Privacy Policy

Overview

This Privacy Policy explains how Cardex Nepal may collect, use, store, and protect information when you use the Cardex Nepal website, sign in to your account, use Google sign-in, or contact support.

This policy reflects the current website and account structure. It should be reviewed and updated as Cardex Nepal's operational, hosting, payment, or customer support processes expand.

What data may be collected

Cardex Nepal currently uses Firebase Authentication and Cloud Firestore as part of website account handling. Depending on how you use the service, the following categories of data may be collected or processed:

• Account data such as your email address, authentication provider, and account identifier (UID).
• Basic sign-in information returned through Google sign-in, such as name, email address, or profile image, if provided by your Google account and Firebase.
• Account status data associated with your Cardex Nepal account, such as premium status, plan label, source, and related timestamps.
• Support or contact information that you choose to provide when requesting help, raising a privacy request, or sending feedback.
• Limited technical, security, and operational data that may be processed by Cardex Nepal's hosting, Firebase, or related infrastructure providers.

How Cardex Nepal may use your data

Cardex Nepal may use collected or processed information to operate the website, provide account access, support users, and protect the service.

• Authenticate users and keep account access working.
• Create, read, and maintain account-related records needed for website access.
• Respond to support questions, privacy requests, or service issues.
• Protect the service against misuse, unauthorized access, fraud, or security risks.
• Maintain, troubleshoot, and improve website reliability and future service operations.
• Comply with applicable legal obligations or respond to lawful requests where required.

Services and storage used

Cardex Nepal currently relies on services provided by Google Firebase for user authentication and account-related data storage. This includes Firebase Authentication for sign-in methods such as email/password and Google sign-in, and Cloud Firestore for website account records.

Depending on how the website is hosted and operated, data may also be processed by infrastructure or hosting providers used to serve the site, monitor stability, or support security.

Account and authentication handling

If you sign in with email and password, authentication is handled through Firebase Authentication. Cardex Nepal does not intend to store plain-text passwords directly in its own website code or Firestore records.

If you sign in with Google, Firebase and Google may provide Cardex Nepal with limited profile and account information needed to authenticate you and connect that login to your Cardex Nepal account.

Support and contact data

If you contact Cardex Nepal for support, policy questions, account help, or privacy requests, Cardex Nepal may keep the information you submit for the purpose of responding, investigating issues, following up, and maintaining a support record where reasonably necessary.

You should avoid sending unnecessary sensitive personal data in support messages unless it is truly needed to understand or resolve the issue.

Sharing and disclosure

Cardex Nepal does not state that it sells personal data. Information may, however, be processed or disclosed in limited circumstances such as: operating service providers, legal compliance, protecting rights and security, or a future restructuring, sale, or transfer of the business.

Where service providers are used, they may process information only as needed to provide their services to Cardex Nepal.

Retention

Cardex Nepal may keep account and support information for as long as reasonably necessary to operate the service, maintain account continuity, handle disputes, protect security, or meet legal obligations.

If you request deletion, Cardex Nepal may still retain limited information where required for legal, fraud-prevention, security, or recordkeeping reasons.

Your rights and requests

Depending on applicable law, you may request access to your data, correction of inaccurate information, or deletion of certain information. Cardex Nepal may need to verify your identity before acting on a request.

To make a privacy-related request, use the Contact / Support page or email cardexnepal@gmail.com and clearly identify that your message is a privacy or data request.

Security

Cardex Nepal aims to use reasonable technical and operational measures appropriate for a service at its current stage, including use of established authentication and data services. However, no online system can guarantee absolute security.

You are also responsible for protecting your own account credentials, devices, and access to your login methods.

Policy updates

Cardex Nepal may update this Privacy Policy as the service changes. When the policy is updated, the revised version should be posted on this page with an updated effective or last-updated date.