1. Introduction

This Privacy Policy explains how The Hobbyists ("we", "our", or "us") collects, uses, and safeguards information in relation to our mobile application and web service, PointsVault (Application ID: com.thehobbyists.pointsvault).

2. Information We Collect and How We Use It

A. Local-First User Data (Stored On Your Device)

By default, all data you enter into PointsVault is stored directly in your device's secure local storage (localStorage / encrypted app sandbox). This includes:

• Card portfolios, credit limits, opening dates, and Chase 5/24 status.
• Points and airline miles balances, hotel loyalty tiers, and Free Night Certificates (FNC).
• Minimum Spend Requirement (MSR) tracking and custom CPP valuation settings.
• Player profiles (P1 / P2 household nicknames).

B. Bank Statement CSV Parser (Client-Side Only)

When you use the Statement Parser to track MSR spend, CSV files are processed 100% locally in your browser/device memory. Statement files are never transmitted, uploaded, or stored on our servers.

C. Optional Account Information (Cloud Sync)

If you optionally choose to create an account to sync data across devices:

• We collect your email address and password hash via Supabase Authentication.
• Your encrypted settings and card states are synced to our cloud database.
• You can use the app completely offline without creating an account.

D. Advertising ID & Analytics

PointsVault does NOT collect, use, or share Google Advertising ID (AAID) or Apple IDFA. We do not track users across third-party apps or websites for targeted advertising.

3. Third-Party Services

We may integrate trusted third-party service providers to support application infrastructure:

• Cloudflare: Secure content delivery network (CDN) and web hosting.
• Supabase: Cloud database and authentication for optional cross-device synchronization.
• External Merchant / Issuer Links: When you voluntarily click an external link (such as a credit card application or loyalty program login), you will be redirected to the respective third-party website, which is governed by their own privacy policies.

4. Data Security and Storage

We implement industry-standard security practices, including HTTPS/TLS encryption for all data in transit. Because user data is stored locally on your device by default, you retain full control over your data.

5. User Data Deletion Rights

You have full control over your data at all times:

• Local Data: You can delete all local data at any time by clicking "Reset / Fresh Wallet" in the app or clearing your application/browser cache.
• Cloud Account Deletion: If you registered an account, you can request immediate and permanent deletion of your account and all associated data by emailing us at thehobbyists2022@gmail.com.

6. Children's Privacy

PointsVault is designed for adult financial portfolio management (target audience 18 and older) and does not knowingly collect personal information from children under the age of 13 (or 16 in certain jurisdictions).

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any updates will be posted on this page with an updated "Last Updated" date.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at:

• Developer: The Hobbyists
• Email: thehobbyists2022@gmail.com
• Website: https://points-vault-app.pages.dev/