Privacy policy

Effective November 4, 2026. Developer: Anvaya Technologies Inc., British Columbia, Canada (anvayatech.ca).

Card Due Tracker keeps your information on your phone. It has no servers, no ads and no analytics, and Anvaya Technologies Inc. never receives your email, passwords or card details.

Signing in to the app

You sign in with Google. The app receives only your name and email address, and uses them to keep a separate profile for you on this phone. Sign-in details are not sent to any server of ours.

Information the app handles

• Gmail you connect with Google: read-only access (gmail.readonly). The app only searches for and reads bank statement, bill and payment emails. It cannot send, change or delete email, and never sees your Google password.
• Other email accounts (such as Yahoo or iCloud): your email address and an app password, encrypted with your phone's Android Keystore.
• From bank emails: the bank name, last four digits of the card, statement balance, minimum payment, due date, credit limit when shown, and payments made. No other email is read, copied or stored.
• What you enter: card details (never full card numbers), reminders such as rent or insurance, and settings.

Use of Google user data

Card Due Tracker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is processed only on your phone, only to show due dates and reminders, and is never transferred to anyone, used for advertising, or read by people.

Where your information goes

• Everything stays in the app's private storage on your phone, in your own profile.
• The app connects directly from your phone to your email provider over an encrypted connection.
• Nothing is sent to Anvaya Technologies Inc. or any third party.
• The app is excluded from cloud backup. A backup file is created only if you choose to save one; it is password-protected (AES-256) and never includes email passwords.

Security

• The app locks itself and opens with your fingerprint, face, phone PIN or an app PIN (stored only as a salted hash).
• All connections use TLS encryption.

Your choices and deleting your data

• Disconnect an email account in Settings at any time; Google is asked to cancel the app's access.
• Sign out in Settings: your data stays on the phone for when you sign in again.
• Delete account in Settings permanently deletes your profile and all its data from the phone, and cancels Gmail access.
• You can also remove the app's Gmail access at myaccount.google.com → Security → Third-party apps. Uninstalling the app deletes all of its data.

Children

The app is for adults who manage their own credit cards and is not directed at anyone under 18.

Changes and contact

Updates to this policy are shown in the app and at anvayatech.ca/privacy with a new effective date. Questions: support@anvayatech.ca