Last updated: 2026-09-23
Keycard Pal collects no personal data. It has no accounts, no analytics, no telemetry, no advertising SDKs, no ad networks and no tracking of any kind. Nothing you do in the app is sent to the developer. The Android app does contain links to buy a Keycard, which are affiliate links labelled as advertisements where they appear; the iOS app carries no affiliate link at all. See Affiliate links below.
Keycard Pal is a companion app for the Status Keycard NFC smart card. It signs Ethereum and Bitcoin transactions on the card and communicates with wallet software through QR codes. Private keys never leave the Keycard.
None. The app sends the developer no data: no identifiers, no usage statistics, no addresses, no transaction contents. The app contains no crash reporting. If you opt in to Apple's or Google Play's analytics sharing, those platforms may show the developer aggregated crash data under their own privacy policies.
One qualification, for completeness: on Android, tapping a link to where Keycards are sold opens the Keycard shop in your browser with a referral code attached, and the shop reports sales made through it to the developer. That report contains no personal data about you, only the fact that a sale happened. The app itself still sends nothing. The iOS app has no referral code, so there is nothing to report.
This data never leaves your device and is deleted when you uninstall the app.
Every network-using feature is disabled by default and used only if you turn it on in Settings. When enabled, the app talks directly to the services listed below. None of this traffic passes through, or is visible to, the developer:
Those services see the requests you send them under their own privacy policies. A separate Android-only variant, Keycard Pal Offline, has no network permission at all.
Android only. The iOS app points at the Keycard product site,
keycard.tech, with no referral code, so nothing is reported back. The
paragraphs about opening the link and about no feature depending on it apply on both.
Advertisement. On Android, the links to where Keycards are sold carry a referral code, and the developer earns a commission on purchases made through them. Every one of those links is labelled as an advertisement where it appears.
The links open the Keycard shop in your browser, or show the address as a QR code when the phone has no network connection. Once the shop is open you are on their site under their privacy policy, and whatever they set in your browser is theirs, not the app's. The developer learns only that a sale was attributed to the referral code, never who made it.
Nothing in the app depends on using those links. Every feature works the same with a Keycard bought anywhere.
The About screen shows cryptocurrency addresses you can copy if you want to send the developer something. They are entirely voluntary, and nothing in the app is unlocked, changed or promised in return.
Be aware of what a donation reveals, which is a property of public blockchains rather than of this app: a transfer is visible to anyone and permanent, and because the same address is shown to everyone, donations sent to it can be seen alongside each other. The app collects nothing and sends nothing when you copy an address.
The app is a financial tool intended for adults (18+). It is not directed at children.
Changes to this policy will be posted at this address. The source of the app, and of this page, is public at github.com/mmlado/keycard-pal.
Questions: open an issue at github.com/mmlado/keycard-pal/issues.