Privacy Policy

Before checkout

Drafts, including directory foods, custom food names, per-language names and confirmations, optional name, contact and notes, are saved in this browser for 30 days. Continuing to checkout also keeps a session copy while you complete payment. After verified payment, My Cards stores the card data and PNG/PDF files in this browser for 30 days. Expired records are removed when the library is next opened. You can remove a card or clear all locally saved cards, files and drafts in My Cards. The offline application shell is cached separately. Browser storage can be cleared or evicted; download a backup if you need to keep the files longer.

Optional AI features

The AI starting-choice assistant sends only the description you explicitly submit to Kie and its underlying model service. Do not include names, contact details or medical records. Suggestions require your confirmation and do not generate medical advice or card translations. We do not save the raw description or AI response in the order database or application logs; provider retention is governed by their policies. Selected fields you confirm become part of your normal draft.

If enabled, a paid travel card can request a decorative AI cover. Only a preset art theme is sent, without your selected foods, name, notes or contact. The illustration is stored on this device with the card’s existing 30-day expiry and included in local ZIP/PDF files. It is not an email or cross-device backup. Cover task receipts expire after 15 minutes. Rate-limit records contain hashed identifiers, counters and expiry times, without the description.

Kie privacy policy

Custom foods and offline language changes

Adding a custom food or typing its reader-language name does not call an AI service. These fields remain in the browser until checkout, when they become part of the stored order information. You must confirm each custom food name for the language you use. In My Cards, language changes and newly entered names are processed locally, with no translation request. The saved PNG, ZIP and PDF are regenerated on the device, without extending its original 30-day expiry. Later local edits are not synchronized to the original order or email backup.

Order information

At checkout, the server receives your optional email and selected card information to fulfill the order. New orders store the card and email as structured data in Cloudflare D1, without application-level encryption. An email digest supports order lookup. A separate private GUID grants access only while the order is paid and unexpired. Stripe receives the checkout email, price, product and an internal order reference; selected allergens and notes are not added to payment metadata.

Delivery and access

If you opt into email backup, Resend receives your email and private access link for delivery. Without an email, no delivery message is requested. Anyone who has that link can access the card during the 90-day order access period. Access is blocked after expiry or a refund. Expired order payloads are removed by the next checkout cleanup or operator maintenance job; do not assume backups or provider records are removed at the same time.

Analytics and support

Google Analytics is disabled by default unless a measurement ID is configured. The integration is excluded from the generator, checkout, contact, My Cards and order routes. No card content is sent in custom analytics events. Support submissions use the existing feedback service and may be forwarded to the operator’s Feishu support channel with email, message, IP address and browser information. Cloudflare Turnstile verifies support and order-recovery submissions before they are accepted. If verification is unavailable, the form does not send.

Your choices

Avoid putting unnecessary personal information in notes. Contact [email protected] to request access, correction or deletion of order data. We may need to confirm order ownership. Payment providers and infrastructure providers maintain their own records under their own policies. The official resources below explain privacy rights within their stated scope. Contact support to discuss a request relating to your order.