Privacy Policy

CCWorth · last updated 21 July 2026

CCWorth ("the app", "we") is an independent tool that estimates whether your credit cards earn back their annual fees. This policy explains what we collect and why. In plain terms: to run your account we store your email and which cards you track; the figures you enter are stored on our servers so they sync across your devices; and you can delete everything at any time.

We do not sell your data, show ads, or use third-party advertising trackers.

1. Who we are

For UK data-protection law, the operator of CCWorth is the data controller for the information below. Contact us any time through the in-app Support feature.

2. What we collect

Account & email. Your email address and an account identifier. Your password itself never leaves your device: it is scrambled on your device and we only ever receive the scrambled result, which we cannot turn back into your password. If you forget it you can reset it by email. We send a one-time code to your address to confirm it's really yours; we record only that it was confirmed and when. Your display name, if you set one, is saved to your account and shown to us when you contact support.
Which cards you track. The card products you add, your plan tier and billing period, your platform (web/iOS/Android), and first/last-seen timestamps.
Product usage. So we can see which features are used and improve the app, we record first-party analytics events tied to your account — for example which screen you're on, that you added a card, or that you started an upgrade. These are enumerable actions only: they never include your card figures or any other sensitive data. This is first-party analytics — it is not shared with anyone, and there are no third-party or advertising trackers. Only signed-in accounts are counted.
Your card figures. The detailed values you enter (spend, benefit usage, valuations) are stored on our servers so they sync across your devices. We can read this data. It was previously encrypted with a key derived from your password; we changed that in July 2026 so that a forgotten password no longer means permanently lost data, and so we can help you when something goes wrong. It is encrypted in transit (HTTPS) and at rest by our hosting provider, and we only ever look at it to run or support the service. Your password itself is still never sent to us.
Payments. If you subscribe, our payment providers (e.g. Stripe, Apple, Google) process the payment — we never receive full card numbers. We keep a record of each transaction (amount, currency, store, product, date, and any promo code used).
Support messages you send us, so we can reply.

3. How we use it

To provide your account and sync it across your devices.
To identify you, give support, and respond to your requests.
To operate, secure and improve the service, and understand how the app is used through first-party analytics (see "Product usage" above).
To take payment and prevent abuse.

4. Sharing

We share data only with the providers that run CCWorth for us — hosting and database (Cloudflare) and payment processors (e.g. Stripe, Apple, Google) — as needed to run the service, or where required by law. We do not sell your personal data.

5. Legal basis & your rights

We process this data to perform our contract with you (running your account) and on the basis of legitimate interest (supporting and securing the service). Under UK GDPR you can access, correct, delete, or object to processing of your data. You can delete your account and all associated data at any time from Settings in the app, which removes your record and your backup from our servers.

6. Retention & security

We keep your data while your account is active and remove it on deletion. Data is hosted on Cloudflare (KV and D1); transport is over HTTPS; your detailed card figures are additionally encrypted in transit and at rest, and access is limited to running the service. No system is perfectly secure, but we take reasonable measures to protect your information.

7. Children

The app is not directed at children under 16 and we do not knowingly collect their data.

8. Changes

We may update this policy; the "last updated" date will change, and material changes will be highlighted in the app.