Privacy
In short: your cards stay on your device. We do not track you.
1. Controller
VisionLab GmbH & Co. KG, Bayernweg 46, 33102 Paderborn, Germany. For any data protection question, reach us at support@shopy.cards. Further details are in the imprint.
2. Data on your device
Card numbers, store names, notes and any ID documents you save stay on your device. They are never sent to us and we have no access to them. Delete a card or the app and that data is gone.
3. Camera
The camera is used only to scan barcodes and QR codes. Recognition happens on the device. No images are stored and none are transmitted.
4. Face ID and Touch ID
ID documents kept in the app can be protected with Face ID or Touch ID. The check is performed by the operating system. We receive no biometric data and no access to it — only whether the unlock succeeded.
5. Card templates and offers
To load card templates and offers the app connects to our server at api.shopy.cards. Your IP address is transmitted as part of that connection and recorded in server logs. The legal basis is Art. 6(1)(b) GDPR for providing the feature and Art. 6(1)(f) GDPR for operating it securely. Logs are kept only as long as needed to detect faults and abuse.
6. Contact form
When you write to us through the form we store your message, the subject and category you chose and, if you gave one, your reply email address. Platform, app version and language are recorded as well so we can place the enquiry. Your IP address is stored only as a salted hash, never in the clear; it exists solely to stop bulk submissions and is never served to anyone. The legal basis is Art. 6(1)(b) and (f) GDPR. Messages are deleted no later than twelve months after the enquiry is closed.
7. No analytics, no advertising, no sharing
The app contains no analytics, tracking or advertising components and no third-party SDKs. We build no usage profiles, do not follow you across apps or websites, and neither share nor sell data to third parties. Should that ever change we will ask for your explicit consent first and update this text.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Write to support@shopy.cards to exercise them. Cards and ID documents can be deleted in the app at any time; because they only ever existed on your device, that is complete erasure. You may also lodge a complaint with a supervisory authority — ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.
9. Last updated
August 2026
Contact