Privacy Policy.
1. Overview
CardFlow is operated by CHAN HO FUNG, a sole proprietor based in Hong Kong. This policy explains what we collect and why. The short version: the app does not track you, and your media never leaves your Mac.
2. What the app does NOT collect
The CardFlow app contains no analytics, no tracking, and no advertising identifiers. Your photos and videos are copied only to destinations you choose; they are never uploaded to us. Licence verification happens entirely offline on your Mac — the app does not contact our servers on launch.
3. What we collect and why
Purchase: when you buy a licence through Paddle, we receive your email address and transaction identifier so we can generate and email your licence key.
Activation: when you activate a licence, the app sends your licence key identifier and an anonymous machine identifier to our licensing server, which stores them to enforce the two-machine activation limit.
Support: if you email us, we keep the correspondence to help you.
Automatic updates: the app periodically fetches an update feed from our website; this is a standard HTTPS request and we do not use it to identify you.
4. Service providers
We use Paddle (merchant of record — payment processing and tax handling; Paddle's own privacy policy applies to checkout), Cloudflare (website hosting and licensing infrastructure), and Resend (transactional email delivery of licence keys). Each processes data only as needed to provide these services.
5. Retention
Licence and activation records are kept for as long as needed to support your licence. Support correspondence is kept as long as reasonably useful.
6. Your rights
You may request access to, correction of, or deletion of your personal data by contacting support@trycardflow.com. Note that deleting activation records may prevent future activations of your licence.
7. Cookies
Our website sets no cookies and runs no analytics. The Paddle checkout may set cookies required to process your purchase, governed by Paddle's policy.
8. Changes
We may update this policy from time to time; the current version is always available at this page.