Privacy Policy

DanHana ("the Service") collects only the minimum data needed to manage your card benefits.

What we collect

• Account: email address, (optional) name, language, alert preferences
• Wallet: cards you pick from the catalog plus the last 4 digits. Full card numbers and CVVs are never stored.
• Sign-in records: login timestamps and a one-way hash of your IP. Raw IPs are never stored.
• Approximate location: city-level location derived from IP (e.g. "Irvine, California, United States"). No street addresses or GPS.
• Nearby store lookup: if you tap "At this store" in store search, your device's current location is used for a single lookup of nearby stores (via Google Places). That location is not stored.
• Usage records: benefit "used" checkmarks, refresh requests, notification reads — needed for the service to work
• Usage analytics: on public pages and logged-in app screens, Google Analytics (GA4) collects anonymous statistics about which features are used and how often. Personal details such as email addresses or card information are never sent to GA, and admin pages are never tagged.

What the administrator can see

The service operator (admin) can see, for operations purposes: email address, signup and last-login times, city-level location, number and type of cards in your wallet, and alert settings. Passwords, two-factor secrets, and full card numbers are never visible to the admin; passwords are stored as one-way bcrypt hashes only.

What we never collect

• Full card numbers, CVVs, expiry dates
• Street addresses, GPS location
• Plaintext passwords (stored as bcrypt hashes)

Contact

For data deletion or questions, use the Settings page or contact the operator.