Privacy policy

Last updated 22 June 2026 · applies to the Cardpile iOS app and this website.

The short version

We collect nothing. Cardpile has no accounts, no analytics, no tracking and no servers of ours. Your decks and cards are stored on your device and — if you enable sync — in your own iCloud, which only you can access.

What the app stores, and where

Your decks and cards stay on your iPhone. With sync enabled, Apple’s iCloud (CloudKit) replicates them across your own devices inside your own iCloud account. We have no routine access to it and cannot read it. Decks you import from an Anki .apkg are processed entirely on your device.
Purchases are processed by Apple. We receive no name, address or payment details.
App Store privacy label: Data Not Collected — and this policy is written to match it exactly.

Sync, and who is responsible for it

When you turn sync on, your data is stored in your own iCloud account (the CloudKit private database). For that app data, Oomny B.V. is the data controller and Apple acts as our processor, storing and syncing the data on your behalf under Apple’s terms and iCloud security. Because the data lives in your account, the simplest way to access, export or delete it is on your own devices and in your iCloud settings; if you need help exercising a right, contact us. Where Apple processes this data outside the EEA, the transfer relies on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

This website

No cookies, no analytics, no embedded third-party content. The web server keeps standard technical access logs (IP address, time, page) for operation and security, retained briefly and used for nothing else (our legitimate interest in running and protecting the site).

Your rights (GDPR)

You have the full set of rights under the GDPR — access, rectification, erasure, restriction, objection and portability — over any personal data we process. For your app data, that lives in your own iCloud and is yours to access and delete directly; for anything else, contact us and we’ll respond promptly.

Who we are

Cardpile is published by oomny — the trade name of Oomny B.V., the studio behind the app and the data controller. Company details:

Legal name: Oomny B.V. (Besloten Vennootschap)
Registered office: Suezkade 128, 2517 CC 's-Gravenhage, Netherlands
Chamber of Commerce (KvK): 88737365
VAT identification (btw-id): NL864757062B01
Email: support@oomny.eu · privacy: privacy@oomny.eu
Phone: +31 6 12324444

Privacy contact: privacy@oomny.eu. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or the authority in your own EU/EEA country.

Children

Cardpile is not directed at children and we do not knowingly collect data from anyone under 16.

Changes

If we change this policy we will update this page and the date at the top.