Privacy, clearly explained.

CARDNUVIO FOR ANDROID · BUG MARS INC. Privacy, clearly explained. How CardNuvio for Android handles information. Effective September 11, 2026. Operator: Bug Mars Inc., Canada. Google Play developer name: BugMars. Contact: troy.ulysses@bugmars.buzz. Our service and markets CardNuvio purchases eligible, legally owned gift cards at a quote accepted by the customer, then earns revenue from the margin on subsequent resale. Any additional transaction or withdrawal fees are disclosed before confirmation. The service is intended for adults aged 18 or older in Nigeria and Ghana. Gift-card issuing countries do not expand the supported customer markets. Information processed Account information: email address, account identifier, password or verification information used for authentication, name or nickname, optional profile image and optional WhatsApp phone number. Gift cards and trading: brand, issuing country, card type, face value, card images and redemption details you submit, quotes, order status and transaction records. Balances and payouts: bank name, bank-account number, account-holder name, balance, withdrawal history and transaction PIN information used to authorize sensitive actions. Customer support: messages, attachments and account context you provide when asking for help. Technical information: network requests, IP address, request timestamps and device or browser information processed by our service and embedded support providers to deliver and secure their services. Optional information is provided by your choice. Account details are needed for signed-in functions; payout details are needed for withdrawals. Images are selected through the Android system picker. The app does not request broad access to your contacts, precise location, microphone or photo library. How information is used Register and authenticate accounts and provide account recovery. Evaluate gift cards, provide quotes, process accepted trades and display transaction history. Check bank details, authorize withdrawal requests and process payouts. Deliver eligible rewards, notices and customer support. Investigate disputes or suspicious activity and meet applicable recordkeeping obligations. Service providers and disclosures The app communicates with the CardCocoa backend infrastructure at cardcocoax.com. Uploaded images are processed using Amazon S3 storage and CloudFront delivery. SaleSmartly provides embedded customer support and receives account identifiers and names used to identify signed-in customers, together with messages and attachments supplied to support. This website uses Vercel hosting. Banks and payout providers receive details needed to validate payout accounts and execute transfers. Card validation or resale counterparties may receive submitted gift-card details needed to assess or complete a trade. Information may also be disclosed when required by law or to resolve disputes and protect rights. These disclosures should be limited to their stated purposes. We do not sell personal information as our business model. Account verification and KYC The current Android app includes email verification and bank-account detail checks. These are not represented as a complete document-based KYC programme. No claim is made that biometric verification, identity-document screening or a certified KYC provider is already integrated. If additional identity verification is introduced, a separate notice must explain what information is required, who processes it, why and for how long. Do not send identity documents to this website or by ordinary email. Security and international processing The app uses HTTPS for service requests. Login session information stored by the Android app is encrypted using Android Keystore-backed storage, and Android application backup is disabled. Keep your password, transaction PIN and verification codes private. No security measure can guarantee absolute protection. Our operator and service providers may process data outside your country, including outside Nigeria and Ghana. Contact us for information about recipients and safeguards relevant to your data. Retention and deletion Information is retained as needed for account operation, completion of trades, payout reconciliation, dispute resolution, security and applicable legal obligations. Retention varies by type of information and outstanding obligations. You can request deletion in Settings → Delete Account, or use our account and data deletion webpage without installing the app. Deletion covers your account and associated personal data, subject to records that must remain for legitimate legal, transaction or security reasons. Contact us for the categories retained, reasons and relevant retention periods. Optional data may also be the subject of a separate deletion request. Your choices Contact troy.ulysses@bugmars.buzz to request access, correction or deletion, or ask about processing and any rights available under applicable law. Use your registered email where possible. Proportionate identity checks may be necessary to protect your account. Do not send passwords, PINs or verification codes to support. Advertising and children The Android app does not include an advertising SDK or sell paid digital features. This public website has no added advertising pixels or analytics scripts. Embedded support services process operational data as explained above. The service is not directed at children under 18. Changes and contact We may update this policy as the service changes. The date at the top identifies the current version. Questions about CardNuvio Android privacy or account deletion should be directed to Bug Mars Inc. at troy.ulysses@bugmars.buzz.