Privacy Policy — Card Master

Last updated: July 9, 2026

Card Master (the "App") is a tool for managing MikroTik networks, generating internet vouchers, and managing subscribers. This policy explains what data we collect, how we use it, and how we protect it.

1. Data We Collect

• Account data: your email address (via Google or email/password sign-in) to create your account and authenticate you.
• Subscription status: your plan and expiry date only, to unlock paid features. Payments are processed via Google Play; we never see your card details.
• Router data you enter: router address, username, and password. Stored encrypted on your device (Android Keystore); we do not view it.
• Usage & crash data: limited technical info (device type, app version, crash logs) to improve performance and stability.

We do not collect your location, contacts, or photos, and we never sell your data.

2. How We Use Data

• To operate the App: connect to your router, generate vouchers, manage subscribers.
• To authenticate you and manage your subscription and trial.
• To send notifications related to your account or router (if enabled).
• To improve the App and fix crashes.

3. Third-Party Services

• Google Play Billing (subscriptions): purchases and subscriptions (monthly/yearly) are handled by Google Play's billing system. Google manages payment data; we only store your subscription status to unlock features.
• Google Firebase (authentication, database, notifications, crash reporting) — governed by Google's privacy policy.
• Telegram (optional): if you connect a Telegram bot, the bot token you provide is sent to Telegram's servers to enable notifications. You control and can disable this.
• Remote-access (cloud) server: when you enable "Cloud Connect," your router traffic is relayed through our intermediary server to enable remote management. We do not permanently store your router's data content on the server.

4. Data Security

Router passwords are stored encrypted on your device. Connections to our services are protected. However, no electronic transmission is 100% secure, and we use reasonable means to protect your data.

5. Data Retention & Account Deletion

We retain your account data while your account is active. You can delete your account and data directly in the app: Settings → Delete account (your account and subscription records are permanently removed), or email us at the address below.

6. Children

The App is intended for business owners and internet service providers, not for children under 13, and we do not knowingly collect their data.

7. Changes

We may update this policy; changes will be posted on this page with the date above updated.

8. Contact

For privacy questions: bidroali@gmail.com