Privacy policy | CardFit

What CardFit uses

Manual entry uses monthly spending totals and your card preferences. Guests can save cards and manual spending in this browser without an account. These saves do not sync across devices. Login is required only for Plaid; signed-in users can save their profile and cards to their account. Clerk handles sign-in. Our hosting and database providers process data needed to run the service.

Optional bank connections

Bank linking is not offered yet. This section explains how it will work if we turn it on. Manual entry never requires it.

With your consent, Plaid supplies selected account details and transaction history. Bank sign-in takes place through Plaid or your bank. CardFit does not receive your bank password or move money.

We keep up to six months of needed transaction details, encrypted in storage, while connected. We use three full months to estimate monthly spending. You review the accounts and categories before applying totals.

Card alerts

If you sign in and ask for alerts, we use your verified account email, saved monthly spending totals, and the saved card you choose as your current card. We send a confirmation email before checks start. We check about once a month and send an email only when a current issuer estimate clears our checks. Both cards need a current issuer check. Resend processes your email address and the message. We do not send raw bank transactions. You can stop alerts in Account settings or from each alert email. Deleting your account removes your alert settings.

Card recommendations

When you request matches or comparisons, Koko Finance receives your category totals, preferences, and selected card names. It does not receive raw transactions, bank tokens, or your CardFit sign-in details.

Removal and retention

Disconnecting clears bank details and imported spending. If provider removal fails, we temporarily retain the encrypted connection token and removal status to finish the request. We retain minimal usage and billing records without transaction details. We also keep service records for 30 days to find and fix problems: which screens and features were used, whether they worked, and how long they took. A random ID kept for the current browser tab links one visit’s records, and signed-in records carry a coded account reference that is deleted with your account. They do not include your spending, card choices, or bank data. Hosting backups follow the provider’s retention schedule. We may also keep protected, encrypted recovery copies outside the live service. Contact support about removal from retained recovery copies.

Delete your account in Account settings to remove your saved profile and cards and end bank access. If removal needs another attempt, the page shows a pending state.

Cookies and contact

We use browser storage to keep guest spending and saved cards until you clear them in Account settings or clear browser data. On shared devices, others using the same browser can see these saves. If you sign in, Clerk uses cookies to keep you signed in. We do not run advertising analytics. Provider security logs may include request metadata.