — photographing it, scanning its code, or importing a picture you pick. Images are processed only on your device to recognize the code, and are discarded as soon as recognition finishes: the app neither stores them permanently nor uploads them anywhere.

On Android the app asks only for camera permission. Pictures are chosen through the system photo picker, so the app never gets access to your wider photo library.

Advertising (Google AdMob)

The app shows a single ad placement served by Google AdMob. For this purpose Google may process data such as coarse location derived from the IP address, device and account identifiers, ad interaction data and diagnostics, and may share it for advertising, analytics and fraud prevention. On Android the identifier is the Android advertising ID (and the app set ID); on iOS it is the IDFA, and only if you granted permission in the Allow Tracking dialog. See the Google Privacy Policy and How Google uses information from sites or apps that use our services.

• Before its first ad request, the app obtains the current consent status through Google UMP and presents any required form; you can change your choice in the app's Settings.
• An ad is requested only when Google UMP confirms that ads may be requested. Depending on your choice and local rules, Google may serve personalized, non-personalized, or limited ads.
• Ads can be removed permanently with the one-time "Remove Ads" purchase.

The contents of your cards are never shared with advertising services.

In-app purchases

The one-time "Remove Ads" purchase is processed entirely by the store you installed the app from — Google Play billing on Android, Apple StoreKit on iOS. We have no access to your payment details.

Ratings (Android)

The Android app may occasionally ask you to rate it. The prompt is shown by Google Play itself; if you leave a rating, it goes to Google Play under Google's terms. We are not told whether you were asked or what you answered.

What the app does not do

• No registration, no user accounts.
• No behavioral analytics collected for us.
• No selling or sharing of card contents.
• Not intended for payment cards, PINs, passwords or identity documents.

Deleting your data

You can delete all stored data at any time directly in the app (Settings → Delete all data). Imported photos are not retained.

• Android: the deletion removes everything the app holds on the device; there is no copy anywhere else to delete. Backup files you exported yourself are not touched — delete those wherever you put them.
• iOS: the deletion propagates to your private iCloud database as well. Any original files created by an older app version are removed automatically, and you can also remove the app's data in your iCloud settings.

Uninstalling the app removes its local data on both platforms.

Your rights (GDPR)

Since card contents remain under your control, you exercise most rights directly: you can view, edit and delete your data at any time. For data processed by Google for advertising purposes, the mechanisms described in Google's policy apply. You can withdraw consent to personalized ads at any time in the app's Settings ("Privacy options"), and reset or delete the advertising identifier in Android Settings → Privacy → Ads or, on iOS, in Settings → Privacy & Security → Tracking.

Changes

We may update this policy; the new version will be published on this page with its effective date.

Contact

Privacy questions: rcoural@gmail.com