Privacy Policy
Last updated October 7, 2026
CardLab is local-first. By default everything stays on your device, and one optional feature - iCloud sync - only does more when you turn it on.
What we collect
No account, no login, and none of your simulations. We do not operate a database that stores them. We do use RevenueCat, a purchase analytics service, which receives records of App Store purchases - a purchase starting, renewing, or lapsing - directly from Apple, so we can see how many people pay. It is not linked to your identity and is never used to track you across apps. If you enable push notifications, we also store a device token and market - see Push notifications below.
Your simulations
The cards, balances, and scenarios you create are stored locally on your device. If you turn on iCloud sync, they also sync through your own private iCloud account (managed by Apple, not us) so they appear on your other devices. They are never sent to our servers.
Purchases
If you buy a CardLab Pro subscription, the App Store handles the payment. We only learn that the purchase is active. We never see your card or payment details. Apple reports these purchase events to RevenueCat on our behalf so we can count them; RevenueCat receives the purchase record, not your name, email, or Apple ID.
Push notifications
If you turn on push notifications, our server stores your device token, your market, and whether it is a sandbox or production build - nothing else. We use this only to send catalog-refresh and new-card-in-your-market alerts. We never see your cards, balances, or payment-due dates; those alerts stay on your device. You can turn push off at any time in Settings.
No ads, no data selling
We do not show ads, sell or share your data, or track you across apps. Your simulations are never collected in the first place, so there is nothing there to sell.
This website
getcardlab.app uses Ahrefs Web Analytics to count page views. It sets no cookies and stores no personal data.
getcardlab.app also uses Google Analytics 4 to understand how visitors use the site, such as which pages are viewed and how people arrive. Google Analytics sets cookies and collects usage data like pages visited, approximate location, and device and browser type; Google processes it under its own privacy policy, linked below. You can block these cookies in your browser settings. This applies to the website only. The app itself contains no analytics beyond the purchase records described above.
How Google uses this data: Google Privacy Policy
Changes
If this policy ever changes, we will update this page and the date above.
Questions about privacy?
Email support@getcardlab.app