CARDLUX — PRIVACY POLICY

Privacy is the highest currency of prestige.

Section 1 — Foundation of Privacy

1.1 CardLux is built on the principle that true prestige exists only where privacy is absolute.

All data, identity markers, and interactions within CardLux are processed under a privacy-first doctrine.

Visibility is an act of consent, not an operational default.

Section 2 — Data Principles

2.1 CardLux practices data minimalism — it collects only what is required to verify membership and enable access.

2.2 CardLux never monetizes, sells, or leases data to third parties.

2.3 Data processing is grounded in consent, encryption, and purpose limitation.

Section 3 — Data Collection and Use

3.1 Information collected may include verification details supplied voluntarily, technical data used for secure authentication, and connection approvals or denials made by you.

3.2 This information is used strictly for confirming identity, granting and managing access, enforcing permissions, and maintaining integrity of cardholder records.

3.3 The address provided on your user profile is used solely for card delivery purposes and is never shared, tracked, or used for any other reason.

Section 4 — Location Access

4.1 CardLux only collects location data during gated card verification — when a user’s gated card QR code is scanned to request access to private details.

4.2 This one-time location capture helps confirm where and when a gated card was accessed, enhancing privacy and security tracking.

4.3 CardLux does not continuously track or store user movements. Location access can be disabled by the user at any time from device settings.

Section 5 — Storage, Security, and Encryption

5.1 All data is encrypted at rest and in transit, stored in secure environments inaccessible without explicit user consent.

5.2 CardLux does not allow analytics, advertising, or external tracking layers.

Section 6 — Member Rights and Account Deletion

6.1 Members have full control of their data. You may review, correct, or delete your information at any time.

6.2 You can delete your account directly from the app by selecting “Delete Account” on the Settings page. Once deleted, all associated data is permanently removed and cannot be recovered.

Section 7 — Third Parties

7.1 CardLux does not share data with third parties or affiliates unless legally mandated or essential for service delivery.

7.2 Any such disclosure will be limited to the minimum necessary and handled securely.

Section 8 — Updates and Consent

8.1 This Privacy Policy may be updated periodically to reflect system or legal changes.

8.2 Continued use of CardLux after notification of changes implies consent to the revised terms.

By Order of CardLux