Privacy Policy

Effective September 16, 2026

CommonCard is an iPhone app that helps couples see what each of them is responsible for on the accounts they share. It is operated by Hwa Labs, LLC ("CommonCard"). This policy describes what the service collects, how it is used, and the choices you have. It applies to the CommonCard iOS app and this website.

What CommonCard collects

Account information. Your name and email address from Sign in with Apple. If you choose to hide your email, Apple provides a private relay address instead.
Financial information. When you connect a bank or card, CommonCard receives account names, the last digits of account numbers, balances, and transactions (merchant, amount, date, and category). CommonCard never receives or stores your bank username or password.
What you add. The categories you create, how you tag each purchase (yours, your partner's, or shared), the split percentage you choose, and the selections you ask the app to remember.
Partner connection. When you invite a partner or accept an invite, the two accounts are linked so you both see the same shared information.
Purchase status. Your subscription state from the App Store. Payments are processed by Apple; CommonCard never sees your card details.
Usage and diagnostics. App analytics and crash reports, used to keep the app working well. On this website, Google Analytics records visits.

Face ID is handled entirely by your iPhone. CommonCard never receives biometric data.

How it is used

To run the service: syncing transactions from your connected accounts, suggesting how to tag purchases based on selections you asked it to remember, and calculating each person's monthly total per account.
To show shared information to your partner. Anyone you connect as a partner can see the accounts, transactions, tags, and totals in your shared CommonCard.
To provide support and improve reliability.

CommonCard does not sell your information and does not show ads.

Service providers

CommonCard runs on a small set of providers that process data on its behalf: Plaid (secure connections to your bank and card accounts), Google (Firebase and Google Cloud: database, sign-in, analytics, and crash reporting), and Apple (sign-in and payments). Each receives only what it needs to do its job. Plaid's handling of your information is described in the Plaid End User Privacy Policy.

Retention and deletion

Your data is kept while your account is active. You can remove a single bank in Settings under Linked Banks, which disconnects it and deletes its transactions. You can delete your account in the app (Settings, then Delete My Account), which disconnects your banks and removes your account and its data within 30 days, or email support@commoncardapp.com and we will do it for you. You can also ask for a copy of your data or a correction the same way.

Because a CommonCard is shared, deleting your account or removing your partner also removes the shared accounts and transactions your partner sees.

Security

Data is encrypted in transit, stored with access controls on Google Cloud infrastructure, and accessible only to the parts of the service that need it. Bank connections are read only; CommonCard cannot move money.

Children

CommonCard is not directed at children under 13, and the service does not knowingly collect information from them.

Where the service operates

CommonCard is offered in the United States, and data is processed in the United States.

Changes

If this policy changes, the updated version will be posted here with a new effective date.

Contact

Questions about privacy: support@commoncardapp.com