Privacy Policy

Last updated: July 23, 2026

Itzol is built on a simple premise: your wallet is your business. The app has no account, no bank login, and no server that stores your cards. Everything you put into Itzol stays on your phone. This page explains what that means in practice — including two third-party services we plan to add, written in now so this policy doesn’t need re-review when they ship.

What we don’t collect

• No account. There is no sign-up, no email address, no password. You open the app and use it.
• No bank login. Itzol never asks for your bank or card-issuer credentials, and never connects to your bank.
• No card numbers. The app organizes your cards by the names and reward rules you give it — it doesn’t need, and never stores, card numbers, expiry dates, or security codes.
• No tracking. No advertising SDKs, no cross-app trackers, no analytics profiles of you.

What stays on your device

Everything the app stores lives in a local database (SQLite) on your phone:

• The cards you add — the names or nicknames you give them, the reward rules you enter, and their billing-cycle dates.
• Your plan entries and planned purchases.
• Your settings and preferences.

We can’t see this data. There is no Itzol server for it to sync to.

Notifications

Reminders — payment-due alerts, planned purchases — are local notifications scheduled on your device. They don’t pass through a server and work offline.

Backups and export

Export is always something you start. You choose to export your data as a JSON file, and you choose where it goes — iCloud Drive, the Files app, AirDrop, anywhere. Import works the same way in reverse. We never see the file.

This website

The Itzol website sets no cookies and runs no advertising trackers — which is why you don’t see a consent banner here. If we enable traffic measurement, it will be Vercel Web Analytics: cookieless and anonymous.

Planned services

The following services are planned but not yet active. Their sections are written now so this policy doesn’t need re-review when they ship. We’ll update this page — and the date above — when they go live.

Crash reporting (Sentry) — planned

When enabled, Itzol will use Sentry to send us crash reports so we can fix bugs. Reports are scrubbed of personal information before leaving your device: they contain the error itself, your device model, and OS version — never your cards, reward rules, plan data, name, or location.

Purchases (RevenueCat) — planned

When Itzol Pro launches, purchases will be processed by the App Store or Google Play, and RevenueCat will manage your entitlement status. RevenueCat receives an anonymous app-user ID and your purchase receipts. It does not receive your card data (there is none to receive), your name, or your email address.

Data retention and deletion

Because your data never leaves your device, deleting the app deletes it — that’s the whole story. Export files you create are yours to keep or delete. When Sentry ships, crash reports will be retained for up to 90 days. Purchase records are retained by the stores per their own policies.

Children’s privacy

Itzol is not directed at children under 13, and we do not knowingly collect personal information from children — we collect almost nothing from anyone.

Changes to this policy

If our data practices change, we’ll update this page and the date above. Material changes will be called out in the app’s release notes.

Contact

Questions about privacy? Email support@itzol.app.