Privacy Policy

Last updated: August 26, 2026

Itzol is built on a simple premise: your wallet is your business. The app has no account, no bank login, and no server that stores your cards. Everything you put into Itzol stays on your phone. This page explains what that means in practice, including the two third-party services the app uses — crash reporting and purchase processing — and, separately, what this website does. The app and the website are not the same thing, and this page keeps them apart on purpose.

What we don’t collect

• No account. There is no sign-up, no email address, no password. You open the app and use it.
• No bank login. Itzol never asks for your bank or card-issuer credentials, and never connects to your bank.
• No card numbers. The app organizes your cards by the names and reward rules you give it — it doesn’t need, and never stores, card numbers, expiry dates, or security codes.
• No tracking in the app. The Itzol app contains no advertising SDKs, no cross-app trackers, and builds no analytics profile of you. (This website is a separate matter — see This website below.)

What stays on your device

Everything the app stores lives in a local database (SQLite) on your phone:

• The cards you add — the names or nicknames you give them, the reward rules you enter, and their billing-cycle dates.
• Your plan entries and planned purchases.
• Your settings and preferences.

We can’t see this data. There is no Itzol server for it to sync to.

Notifications

Reminders — payment-due alerts, planned purchases — are local notifications scheduled on your device. They don’t pass through a server and work offline.

Backups and export

Export is always something you start. You choose to export your data as a JSON file, and you choose where it goes — iCloud Drive, the Files app, AirDrop, anywhere. Import works the same way in reverse. We never see the file.

This website

This website — itzol.app — is where we advertise the app, and that means it is not as clean as the app itself. Here is exactly what runs on it.

Traffic measurement (Vercel Web Analytics). Cookieless and anonymous. It counts page views and visits in aggregate — it does not identify you, follow you across sites, or build a profile of you.

Advertising measurement (Google Ads). We run ads for Itzol, and this site carries Google’s advertising tag so we can tell which ads bring people here. The tag sets a cookie named _gcl_au in your browser, which lasts about 90 days, and it sends Google your page visit along with the usual details of any web request — your IP address, your browser, and the page you came from. Google may use this to measure our ad performance and to show you Itzol ads elsewhere. We do not send Google your name or email address, because we don’t have them, and nothing about your cards, rewards, or plans is on this website to send — that data lives only on your phone and never reaches us in the first place.

So yes, this site sets a cookie. It didn’t before, and we’re not going to bury the change. If you’d rather it didn’t:

• Google’s own Ads Settings let you turn off ad personalization across Google’s services.
• The Google Analytics opt-out add-on blocks Google’s tag at the browser level.
• Any tracker-blocking extension, Safari’s Intelligent Tracking Prevention, or a browser set to reject third-party cookies will stop it too. Nothing on this site breaks if you do — there is no gated content, no login, and no paywall here.

If you are in California, we do not sell or share your personal information in the sense the CCPA means it, and you can exercise the opt-out above or email us at support@itzol.app.

No consent banner — and here is the honest reason. The tag above loads for everyone who opens this page, not only for people who arrive by clicking an ad, so where we buy ads has no bearing on who gets the cookie. What we rely on instead is narrower: Itzol is a United States and Canada product, sold on those App Stores, and we do not market this site into the EEA or the UK. Before that changes — a store launch, a campaign, or an audience we deliberately go after somewhere that requires consent — this tag gets Google’s Consent Mode and a real consent gate first, and this page will say so before the change ships rather than after. If you are reading this from the EEA or the UK anyway, the opt-outs above work today, and blocking the tag costs you nothing here.

Third-party services

The app uses two, and only two. (The website’s Google Ads tag is described above and is not part of the app.)

Crash reporting (Sentry)

Itzol uses Sentry to send us crash reports so we can fix bugs. Reports are scrubbed on your device before they are sent: card nicknames, card last-4 digits, and currency amounts are replaced with placeholders, and no user identity is attached. Crash reports never contain your cards, your reward rules, your plan data, your name, or your email address.

What a crash report does contain:

• The error itself, and where in the app it happened.
• Device diagnostics: model, OS version, locale, screen size, battery and memory state.
• An approximate, city-level location. Sentry’s servers derive this from your network address when the report arrives. It happens after our own scrubbing runs, so we cannot remove it from our side — we would rather tell you it is there than imply it isn’t.
• A per-install identifier. A random value created when you install the app, used only to tell one crashing install from another. It is not linked to you, is not used for tracking or advertising, and is discarded when you delete the app.

Crash reporting is on mobile only — there is none on this website.

Purchases (RevenueCat)

Purchases of Itzol Pro are processed by the App Store or Google Play, and RevenueCat manages your entitlement status. RevenueCat receives an anonymous app-user ID and your purchase receipts. It does not receive your card data (there is none to receive), your name, or your email address.

Data retention and deletion

Because your data never leaves your device, deleting the app deletes it — that’s the whole story. Export files you create are yours to keep or delete. Crash reports are retained for up to 90 days. Purchase records are retained by the stores per their own policies.

Children’s privacy

Itzol is not directed at children under 13, and we do not knowingly collect personal information from children — we collect almost nothing from anyone.

Changes to this policy

If our data practices change, we’ll update this page and the date above. Material changes will be called out in the app’s release notes.

Contact

Questions about privacy? Email support@itzol.app.