Operator and contact
ShopCardGo is operated by Bissy MWA s.r.o., company ID 30065917, registered office Dlouhá 3403/2b, 702 00 Ostrava. Contact: info@bissymwa.cz.
Scope
This policy describes the current ShopCardGo mobile app: storing and displaying loyalty cards and barcodes or QR codes, scanning them with the camera, managing shopping lists, and exporting or importing a backup of loyalty cards. The app has no user accounts, operator-run backend or cloud sync, ads, operator-run analytics or tracking, Firebase or Sentry crash reporting, or Advertising ID use. Merchants, operating systems, app stores, email providers, and services you choose for sharing or backup have their own privacy practices.
Data stored on your device
The app stores loyalty cards, shopping lists, settings and onboarding status locally using Hive. A loyalty card may contain an internal ID, name, card number, barcode or QR content, color, icon data, optionalLogoUrl, creation date, favorite status and barcode type. A card number may relate to an identifiable person. Shopping lists contain text you enter and may indirectly reveal information about you. You can view, edit or delete app data using available app functions; copies in backups or shared files may remain elsewhere.
Local processing and transmission
ShopCardGo uses locally stored data to display cards and lists and perform actions you request. Bissy MWA s.r.o. does not send the contents of loyalty cards or shopping lists to its own server. Data may still leave your device through system backups, device migration, sharing an export, or third-party SDK diagnostics as described below.
Camera and scanning
Camera access is used to scan barcodes and QR codes. On iOS the app declares NSCameraUsageDescription for this purpose. It does not use contacts, location, microphone, Bluetooth, tracking, notifications, Face ID, calendar or Photo Library access.
Google ML Kit on Android
On Android, mobile_scanner 7.2.0 uses the bundled Google ML Kit barcode-scanning model (com.google.mlkit:barcode-scanning:17.3.0). Barcode and QR inference runs on the device. According to Google, ML Kit does not send camera input or decoded barcode or QR content to Google servers. It may send technical data for diagnostics and usage analysis, including SDK events, app and version information, device or hardware information, performance and error data, and a per-installation identifier. The Android app includes CAMERA, INTERNET and ACCESS_NETWORK_STATE permissions; network permissions come from ML Kit and Google Data Transport dependencies. The app does not use Advertising ID.
System backups and device transfer
ShopCardGo does not upload stored cards or lists to its own cloud. The operating system or device-provider services may include persistent app data in system backups or device migration, depending on your settings and platform rules. On Android, Auto Backup is not explicitly disabled and persistent app data may be backed up or transferred. On iOS, persistent Hive data is in Documents and may be included in iCloud, Finder or device backups; the app does not set NSURLIsExcludedFromBackupKey. Review your device backup settings if this matters to you.
Export and import
A JSON export contains loyalty cards only; it does not include shopping lists or settings. The app does not encrypt the export. A temporary export file is created in cache (Android cache or iOS Library/Caches) and can be passed to another app or service through the system Share Sheet. Android cleanup of export files older than 24 hours is best effort. Import accepts a file up to 5 MiB. Once you share a file, the recipient controls its copy. ShopCardGo has no operator-run upload server for these files.
Contacting support
If you choose to contact support, Bissy MWA s.r.o. may receive your email address, the content of your message, and any other information or attachments you provide. We use this information to handle your request, communicate with you, resolve technical or operational issues, and, where relevant, establish, exercise or defend legal claims. Depending on the nature of the request, processing may be necessary to perform a contract or take steps at your request concerning the service; where applicable, it may instead rely on our legitimate interests in providing support, resolving issues and protecting legal claims. The app does not automatically attach your cards or lists. Email delivery also involves your chosen email provider and the provider handling our support address.
Purposes and third parties
Local processing provides the card, scanner and shopping-list functions. Information sent to support is used for support correspondence. Google may process the ML Kit technical data described above on Android. Apple, Google, device makers and backup or sharing services may process data under their own terms when you use their services. Merchants operate their own loyalty programs.
Retention and your controls
Cards, lists and settings remain in local app storage until you change or delete them, remove the app, or restore or transfer data. Backed-up or shared copies may remain under the rules of the service holding them. Support correspondence is kept only for as long as reasonably necessary to resolve the request, maintain necessary continuity of support, comply with applicable legal obligations, or establish, exercise or defend legal claims. Because the operator has no account or server copy of your locally stored cards and lists, support cannot retrieve or erase those local records for you.
Security
The app does not add its own application-level encryption layer to Hive storage. Access to local files and system backups depends on your device and backup provider. JSON exports are not encrypted by the app; choose where you share and store them with care. No storage or transmission method can be guaranteed risk-free.
Your privacy rights
Where we process personal information you send to support, applicable law may give you rights to information, access, correction, deletion, restriction, objection or portability. In the EU/EEA and, where relevant, the UK, these rights may be subject to conditions or exceptions. Contact us about information we actually hold. Manage local app data on your device; we cannot access it through an operator account. You may also contact a competent data-protection authority.
International and regional rights
Depending on where you live, local privacy law may give you additional rights. We will assess requests according to the law applicable to the particular processing. This does not imply every regional privacy regime applies to Bissy MWA s.r.o..
Children
The app is not designed specifically for children and has no account-based age verification. If a child uses it, the local storage, scanning and platform behavior described here may apply. Parents or guardians should consider what information a child enters or shares.
Changes and contact
We may update this policy when the app or its data practices change. The current text is available in the app and at https://shopcardgo.com/privacy. For privacy questions, contact Bissy MWA s.r.o. at info@bissymwa.cz; postal address: Dlouhá 3403/2b, 702 00 Ostrava.