Privacy, with care.
Updated October 5, 2026
QuanCard is a local-first collection vault. This note describes this website and the TestFlight beta, developed and operated by ZOOL LLC.
This website
This website does not accept card details, account numbers, vault files, or passwords. Google Analytics helps us understand visits to this public website. We disable advertising features and do not send card information, email addresses, verification codes, or reservation numbers to Google. When you first arrive on a Chinese page from another site, your browser’s language setting is read locally and non-Chinese browsers are shown the English version; this check is not sent to any server. A theme or language preference is saved in your browser’s local storage if you change it; you can remove it by clearing site data.
Your reservation
When you join the launch waitlist, or previously applied for TestFlight testing, Cloudflare processes your email address to send a verification code and protect the form with Turnstile. After verification, we store your normalized email, preferred language, timestamps, and unique reservation or beta application number in separate Cloudflare D1 lists, so we can send launch notifications or testing invitations and retrieve your number. A beta application does not join the launch waitlist or guarantee a testing spot. Verification codes expire after 10 minutes; incomplete verification records are removed about a day after expiry. Verified reservations remain until you request removal through our contact address. This is separate from your local app collection, and it is not an app account. Administrators use a secure session cookie, valid for up to eight hours. We do not sell the list.
Public TestFlight testing
Public testing uses an Apple TestFlight link. On this website, verify your email to register for beta testing and reveal the TestFlight link. We keep your normalized email, language, verification time and registration number until you request deletion. This does not join the launch waitlist. The public Apple link can be shared; website registration cannot identify anonymous Apple testers. Apple handles enrollment, installation, testing sessions, crash reports and feedback under its policies. Public-link testers appear as anonymous in our tester list; this does not mean Apple processes no data. Earlier email applications remain separate and can be removed on request. Joining the public beta does not join the launch waitlist.
Hosting and network requests
Cloudflare hosts the static site and processes network information needed to serve and protect it, which may include IP addresses, request times, and browser information. Hosting logs and retention follow Cloudflare’s policies. We do not claim that browsing generates no server data.
Website analytics
Google processes page visits, device/browser information and network data under its own policies. Google Analytics may set first-party cookies. Analytics loads automatically on public pages, without a preference prompt. We continue to respect a previously saved refusal and Global Privacy Control. Analytics is separate from app data and is not loaded on administrator pages.
Your collection in the app
QuanCard encrypts the card details you enter, including CVC, bank account and transfer information, notes, and selected photos before storing them on your iPhone. Local use works offline and does not require a QuanCard account. Sensitive card details are masked until you authorize access. Backups use password-protected .qvault encryption. Face ID and device passcode authentication are handled by iOS; QuanCard does not receive biometric templates. The app includes no advertising, tracking or remote logging SDK. Use fictional data and original test artwork during this beta.
Optional iCloud sync
If you enable iCloud, collection data, artwork and revision history are encrypted on device before upload to your private CloudKit database. Recovery material is managed through iCloud Keychain; recovery depends on that material being available. An account password alone cannot recreate a missing random key. Apple can process account and service metadata, including identifiers, sizes and times.
Your self-hosted server
For self-hosted sync, generate pairing in your web vault, scan or explicitly paste it in the iPhone app, and confirm the HTTPS host before connecting. Pairing links contain a recovery key: never share them or include them in feedback. The iPhone app sends a one-time claim code, a generic device name and, later, device tokens, random identifiers, cursors and ciphertext. It does not upload web passwords, recovery keys, financial plaintext or camera frames. The server operator controls request metadata, retention and backups. The iPhone app does not execute server JavaScript; the web vault still requires trust in the JavaScript delivered by its server. Only one sync backend can be connected at a time. This website does not receive or decrypt your collection.
Deletion and backups
Pausing or disconnecting sync keeps local items and does not delete remote data. Disconnecting self-hosted sync does not revoke remote device access; manage access and deletion in that server’s web app. Deleting a local vault does not delete cloud copies, other devices, synchronized Keychain material or exported backups. Cloud deletion requires a separate confirmation in Sync Settings. Manage .qvault files where you saved them. Revision history and deletion versions can remain; we do not promise immediate physical removal of every copy.
Beta diagnostics and feedback
TestFlight automatically provides crash and usage data to Apple and the developer. Optional written feedback, screenshots and email may also contain contact information. We use this information to address feedback and improve the app. Developer-controlled copies of received diagnostics and beta feedback are kept for no more than 90 days from receipt. To request deletion, contact support@quancard.app. We verify which records relate to your request, delete copies under our control, and reply with the result. This does not change Apple’s or your server operator’s independent retention. Deleting the app does not delete information already sent. For Apple-held data, contact Apple under its TestFlight terms.
Release status
QuanCard has not been released on the App Store. Public TestFlight testing is now available after email verification on our homepage. Production sync acceptance and final store privacy disclosures are still being completed. This note does not claim an external security audit.
Contact without secrets
Never include card numbers, CVCs, account numbers, recovery codes, or backup passwords in a support request. For contact details and safe reporting guidance, see Contact & support.