Last updated October 11, 2026

The short version: your cards live on your device. Pointy Rewards has no accounts, no ads and no tracking. To see which features get used and to fix crashes, the app sends usage and crash reports, which carry a random install ID but never your name, contact details or cards. The app sends a card off your device only when you ask: to add it to Apple Wallet, where the server that makes the pass keeps nothing, or when you export your cards and choose where the file goes.

What the app stores, and where

For each card you add, Pointy Rewards keeps the store name, an optional category, the barcode type and its contents, the number shown on the card, the colors and pattern you picked, whether it's a favorite, pinned or archived, and when you added and last used it.

All of this is stored on your device only, in storage shared between the app and its home screen widgets so the widgets can show your cards. The app doesn't upload or sync it to us or to any other service, and it's removed when you delete the app. If you use iCloud Backup or back up your iPhone to a computer, Apple includes the app's data in that backup, as it does for other apps.

The app also remembers a few preferences on your device, such as your layout and sort order.

Camera

The app asks for the camera so it can scan the barcode on your loyalty cards. Scanning happens on your device. No photos or video are saved or sent anywhere. If you say no, you can still type a card in by hand.

Importing from screenshots

If you import cards from screenshots, you pick the pictures yourself with the system photo picker, so the app only sees the ones you choose and never your whole library. The barcodes and text are read on your device, and the screenshots aren't kept or sent anywhere.

Apple Wallet passes

A Wallet pass has to be signed by a server before your iPhone will accept it. When you tap Add to Apple Wallet, the app sends that card's name, number, barcode, category and colors, along with the pass pictures made from them, to our pass server over an encrypted connection.

• The server signs the pass, sends it back, and keeps nothing. It has no database, and its logs record only that a pass was signed and how big it was, never names, numbers or barcodes.
• The server runs on Cloudflare. Like any website host, Cloudflare sees your IP address when the request arrives. We use it only to limit how many passes one address can make per minute, to stop abuse, and we don't store it.
• Once a pass is in Wallet, Apple Wallet holds it, and Apple's privacy policy applies to it there. Removing the pass in the app or in Wallet removes it from Wallet.

Nothing is sent if you never add a card to Wallet.

Exporting your cards

Settings lets you export every card as a file. The file goes only where you send it from the share sheet.

Siri, Shortcuts and widgets

Shortcuts, Siri and widgets can open or show your cards. They read the same on-device storage as the app and don't send your cards to us.