Privacy Policy

The short version

Wallet Extras is operated by Luxus & Invoco, Inc. and works without an account. We do not sell your information, show ads, or connect to your bank. Your wallet stays on your device unless you choose Premium backup and sync, family sharing, an optional AI connection, or share an export.

Data stored on your device

The app stores the cards you select, custom card and perk names, benefit usage, reminder settings, and app preferences locally using native on-device storage on iOS or Android. Wallet Extras never asks for or stores card numbers, security codes, expiration dates, bank credentials, or transaction access.

You can export a copy from Settings. The export leaves your device only when you choose where to share it.

Optional backup and sync

You can choose Apple, Google, or email/password sign-in for optional cloud features. We use your account identifier to connect your devices. Google sign-in provides basic profile information, such as your name and email. Email sign-in uses your email address for verification, password reset, and account access. Apple backup sign-in does not request your name or email; family sign-in can request a name for shared attribution. Our authentication provider may retain information included in a provider's response, including an Apple private relay address.

Passwords and provider credentials are handled directly by Firebase and the sign-in SDKs, not saved in wallet records, exports, or AI connection grants. You can explicitly add another sign-in method to the same account. Wallet Extras does not merge wallets by matching email addresses or names.

With Premium, your selected cards, custom names and notes, card dates, tracking choices, and manually logged benefit use are saved to your private cloud wallet. Installation identifiers, record versions, and update times let devices reconcile changes. Reminder permissions and app preferences stay on each device.

Google Firebase provides authentication and stores cloud wallet data in the United States. Cloudflare runs the account service. These providers process the data needed to operate and secure those services, including technical connection information. Wallet Extras uses it for account access, backup, sync, purchase verification, and deletion—not advertising or profiling.

The Google sign-in SDK also declares collection of account and contact information (including phone number), approximate location, identifiers, usage information, and other technical data for sign-in functionality and SDK analytics. These provider disclosures are included in our App Store privacy label. Wallet Extras does not request phone-number access or device-location permission, and does not use your wallet data for advertising. See Google’s Privacy Policy for its practices.

Optional family sharing

You can choose cards to share with a family. We store your chosen display name, membership, invitations, selected cards, perk settings, shared usage and who logged each entry. Members can see the selected cards and shared history and log use. Unselected cards stay private. One Premium subscription sponsors the family; invited members can join free.

Invitation tokens expire and are single-use. The invitation website keeps the token in the URL fragment and opens the app only when you tap. Only share the link with the person you intend to invite.

You can stop sharing cards, leave a family, or remove a member. Server access ends when the change is accepted; offline devices learn the change when they reconnect. Shared history stays with the card owner. Account deletion removes the departing member’s attribution from retained shared history. If the sponsor’s subscription expires, shared history remains visible and new shared changes pause.

Optional AI connections

If AI connections are available for your account, you can choose to connect a supported assistant to your synced wallet. This requires your own Premium access. Connecting is optional; using Wallet Extras on your device does not require an AI account.

The permissions you approve let the assistant request selected cards, custom names, perk and benefit details, tracking settings, recorded usage, and reset dates, including family cards you are authorized to access. Usage-write permission lets it record authorized perk use. The separate wallet-management permission lets it make supported card and tracking edits, usage corrections, and confirmed card removals. These permissions do not provide bank access, payment credentials, another person's unshared wallet, or device-only changes that have not synced.

Wallet Extras receives the structured details needed for each operation, not your assistant's full conversation or a transaction import. The AI provider receives requested tool results and handles them and your conversation under its own privacy policy. Connect only an assistant you trust. We do not sell this information or use it for advertising.

Cloudflare operates the connection and authorization service. Firebase stores the resulting cloud wallet records. We use account, connection, permission, and record identifiers to authorize operations and prevent duplicate writes. Sign-in credentials are not retained in the connection grant. Access tokens expire after five minutes; refresh tokens expire after thirty days. You can revoke a connection earlier.

Temporary change previews expire after ten minutes. Saved and undone receipts are retained for retry protection and become eligible for cleanup after thirty days. Cleanup runs in bounded batches when you next prepare a change, not necessarily at the exact deadline. Recorded wallet history remains until you remove it or delete your cloud account.

You can review and disconnect assistants at Your connections. Disconnecting revokes that connection's authorization; it does not erase wallet records or information already in the assistant's conversation. Manage that conversation with the AI provider. Wallet Extras rechecks account access before subsequent wallet operations.

Purchases and services

Apple or Google Play processes Premium purchases on its platform. Buying or restoring a subscription does not require a Wallet Extras account. Android sends the purchase token to our account service to verify and acknowledge the purchase with Google Play. If you enable cloud features, the service keeps limited subscription identifiers, status, expiry information, and the receipt needed to refresh access. Google Play receipt tokens are removed when you delete your Wallet Extras account; hashed ownership references follow the retention period below. We do not receive your full payment details.

Optional reminders are scheduled on your device.

The app downloads signed public card-catalog updates and card artwork. Those requests do not include your wallet, usage history, custom names, or search text. Service providers may process technical request information, such as an IP address, to deliver and secure these files.

Website and external links

This website does not use advertising trackers or third-party analytics. Its hosting provider may process ordinary technical request information, such as an IP address and browser details, to deliver and secure the site.

The app links to Apple, Google Play, and issuer websites. Those services handle information under their own privacy policies.

Your choices

You can export or erase device data from Settings. Signing out pauses sync and keeps your local wallet; erasing device data signs you out. Neither action deletes a cloud backup. If Premium expires, your local wallet remains editable, uploads pause, and existing cloud data remains available for recovery and deletion.

To delete your account and cloud wallet, open Settings → Backup & Sync → Delete account. Recent sign-in with one of your existing methods protects the request. Cloud access closes when the request is accepted, and deletion continues if you close the app. Your local wallet stays until you erase it separately.

Cloud wallets are retained until account deletion. Limited deletion-protection identifiers are scheduled for removal after 30 days. Subscription ownership references are scheduled for removal 90 days after the later of account deletion or subscription expiry. These references contain no wallet contents and help prevent an old device or purchase from recreating deleted data.

You can also request account and cloud-wallet deletion on our support page without reinstalling the app. We verify account ownership before fulfilling an email request. Deleting an account or app does not cancel a subscription. Apple or Google Play manages subscription records and cancellation through the store account used to purchase.

Support messages

If you email us, we receive your address and anything you include. We use that information to answer and resolve your request. Please leave out payment credentials and other information we do not need.

Changes

We may update this policy when the product or its data practices change. The effective date above will identify the current version.

Contact

Questions about privacy can be sent to support@walletextras.com. Please never email card numbers, security codes, bank credentials, or passwords.