The Points Life tracks credit card perks you enter by hand. It never connects to a bank, and this page says plainly what it does store, who else can see it, and how to get rid of it.
There is no bank connection. The app has no access to your accounts, card numbers, balances or transactions, and never asks for them. Every figure in it is one you typed. That is a deliberate design choice, and it is the single biggest thing this policy has to say.
| Data | Why |
|---|---|
| Email address | To sign you in and send the monthly digest. |
| Password | Handled and hashed by Supabase. It is never visible to this app or to its owner. |
| Cards you add | Name, issuer and annual fee, copied from the built-in catalogue. |
| Perks | Amounts, reset periods, categories, and any tags you set in Playground. |
| Usage you log | The amount and the date, which is what makes the tracker work. |
| Email preferences | Which emails you get, a switch that pauses all of them, and an unsubscribe token. |
| Digests sent | Date, subject line and item counts, so the next email can say what changed since the last one. |
Your data is never sold, rented, or shared for anyone else's marketing.
The app sets no cookies. It does keep a few values in your browser's local storage, which never leave your device except for the sign-in token:
pl_onboarded — whether you have seen the welcome walkthrough.kd_point_values — any point valuations you have adjusted yourself.pl_chooser — your saved answers on the Find a card tab.pl_perk_dismissed — perk suggestions you chose to skip.Clearing your browser's site data removes all of these. Signing out removes the token.
Four services are needed to run the app. Each sees only what its job requires.
| Service | What it sees |
|---|---|
| Supabase | Hosts the database and handles sign-in, so it holds everything in the table above. |
| Vercel | Serves the site and runs the monthly email job. Keeps standard server logs, including IP addresses. |
| Resend | Delivers email. Sees your address and the contents of messages sent to you. |
| Google Fonts | Supplies the two typefaces. Your browser requests them from Google on each visit, so Google receives your IP address even though this app sends it nothing else. |
Google Postmaster Tools also reports aggregate delivery statistics for email sent from this domain. It shows rates across all recipients and identifies no individual.
Some cards on the Find a card tab carry a referral link, labelled as one. Following it takes you to the card issuer's own site, where their privacy policy and their cookies apply, not these. If you are approved, the owner of this app earns a referral bonus from the issuer at no cost to you.
A referral link only appears when its offer matches or beats the best public offer on record for that card, and the app's card rankings are calculated from your spending and the annual fee alone. No referral link has ever influenced a recommendation.
Two kinds of email are sent. Account email — invitations and password resets — arrives because you asked for it. The monthly digest lists credits you have not used yet, and you can turn it off at any time using the Monthly Digest switch in the app, or the unsubscribe link in any digest. Turning it off stops the digest and nothing else.
Every row in the database is scoped to your account with row-level security, so one account cannot read another's data even if something goes wrong in the app. Passwords are hashed by Supabase and never stored by this app. All traffic uses HTTPS.
Being straight about the scale of this. The Points Life is a small, invite-only project run by one person, not an audited enterprise service. Sensible measures are in place and no financial credentials exist to lose. Judge it on that basis.
The app is not intended for anyone under 16, and no account is created without an invitation.
If this policy changes in a way that affects what is collected or who sees it, the date at the top changes and everyone with an account gets an email. Because the app is invite-only, that reaches every user.
Questions or account deletion: hello@thepoints.life.