Last updated September 27, 2026

Privacy policy

Leftover is made by Sang Huynh, an independent developer. This policy covers the Leftover iPhone and iPad app and this website.

The short version

Leftover has no account, no server that holds your cards, no analytics and no ads. Card numbers, PINs, photos and balances stay on your device, encrypted. We cannot see them.

What the app stores and where

Store name, card number, PIN, barcode, balances, history, dates, notes and optional photos of your cards are stored inside the app on your iPhone or iPad. Numbers, PINs, barcodes and photos are encrypted with a key kept in your device's Keychain. Deleting the app deletes this data from that device.

iCloud sync (Pro, off by default)

If you turn on iCloud sync, Apple syncs your cards between your own devices through your private iCloud database. Numbers, PINs and photos stay encrypted before they reach iCloud; the key travels only in your iCloud Keychain, which Apple encrypts end to end. We have no access to either.

Camera

The camera reads the card number, PIN and barcode on your device with Apple's Vision framework. Images are not uploaded anywhere. Photos of a card are saved only if you choose to save them, inside the app, encrypted.

Location (Near you, off by default)

If you turn on Near you, Leftover uses your location on your device to find stores near you where you have money on a card, using Apple Maps search with the store names of your cards. Your location is not sent to us. Background store alerts use location only if you allow Always.

Notifications

Reminders are scheduled on your device. Their text never includes a card number or PIN.

The store list

Once a day at most, the app downloads a public, signed list of store balance pages from this website. The request carries no card data and no identifier; the web server sees an IP address like any web request.

Check balance

When you tap Check balance, the app copies your card number to the clipboard of this device only, for 90 seconds, and opens the store's official page in Safari. What you type there is between you and the store.

Purchases

Leftover Pro is bought through Apple. We receive no name, email or card details, only Apple's confirmation.

This website

This site sets no cookies and uses no analytics, tracking pixels or forms. The web server keeps standard access logs, such as IP address, time and the page requested, for up to 14 days for security.

Children

Leftover is not directed at children under 13.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions about privacy: sanghuynhxuan@gmail.com