Your information.
Your space.

This notice describes the Aptly website and its card recommendation app as they work today.

The website demo

The demo uses three example cards and example purchases. Your selection is processed in your browser and resets when you reload. The demo does not ask for your email, card numbers, bank credentials, or payment details.

The optional waitlist

When you join the waitlist, we store your email address, optional first name, signup time, and the version of the early-access and launch-update consent you accepted. Supabase stores this information privately for Aptly. We use it to send the launch updates you requested. Joining does not create an app account or subscribe you to unrelated marketing.

Signup is confirmed on this website. Resend processes your email address and optional first name to send a signup confirmation. We store its message identifier and acceptance time for troubleshooting and to prevent duplicate confirmations. Receiving a confirmation does not verify email ownership. Reply to the confirmation to request removal from the waitlist. Launch campaigns will include an unsubscribe option when those campaigns begin.

Protecting the form

Our signup service temporarily processes your IP address to limit repeated submissions. We store an hourly keyed hash, rather than the IP address, in a separate abuse-prevention table. Entries older than 24 hours are cleaned up when the next valid signup request is processed. We do not add your IP address to your waitlist record.

Cookies and analytics

We have not added advertising trackers, analytics scripts, or tracking cookies to this website. Fonts and product media are served with the site.

Hosting and external links

Vercel hosts this website and may process standard request information, such as your IP address, browser information, requested URL, and access time, to deliver and secure the service. See Vercel’s privacy policy for its practices. Waitlist storage is provided by Supabase, and confirmation delivery uses Resend. Links to external research and card issuers open their websites, where their own privacy notices apply.

The mobile app

The app stores your selected card names, reward preferences, and settings locally on your device. It does not require an account, card numbers, or a bank connection. The app can download an updated public card-rules file; it does not include your wallet selections in that request.

Optional location. In the web app you can ask Aptly to remember a store where you are standing, and later tap “Find my store” to match your position against the stores you saved. Your position is read only after you tap (or, if you turn on the automatic check in Settings, when you open the app and your browser already allows location), held in memory for that one match, and not sent to Aptly or anyone else by the app. A saved store spot keeps the store, a position rounded to about 11 metres, the days it was saved and last used, and how many times you confirmed it. It stays on this device and is not part of your saved account profile, even when you are signed in. Your browser or operating system may use its own location service to work out a position, under its own terms. Delete one spot or all of them in Settings > Saved store spots; resetting Aptly, or erasing this device after deleting an account, removes them too. The phone apps do not use location yet.

Optional accounts

You can choose to save your wallet to an account, signing in with Google or with a code sent to your email. Supabase then stores your email address, basic profile details Google provides if you use Google (such as your name and profile picture), and your saved profile. That profile includes selected card products, your first name if entered, reward-value preferences, bonus activations and cap/credit tracking, card dates you enter, spending estimates, bank names you searched for but could not find, pinned or recent places, your usual payment method, and your usual card if you set them. It does not include saved store spots. If you use “I paid with this,” it also includes your estimated purchase log: the date, merchant or category, amount, selected card, and calculated reward comparison. It does not include card numbers, bank credentials, or account balances. A new account receives one welcome email, sent through Resend; we store its message identifier and send time to avoid sending it twice. Delete the account from Settings in the app to remove the stored wallet and account; you choose whether to keep or erase the copy on this device.

What comes next

Wallet payments and browser autofill are on our roadmap. If those features change how information is handled, we will update this notice before they become available.