We do not know your data. We do not want to.

There is no analytics, no advertising, no tracking, and no third party receiving anything about you. We do not have accounts, so there is no name, email or password to lose. This site sets no cookies.

Making a card official is one blind ping, signed with an Apple certificate. Nothing else leaves.

A card you publish is the exception, and it has to be: we hold it so it can be fetched, and it tells us when it is opened. Take it down and we stop holding it.

• Your published cards. Whatever you typed into a card you chose to publish, plus the artwork, stored so the page and the pass can be served. This is readable by us. It is also, by design, readable by anyone you give the link to — that is what a business card is.
• A device check. Publishing requires proof the request came from a genuine, unmodified copy of the app, using Apple’s App Attest. We keep the resulting key identifier. It identifies an installation, not a person.
• Wallet registrations. If you add a pass to Wallet, Apple’s device sends us a push token so we can tell it when the card changes. Deleting the pass removes it.
• A purchase check. When you buy something, Apple gives the app a receipt that we verify. We keep no payment details — we never see your card number, and Apple does not give it to us.

The token proving a card is yours is kept in your device Keychain and synced through your own iCloud Keychain so a new phone can still change your cards. We never receive it — the server holds only a hash it can check against.

Taking a card down from the app deletes the page, the pass and the stored card. Deleting the app removes everything held locally. Ask us and we will remove anything else tied to your installation.

Questions, takedown requests, or anything else: fusion@singularcontinuum.com