Privacy Policy

Effective date: June 29, 2026 · Maintained by Credence Credit.

1. Who we are

Credence Credit ("we", "us", "our") operates the Credence Credit application at https://credence-credit.us. Contact us at support@credence-credit.us.

2. Financial disclaimer

Credence Credit provides educational tools and financial organization features. It is not a bank, lender, payment processor, credit bureau, financial advisor, tax advisor, or investment advisor. Users should independently verify financial information and make their own financial decisions.

3. Data we collect

• Account information — email address and authentication identifiers when you sign up or sign in (including Google sign-in).
• Credit card metadata you enter or scan — issuer, card network (Visa, Mastercard, Amex, Discover, etc.), product name, nickname, credit limit, balance, APR, due day, statement closing day, minimum payment, and the last four digits only.
• Card artwork — a sanitized, AI-recreated rendering of your card's visual design, generated locally or via our processing pipeline. We do not store the raw photo you captured.
• Receipt data — when you scan a receipt with your camera or upload one from your gallery, we extract and store merchant name, date, subtotal, tax, total, payment method, and (where present) the last four digits of the card used. The original receipt image may be stored in your account to allow review.
• Cash flow you log — purchases, payments, and balance adjustments you choose to record.
• Subscription information — your Premium status (monthly, lifetime, trial), billing period dates, and a Stripe customer reference.
• Support and feedback content — messages you send through the Support Center or in-app Feedback form.
• Analytics and diagnostics — anonymized usage events (page views, feature usage, conversion events) and crash/error logs used to improve reliability and the user experience. Founder and admin activity is excluded from product analytics.

4. What we never store

From card scans and receipt scans we never store:

• Full credit or debit card numbers (PAN)
• CVV / CVC / security codes
• Expiration dates
• Cardholder names extracted from a card image

Sensitive regions detected during scanning are redacted before any image is persisted. Payment card details for billing are handled directly by Stripe and never touch our servers.

5. Receipt scanning and OCR

The Receipt Scanner supports two sources: a live camera capture and uploads from your device gallery (including HEIC, JPEG, PNG, and WEBP). Captured images are sent to our AI processing pipeline, which performs OCR (optical character recognition) to extract merchant, date, line totals, tax, total, payment method, and last four digits of any card referenced. Extracted data is shown back to you for review before it is saved. OCR and AI extraction may occasionally make mistakes — you remain responsible for verifying the result.

6. Card scanning and AI recreation

When you use Quick Add Card or replace a card's image, the app captures the front (and optionally the back) of your physical card. Images are processed to:

• Detect the card edges and crop to the card only.
• Identify the issuer, network, and product family.
• Read and retain only the last four digits.
• Generate a sanitized artwork rendering that contains no personal data.

Back-of-card images are used only for OCR and product verification and are never stored. Front-of-card raw photos are discarded after processing; only the sanitized artwork (or a matched library design) is retained.

7. AI processing

We use AI services to perform OCR, recognize card designs, and generate insights and recommendations. AI requests are routed through our hosted AI gateway. The AI provider processes the request to produce a response and does not use your data to train public models. AI-generated recommendations are informational only and are not financial, legal, tax, or investment advice.

8. Authentication

We use email/password and Google sign-in. Authentication is handled by our managed auth provider; passwords are hashed and never visible to us.

9. Subscriptions and payments

• Free plan — core features at no cost.
• 30-day Premium trial — new accounts may receive a 30-day Premium trial automatically. No payment method is required to start the trial. We track trial start, reminder sends, and conversion outcomes in our analytics.
• Premium (monthly) — recurring subscription, billed monthly through Stripe.
• Lifetime Premium — a one-time purchase processed through Stripe granting ongoing Premium access tied to your account.

Stripe handles all payment processing. We receive subscription status, billing period dates, and a customer reference, but never your card number or CVV.

10. How we store and protect data

Data is stored on our managed cloud database and encrypted in transit (TLS) and at rest. Records are scoped per user with row-level security so other users cannot read your data. Access by our team is limited and on a need-to-know basis. For more, see our Security page.

11. Subprocessors and integrations

• Supabase — application database, authentication, and storage.
• Stripe — subscription billing and one-time Lifetime Premium payments.
• Google — optional sign-in.
• AI providers — used through our hosted gateway for OCR, card recognition, and insights.
• Email delivery — used for transactional, trial reminder, and engagement emails.

12. Cookies and analytics

We use first-party cookies and local storage only to keep you signed in, remember your interface preferences, and measure aggregate product usage. We do not run third-party advertising trackers.

13. Crash reporting and diagnostics

We collect minimal crash and error logs to maintain reliability. These logs contain technical details (stack traces, route, timestamps) and do not include card numbers, receipt contents, or other sensitive financial data.

14. Data retention and deletion

We retain your data for as long as your account is active. You can delete your account and all associated data at any time from Account → Delete account in the app, or by emailing support@credence-credit.us. Deletion removes your cards, receipts, transactions, achievements, preferences, subscription record, and authentication identity within 30 days, except where retention is required by law.

15. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us at support@credence-credit.us to exercise these rights.

16. Children

Credence Credit is not directed to children under 13 (or 16 in some jurisdictions). We do not knowingly collect their data.

17. International transfers

Your data may be processed in the United States and other countries where our subprocessors operate. We take appropriate safeguards as required by applicable law.

18. Changes

We may update this Privacy Policy. Material changes will be communicated in-app or by email.

19. Contact

Questions or concerns: support@credence-credit.us

This Privacy Policy is provided as a clear, plain-language summary of our practices. It is not legal advice. For specific legal questions, consult an attorney.