Privacy Policy

Overview

CardVenture (“we”, “our”, “us”) creates AI-personalized gift experiences. This Privacy Policy covers the CardVenture iOS app and the CardVenture platform for Shopify merchants. It explains what we collect, how we use it, who we share it with, and how you can delete it.

1. The CardVenture iOS App

Information you provide

• Account information: your name, email address and/or phone number, used to create your account, sign you in, and deliver your experiences.
• Content you create: photos, voice recordings, written messages, and memories you choose to add while creating a gift experience.
• Recipient details: the name and email address or phone number of the person you choose to send a gift to. If you use the contact picker, we receive only the contact you select — we never upload your address book.
• Purchases: coin purchases are processed by Apple. We receive purchase confirmations to credit your account; we never see your payment card details.

Information collected automatically

• Usage and diagnostics: anonymous product interaction events, crash reports, and performance data (via Firebase Analytics and Crashlytics). This data is not linked to your identity and is not used for advertising or cross-app tracking.
• Delivery confirmations: when a recipient opens an experience, we record that it was opened so you know your gift arrived.

2. AI Processing

CardVenture's experiences are generated using pre-trained artificial intelligence models operated by third-party providers — Google Cloud (Vertex AI, including the Gemini and Lyria model families) and fal.ai. We do not train our own machine-learning models. The details you provide for a gift (names, messages, memories, photos, voice recordings) are sent to these providers solely to generate the storybook, song, or card you requested, under API terms that prohibit the providers from using your content to train their models. Generated experiences are stored so your recipient can view and replay their gift.

3. Photos, Voice Recordings, and Face Data

CardVenture does not collect, store, or process face data. The app performs no facial recognition, face detection, or biometric analysis of any kind, and does not use Face ID or any other biometric authentication. Photos you choose to upload are used solely as artistic reference to generate stylized illustrations for your gift experience; they are never analyzed to extract facial geometry, faceprints, or any biometric identifier, and are never used to identify any person. Uploaded photos and voice recordings are stored encrypted on our servers (Cloudflare R2) only in connection with the gift experiences they belong to, and are permanently deleted when you delete the associated draft or experience, or when you delete your account.

4. Data Retention & Deletion (iOS App)

Your account data and unsent drafts are retained while your account is active. You can permanently delete your account at any time in the app under Account → Delete Account. Deletion removes your personal information (name, email, phone number), your unsent drafts, and your uploaded media. Experiences you have already sent remain available to their recipients, as disclosed at the time of deletion. You can also request deletion by emailing us at the address below.

5. Data Sharing

We share data only with service providers that operate CardVenture, and only for processing on our behalf: Google Cloud and fal.ai (AI generation), Brevo (email and SMS delivery), Apple (in-app purchases and push notifications), Cloudflare (hosting and storage), Neon (database), and Google Firebase (anonymous analytics and crash reporting). We do not sell personal information, we do not share it for advertising, and we do not track you across other companies' apps or websites.

6. Children

CardVenture is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

7. CardVenture for Shopify Merchants

From Merchants: store domain, brand settings (name, logo, colors), delivery preferences, and Shopify access tokens required to manage gift card products.

From Gift Card Purchasers: recipient name, email or phone number, custom greeting messages, and delivery preferences — all provided voluntarily during checkout.

From Gift Card Recipients: interaction data (experience opened, completed, skipped), device information, and IP address for delivery confirmation.

Merchant gift card data is retained for the lifetime of the merchant's subscription. When a merchant uninstalls CardVenture, we soft-delete personal information (names, emails, phone numbers, messages) within 48 hours while preserving anonymized financial records for accounting integrity.

8. Security

All data is transmitted over HTTPS. Media and gift data are stored encrypted at rest. Our infrastructure runs on Cloudflare Workers with industry-standard security practices, and access to production systems is restricted and audited.

9. Your Rights & Contact

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data. Use the in-app deletion described above, or contact us at hello@cardventure.app and we will respond within 30 days.