Loading
Loading
ShapeCard is a financial technology company, not a bank. Banking services and cards will be provided by our bank partner (Pending bank partner).
shapecard.ai ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you apply for or use our debit and credit card products and services. By using our services, you agree to the collection and use of information in accordance with this policy.
We collect several types of information in order to provide and improve our services to you:
shapecard.ai uses the collected data for the following purposes:
The security of your personal data is important to us. Sensitive identifiers such as your SSN are encrypted at rest using AES-256-GCM. We use industry-standard encryption and security measures to protect your information during transmission and storage. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
We may disclose your personal information in the following circumstances:
The optional Spend map draws its background map from OpenFreeMap, a third-party map tile service. When you open the map, your browser or the app requests the map tiles for the area on screen directly from that service, which therefore receives your IP address and the coordinates of the map tiles you view. It does not receive your name, account, purchase details, or any purchase location; we send no account identifier or cookie with those requests. If your browser can't show that map, the Spend map on the web may instead draw a flat map from our own map file at tiles.shapecard.ai, which Cloudflare hosts for us. Those requests carry the same information (your IP address and the part of the map you view) and nothing more. If you never open the Spend map, no request is made. Precise purchase locations are only kept when you turn on "Spend map locations" in Settings, and turning it off deletes them.
The statement backtest reads the statements you drop in your browser. We also receive a copy of each statement and use it to improve how we read statements. A statement dropped on the public backtest page is not tied to you and is deleted within 90 days.
When joining the waitlist asks for a statement, the statements you upload there, the purchases we read from them and the rules the backtest proposes are kept with your email address so that your demo starts with your own spending, and the files are used to improve how we read statements. We keep them for 24 months after your last activity with us, or until you ask us to delete them by emailing support@shapecard.ai. When you claim a demo, the purchases are copied into your demo workspace, where they are deleted with it.
You have the following rights regarding your personal data:
For details on the cookies we set and how to change your analytics choice, see our Cookie Policy.
We send two kinds of text messages. When you verify your mobile number with ShapeCard, we send one-time verification codes by SMS. If you opt in to ShapeCard Updates, our optional marketing texts, we also send product news and occasional offers, up to 4 messages per month. When you opt in or opt out on our website or in Settings, we record the number, the time, the page, your IP address and browser, and the wording you agreed to, except for opt-ins on the waitlist form, where we keep only a keyed one-way hash of your IP address and not the address itself, as our Waitlist section describes. Replying STOP to any of our texts stops messages immediately through our messaging provider's opt-out list. We use these records only to send the messages you asked for, to honor your choices, and to show consent if asked. The following applies to our text messages:
You can stop ShapeCard Updates at any time by replying STOP to any message or by turning texts off in your account Settings. Opting out of marketing texts does not stop the verification codes you request.
For message frequency, rates, and STOP/HELP instructions, see our SMS Messaging Terms & Conditions.
The ShapeCard waitlist form is run by ShapeCard. It is served from shapecard.ai, and what you submit is sent directly to our servers and stored in our own database. No third-party form service receives your answers. If you joined through our earlier, externally hosted waitlist form, we copy your email address, the audience you chose, whether you agreed to product updates there, and the date you signed up into the same database, and this section applies to that information too. We do not copy your other answers to that form.
ShapeCard is offered only in the United States. Anyone may join the waitlist, but at this moment we can only offer access to people in the United States.
When you join the waitlist we collect:
We use this information to run the waitlist: to decide when to offer you access, to email you about it, to understand which audiences and pages bring people to ShapeCard, and to keep automated sign-ups out. When you join, we send you one email confirming that you are on the list, and we email you again when your access is ready. Waitlist emails are delivered through Amazon Web Services. If the form shows a human verification check, that check is provided by Cloudflare Turnstile. We do not sell waitlist information or share it with third parties for their own marketing.
The form includes an optional checkbox to receive product updates by email, about once a week. In the United States the box starts checked. Everywhere else, and wherever we cannot tell your country, it starts unchecked. Either way you can change it before you submit. We send these updates only if the box is checked when you submit the form and you then confirm, using the link in the email we send to that address, that the request came from you. Until you confirm, we send you no updates. We keep a record of the text you agreed to, the country we detected, when you submitted the form and when you confirmed. If you joined through our earlier form, the record is the question and answer you gave there. Every update includes an unsubscribe link. Using it stops further updates, and joining the waitlist again later does not sign you back up; only the unsubscribe page itself can turn updates back on. Unsubscribing does not remove you from the waitlist.
To see, correct, or delete your waitlist information, contact us at the address in the Contact Us section below.
When you claim a demo from your invitation link, we create an account for you with your name, email address and mobile number and the password you choose. The sample cardholder, cards and purchase history in your demo are sample data on a test card network. They are not a financial product, no money moves, and the sample cardholder is not a real person. If you uploaded a statement to join the waitlist, the purchases we read from it are copied into the sample and are deleted with it. Archiving the sample hides it; deleting the sample removes it. Your login stays until you close your account, and applying for your own card from the demo keeps the same login.
The Spend map is an optional view in the ShapeCard portal and app that shows where your card purchases were made, at the merchant's city, or, for in-person purchases made while "Spend map locations" is on in Settings, at the approximate place your phone recorded (see Map tiles above). Some of the features in this section are not available to every account yet. This section describes how each one works when it is available to you.
Spend map locations has a separate setting for declined attempts, which is off unless you turn it on. While both are on and an in-person card purchase is declined, we keep the approximate location (to about 100 meters) that the ShapeCard app on your phone last reported, if it is less than an hour old, so that your Spend map can show where the attempt happened, as we do for approved purchases. These locations are shown only to you. An Approver who manages your card never sees them, although the Approver may see declined attempts on that card on the Spend map, placed at the merchant's city. Turning off the declined attempts setting deletes the declined-attempt locations we kept, and turning off Spend map locations deletes them together with every other saved purchase location.
The Spend map can group purchases made away from home into trips. Trips are worked out from your purchases each time the map is shown and are not stored, except for the figures on a postcard you share (see Postcards under ShapeCard Community). To find them we guess your home city from your purchases. If you set your home city yourself, we keep it with your settings until you clear it. An Approver who manages your card may see trips on that card and a guess of your home city, both worked out only from the merchant cities the Approver can already see, but never sees the home city you set.
You can mark an area as a quiet zone, either an area you draw on the map or a whole city, to count the days since your last purchase there. For each zone we keep the private name you give it, its center and size or its city, which of your cards it counts, and the most recent purchase we found inside it and when it was made. A zone counts only settled purchases on cards you hold yourself, never purchases on a card you manage for someone else, and never online purchases. A small zone counts only purchases placed by the locations your phone recorded with Spend map locations. A zone's private name and where it is are shown only to you: never to an Approver, never to other members, and never in a notification. You can choose to share a zone's progress with a group you have joined; see Groups under ShapeCard Community.
If a zone is centered on a location your phone recorded, turning off Spend map locations deletes the zone, together with your saved purchase locations and any sharing of that zone. Zones centered on a city, or on a point you chose on the map, are kept, together with the most recent purchase found inside them, but small zones stop counting purchases until you turn Spend map locations back on. You can delete a zone at any time. A deleted zone stops counting and leaves your map, and we keep its record until your ShapeCard account is deleted, unless it is deleted earlier as described above.
ShapeCard Community is an optional social feature inside the ShapeCard app. Nothing in this section applies unless you choose to join by creating a Community profile, and nothing about your purchases is shared until you also create a share rule, share a single purchase or a postcard yourself, or share a quiet zone with a group. If you never join, we collect none of the information described here.
When you take part in Community we collect:
Your handle, display name, avatar and bio, whether your account is private, and your follower and following counts are visible to the signed-in Community members your profile visibility allows, including members who have no ShapeCard card:
Whatever you choose, members who already follow you, and members you follow or have asked to follow, can still see your profile, and your handle, display name, avatar and bio appear next to the items you share, the replies you write, and in the member list of a group you join. A member your profile visibility does not allow cannot open your profile or browse your shared items from it. You can change your profile visibility at any time. Shared items are shown according to the audience of the rule that matched, or the audience you chose when you shared a purchase yourself:
There is no public web page for Community; items are shown only inside the ShapeCard app to signed-in members. Items appear automatically: once a rule exists, every matching purchase is shared after it settles, without a separate post from you each time.
You can also share a single settled purchase yourself, from that purchase in the app, with your accepted followers or, if your account is not private, with everyone. Before it is shared you see the post as others will, choose whether it shows the amount and the city, may add a caption, and agree to the terms shown on screen. A purchase is shared at most once, whether by a rule or by you. Supervised cardholders share only through share rules.
A shared item never shows your card number or any part of it, your card's internal identifiers or nickname, the name of your Approver, the contents of your spending rules or share rules, the merchant's street address, the amount unless you turned amounts on, or any purchase that did not match one of your rules and that you did not share yourself. A postcard you share is built from the purchases on your own cards in its year, but shows only what is described under Postcards below, never an individual purchase.
A group is a private space for up to 8 people, counting its owner and anyone with a pending invite. Groups are invite only: the owner invites people by their handle, and cannot invite someone either of them has blocked. Joining needs your agreement: an invite does not show you the group's posts or members until you accept it and agree to the terms shown on screen, and you can decline it instead.
Purchases shared with a group, and the replies under them, are visible only to the group's joined members; a pending invite is not enough. Joined members see each other's profiles, and the profiles of people with a pending invite, in the group's member list. Blocking still applies inside a group: members who have blocked each other do not see each other's items, replies, or profiles there, with one exception. A group's owner still sees the handle, and nothing else of the profile, of any member or invitee either of them has blocked, in the group's member list, so the owner can remove them or cancel the invite.
If you leave a group, or its owner removes you, you stop seeing it at once, your share rules that target it stop, and the items you shared there stop showing to its members. If the owner deletes a group, its posts are hidden from every member at once and every share rule that targets it stops. The owner can rename the group, invite or remove members, and delete it, but cannot leave it without deleting it. If the owner's ShapeCard account is deleted, the group is erased with it, together with everything every member shared there, as described under How Community data is used and kept.
Where available, joined members can also open a map of the group. It shows the purchases shared with the group, placed at the city shown on each post and grouped by city, with the total of the amounts members chose to show and how many posts each member shared. The map shows only posts a member can already see in the group, with the same details, and never a location more precise than a city or an amount its sharer did not show.
Where available, you can also share a quiet zone (see Quiet zones under Spend Map) with a group you have joined, after agreeing to the terms shown on screen. The group's joined members then see the name you choose to share for it, which is not its private name, and either each milestone you reach (such as 30 quiet days) or, if you choose, your current number of quiet days, updated once a day, which shows when your streak restarts. If you share milestones only, the group is told that your streak restarted only if you turn that on, but milestones count from your last restart, so a milestone the group sees after a restart (such as 1 quiet day again) shows that it restarted. They never see where the zone is or what you bought there. If a shared zone pauses because it can no longer count purchases, the group sees that it is paused. If you stop sharing, delete the zone, or leave the group, the group stops getting updates about it. Members of the group may get a push notification when you reach a milestone (see Push notifications below). Supervised cardholders cannot share quiet zones.
Notifications about group invites and new group members are push notifications. You can stop them, together with ShapeCard's other push notifications, by turning off notifications for ShapeCard in your device's settings. Reports about a group are reviewed by ShapeCard staff, as described under Moderation.
Where available, the Spend map can make a "year in places" postcard: a picture of the cities and countries where you made card purchases in one calendar year. It is built only from the merchant's city of each purchase on cards you hold yourself, never from locations your phone recorded and never from a card you manage for someone else. We leave off the cities near the place we take to be your home, which is our guess from your purchases unless you set your home city yourself. Before you download or share a postcard you see it, and you can remove any city from it. Making or downloading a postcard shares nothing.
You can share a postcard with your accepted followers or, if your account is not private, with everyone, after agreeing to the terms shown on screen, and you can have one shared postcard for each year at a time. A shared postcard shows the year; the cities and countries on it and where each one sits on the picture (positions on the picture, not map coordinates); how many days you made purchases in each of those cities; how many cities, states and countries it covers; the length in days of your longest trip; any caption you add; and a total amount for the year only if you turn it on. It never shows individual purchases, merchants, an amount for any city, dates other than the year, or any location more precise than a city. Supervised cardholders cannot share postcards. A shared postcard is a shared item: you can delete it at any time, and it is kept and erased like other shared items, as described under How Community data is used and kept.
Where available, City Explore shows signed-in Community members, on the Spend map, where ShapeCard members share purchases in each city. It uses only purchases shared with everyone by members whose account is not private and whose profile visibility is Everyone. Purchases shared with followers or with a group are never used, and private accounts, members whose profile visibility is My contacts or Contacts I approve, and supervised cardholders never take part. A shared purchase counts only from 24 hours after it was made, and only for 90 days.
For each city, City Explore shows the merchants and spending categories members shared most and how many members shared there, as rounded ranges (for example, "10+ people") rather than exact numbers. Its counts never include amounts or how often anyone buys. A city, merchant or category is shown only once enough different members have shared there. A smaller town is never named or placed on the map: its members count only toward a statewide line that shows spending categories and no merchants. These counts are the same for every member who looks, and are rebuilt about once a day. In cities where many members share, City Explore may also list recent purchases shared with everyone, as they appear in Community, with the sharer's handle and the amount only if the sharer chose to show it, to members who are already allowed to see them.
To build City Explore we keep a separate copy of the merchant, its city and state, the spending category and the date of each shared purchase that may count. We may delete that copy sooner, and it is erased at the latest when the shared purchase is erased. If your account is not private and your profile visibility is Everyone, your purchases shared with everyone take part unless you turn off "Show my public shares in Explore" in your Community profile. Turning it off, making your account private, changing your profile visibility, or hiding or deleting an item removes your purchases from City Explore's lists at once and from its counts, usually within a day. Your shared items stay on your profile and in feeds as before. ShapeCard staff can also remove an item, a member, or a merchant in a city from City Explore, for example after a report, without changing what your followers see.
A cardholder whose card is managed by an Approver (for example a teen on a parent's account; supervised cardholders can be as young as 13) cannot use Community until the Approver turns it on for that card. While it is on, the cardholder's account is always private, their rules can share only with accepted followers or with groups they have joined, and never with everyone, they cannot share a single purchase by hand, a postcard, or a quiet zone, their replies can be seen by the person whose purchase they reply to and by their accepted followers (and, under a group's posts, by that group's joined members), and the Approver can turn Community off at any time, which hides everything the cardholder has shared, replies included, until it is turned back on. That includes the name of any group the cardholder owns: its other members keep using the group, which they see as "A group" until then. The Approver can see whether Community is on for the card; the Approver does not see the cardholder's items, captions, replies, or followers through ShapeCard. Where City Explore is available, a supervised cardholder can browse it, but their purchases never count toward it. ShapeCard does not knowingly allow anyone under 13 to create a Community profile.
If you enabled push notifications, we send one to your own devices when someone requests to follow you, accepts your request, cheers one of your items, replies to one of your items, invites you to a group, or joins a group you own. The notification carries the other member's handle and, for a cheer or a reply, the merchant's name, or for a group invite or a new group member, the group's name, and nothing else; it never includes the text of a reply. Where shared quiet zones are available, we also send one when a member of a group you belong to reaches a milestone on a quiet zone they share with it, which carries their handle and may carry the group's name, the number of quiet days, and the name they chose to share for the zone, and one to you alone when the streak of a quiet zone you share restarts, which names no zone. No notification ever says where a zone is. Notifications are delivered through Expo's push service, which receives your device's push token and that message text.
When a member, item, reply, group, or shared quiet zone is reported, ShapeCard staff review the report in an internal queue that shows the reporter's handle, the reason given, and the reported member's handle, the reported item (merchant, city, caption and owner), or the reported reply (its full text and its author's handle), or the reported group (its name, its owner's handle, and whether it was deleted), or the reported shared quiet zone (including the name shared for it and its owner's handle). Staff see a reported reply's text even if its author or the person who shared the purchase has deleted it, or we have hidden it, unless it has been erased as described under How Community data is used and kept: the report is kept, but erased content can no longer be shown to staff. We may hide or remove content, remove content or members from City Explore, end a shared quiet zone, or suspend Community access in response. Follow requests, cheers, replies, reports, rule changes, group creation, and group invites are rate-limited to prevent abuse.
We use Community information only to run the feature: deciding what to show to whom, delivering the notifications above, and handling reports. It is never used to decide whether a purchase is approved, to set your credit terms, or for advertising, and we do not sell it or share it with third parties for their own purposes. Hidden and deleted items, deleted rules, and hidden and deleted replies are kept internally, never shown to members, so that you can unhide items and so that reports can be reviewed. Deleting a reply removes it from the app but does not erase it: its full text and author are kept until your ShapeCard account is deleted, or the purchase it was left on is erased, as described below, and staff can see it if it is reported. Deleted groups are kept internally, never shown to members, so that reports about them can be reviewed, until the owner's ShapeCard account is deleted. Nothing you do in Community changes the underlying card transaction. To have your Community profile and everything attached to it removed, contact us at the address below; closing your ShapeCard account removes it as well. Community records are erased when the ShapeCard account they belong to is deleted, not when a Community profile alone is removed. Synced phone contacts and the code for your own verified number are an exception: they are erased when you remove them, when you sync again (each sync replaces the last), or when you leave Community. Deleting an account erases the purchases it shared, and every reply and cheer under them, whoever wrote them, including deleted and reported replies. Deleting the account of a group's owner also erases the group and everything shared with it: the items every member shared there, the replies and cheers under them (again including deleted and reported replies), and every share rule that targets it. Reports about erased content are kept, but staff can no longer see the content. Shared postcards are kept and erased in the same way as shared purchases. Records of quiet zones you shared with a group, including ones you stopped sharing, and their milestones and restarts, are another exception: they are kept internally until your ShapeCard account is deleted, or until the zone or the group is erased, if that comes first. Consent records are retained as evidence of consent.
A person who joins Community without a ShapeCard card (a "friend" account) has a profile and connections and can write replies, but shares no purchases; everything above about profiles, follows, blocks, mutes, cheers, replies, and reports applies to them, including how replies are shown, deleted, and kept. They can also create and join groups, as described above, but have no purchases to share with them.
Community is also governed by the ShapeCard Community section of our Cardholder Agreement.
If we add Community features such as discovery feeds, exact merchant locations, real-time sharing, or photos, we will update this section before they are available.
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at support@shapecard.ai.
By mail: ShapeCard LLC, 18 Timberline Rd, Norwalk, CT 06854.
Last updated: October 28, 2026