Privacy policy

PointsTrkr (“PointsTrkr”, “we”, “us”) is a credit card points tracking service operated by Income Flow Tracker LLC, a Nevada limited liability company, and offered under the DivTrkr family of products. Questions about this policy: support@pointstrkr.com.

This policy explains what we collect, why, who we share it with and the choices you have. By using PointsTrkr you agree to it.

Account information. Your email address and, if you sign in with Google, the name and email Google shares with us. We do not store a password: you sign in with an email link or Google.

Information you enter. The cards in your wallet, card open and annual-fee dates, authorized-user flags, points balances, credit usage, sign-up bonus targets and your reminder settings.

Bank and card data through Plaid (Pro). If you choose to link a card, Plaid gives us read-only access to the credit card accounts and transactions you select: account name, last four digits, account type, and transactions (date, amount, merchant, category). We use this only to calculate your points, detect statement credits, track sign-up bonus spend and show you missed points.

Payment information. Payments are handled by Stripe. We receive your Stripe customer ID, subscription status and billing interval. We never receive or store your full card number.

Technical information. Basic logs such as IP address, browser type and pages requested, used to keep the service secure and working.

We never see, receive or store your bank username or password. You enter those only inside Plaid’s secure window. We store only an encrypted access token that lets us read the transactions you authorized. We cannot move money or make payments from your accounts.

To provide the service: show your portfolio, update balances from transactions, track credits and bonuses, and send the email reminders you turn on.

To operate and secure the service, process payments, answer support requests, prevent fraud and abuse, and meet legal obligations.

To improve the product using aggregated, non-identifying usage information.

We do not sell your personal information, and we do not share it for third-party advertising. We do not use your Plaid data for anything other than providing PointsTrkr to you.

We share information only with service providers that help us run PointsTrkr, under terms that limit their use of it:

• Supabase hosts our database and authentication.
• Vercel hosts the website and application.
• Plaid connects your card accounts when you choose to link them. Plaid’s handling of your data is described in its End User Privacy Policy.
• Stripe processes subscription payments.
• Resend delivers our email, such as sign-in links and reminders.
• Google, only if you choose to sign in with Google.

We may also disclose information if required by law or legal process, to protect our rights or the safety of users, or as part of a merger, acquisition or sale of assets, in which case we will tell you and this policy will continue to apply to your data unless you are notified of changes.

Data is encrypted in transit with TLS. Plaid access tokens are encrypted at rest and used only on our servers. Database access is restricted so that each signed-in user can read only their own records. No system is perfectly secure, and we cannot guarantee absolute security, but we work to protect your information and will notify you of a breach as required by law.

We keep your information while your account is open. You can disconnect a linked bank at any time in Settings, which revokes our access through Plaid. You can delete your account in Settings or by emailing us. When you do, we remove the Plaid connections and delete your profile, wallet, balances, ledger and synced transactions. Backups roll off within a limited period, and we may retain minimal records we are legally required to keep, such as payment records.

You can access, correct or delete the information in your account in the app, turn email reminders off, and disconnect linked banks. You may also email support@pointstrkr.com to request a copy of, or deletion of, your personal information. Depending on where you live (including California, Nevada and other states with privacy laws), you may have additional rights, such as the right to know, delete or correct your information and to not be discriminated against for exercising them. We will respond within the time required by law.

We use essential cookies and local storage to keep you signed in and remember your light or dark theme setting. We do not use advertising cookies.

PointsTrkr is for adults. It is not directed to anyone under 18 and we do not knowingly collect information from children.

PointsTrkr is operated from the United States for US cards and users. If you use it from elsewhere, your information will be processed in the United States.

We may update this policy. We will post the new version here with a new effective date and, for material changes, notify you by email or in the app. Contact: support@pointstrkr.com.