Policy

Privacy Policy

Effective date: 9 October 2026

This policy explains what information Crino collects about you, why, who it is shared with, how long it is kept, and the control you have over it. It forms part of the Terms of Service.

Crino is a subscription service for individuals. It reads published card, benefit, and loyalty program terms, applies them to the cards and balances you tell us about, and tells you what it believes the better available option is. Almost everything Crino knows about you is something you typed in.

The short version

We do not connect to your accounts.	Crino never asks for the username or password to a card, bank, airline, or hotel account, and has no ability to sign in to one. You enter your balances yourself.
We hold no card numbers and no transactions.	Payments are handled by our payment processor. Crino never sees or stores a card number, and has no view of what you spend or where.
We do not sell your information, and we never put it into advertising.	What you tell us about your cards, balances, and goals is used to advise you and for nothing else. That one is permanent.
We hold no sensitive personal information.	No government identifiers, no precise location, no health, biometric, or demographic data. See Section 4.
Asked us to email your card check?	We keep your email address and the cards you picked, send you the result and at most three short notes about those cards, and delete the record within twelve months. You do not become a member. See Sections 3 and 9.
You can export or delete everything.	Ask us and we will send you a full copy, or erase every record we hold. See Section 11.

Who this applies to

This policy applies to Crino LLC (“Crino,” “we,” “us”) and to the Crino website, the free card check, the intake form, and the member dashboard (together, the “Services”). Crino is the controller of the information described here.

It does not apply to the card issuers, banks, airlines, hotels, or loyalty programs whose terms Crino reads and whose products it discusses. Crino has no relationship with those companies on your behalf, no access to your accounts with them, and no ability to act with them for you. When you follow a recommendation, you are dealing with them directly and under their own privacy policies.

Two kinds of information, held to two different standards

This policy draws a line that most privacy policies do not, and the rest of it only makes sense once the line is clear.

Member information is what you tell us and what we work out from it: your cards, your balances, your goals, your preferences, and the recommendations we issue you. The commitments we make about this are permanent. It is never sold, never used for advertising, and never fed to anyone who is not helping us run the service.
Visitor information is the ordinary, anonymous record of someone browsing the public website — which page, which referring link, roughly where in the world. It identifies nobody and contains no member information. How we measure it is a practical question that will change as the business grows, and Section 7 says what we do today and what we will do if that changes.

One narrower kind sits between the two. If you use the free card check on our website and ask us to email you the result, we hold your email address and the cards you selected, even though you are not a member. That information is held to the member standard: never sold, never used for advertising, and never shared beyond the providers in Section 8. Section 3 lists exactly what we keep, and Section 9 how long.

Keeping the two apart is what lets us be absolute where it matters. We can promise, without reservation and forever, that your card portfolio will never touch an advertising system — and separately tell you honestly that we may one day measure which version of a landing page works better.

One further commitment sits underneath both. Crino does not link to your financial accounts: no aggregation, no screen-scraping, no open-banking connection, and no credential storage of any kind. That removes the most severe category of breach entirely, at the cost of asking you to enter balances yourself. It is a deliberate design decision, not a limitation we intend to grow out of.

What we collect

Almost all of it you give us directly, either through the intake form or in the dashboard. The table below is the complete picture.

Category	What it actually is	Why we hold it
Identity and contact	Your name and email address.	To create and secure your account, to send service messages, renewal reminders, and recommendations.
Your cards	Which cards you hold, when each was opened or closed, the annual fee you pay, the fee due date, and the number of authorized users on a card (a count, not names).	To work out which benefits apply to you, what is about to expire, and whether a card earns its fee.
Your balances and status	Points and miles balances you enter for each program, when you last confirmed them, and any elite status you report.	To work out what your goals cost and which currency to spend first. You enter these; we do not read them from anywhere.
Your goals	Where you want to go, from which airport, in which cabin, for how many passengers, on roughly what date, for how many nights, and which hotel program or category you have in mind.	To work out whether a trip is fundable and by which route.
Your travel profile	Home airports, typical cabin, trips per year, an approximate annual travel spend, a monthly card-spend band, broad spend categories, whether you have business income and of what general kind, how many people you usually travel with, and travel constraints chosen from a fixed list.	To rank recommendations against how you actually travel, and to suppress the ones that do not fit.
Your preferences	How much promotional news you want, and which benefits you have marked as ones you will never use.	To decide what reaches you. A benefit you rule out stops counting toward what we say a card is worth.
How you found us	Your answer to “How you found us,” if you give one, and the campaign tag of the link you arrived on (for example, that it came from a LinkedIn post), which travels with you from the card check through checkout.	To learn which ways of reaching people actually work. It is counted, never shared, and never used to advertise to you.
Your answers	Whether you used a benefit, what it was worth to you, and whether you accepted, declined, or deferred a recommendation, with the reason.	To keep your figures accurate and to measure whether our recommendations were right.
What we produce	The recommendations we issue you, the evidence behind each, what we rejected, and what happened afterwards.	So that any recommendation can be reviewed later against the rules that applied at the time, and so we can publish honest accuracy statistics.
Account and technical	Sign-in events, session information, and standard server logs including IP address and browser type.	To keep the account secure, diagnose faults, and prevent abuse.
Billing	Your subscription status, plan, and renewal date, together with a token and the last four digits of your payment card supplied by our payment processor.	To take payment and manage your subscription. The card number itself never reaches Crino.

If you ask for your card check by email. You do not need an account to use the card check, and asking for the result does not create one. If you ask, we keep only the following:

Category	What it actually is	Why we hold it
Email address	The address you type into the box.	To send you the result you asked for, and at most three short follow-up notes about the cards you selected. Every one carries a one-click unsubscribe.
Your card check	The cards you selected, the two figures we showed you, and the date of the catalog they came from.	So the email shows exactly what you saw on the page.
The link you came from	The campaign tag of the link you arrived on, if it had one.	To learn which channels reach people.
Your request	The exact words shown beside the email box when you asked, and when you asked.	So we can show what you asked for and what you were told.
An abuse safeguard	A one-way, salted hash of your IP address. It cannot be turned back into the address.	To limit how often the box can be used from one place, so no one can use it to fill someone else’s inbox.

Free-text notes. A few places in the product let you type a free-form note. Please do not put anything sensitive in them. Nothing in the product asks you to, and nothing in the product needs it.

What we deliberately do not collect

This section is as important as the last one, and we intend to be held to it. Everything in it is permanent unless this policy says otherwise.

No credentials. We never ask for, receive, or store the username, password, PIN, or security answers for any card, bank, airline, hotel, or other account.
No card or account numbers. Payment card details go directly to our payment processor. Crino stores a token and the last four digits, nothing more.
No transaction data. We have no view of your statements, purchases, merchants, or balances owed. When the product asks whether you used a credit, it is asking you, because it cannot see.
No sensitive personal information as California defines it. No Social Security, driver’s licence, or passport numbers; no precise geolocation; no racial or ethnic origin, religious beliefs, or union membership; no health, genetic, or biometric data; no sexual orientation; and no contents of your mail, email, or messages. The travel constraints you can record are chosen from a fixed list about seating and connections, not about you.
No names of other people. Where the product needs to know that you travel with someone, it records a category such as “me and one other adult.” It does not ask who they are.
No information bought about you. We do not purchase data from brokers, and we do not enrich what you give us from outside sources.

Member information is never used for advertising. This is the commitment we will not qualify and do not intend to revisit: your cards, balances, goals, recommendations, and answers are used to advise you and to improve the service, and are never disclosed to an advertising network, data broker, or any party whose products we evaluate, and never used to build or enrich an advertising or marketing profile of you anywhere. It holds regardless of what measurement tools we may use on the public website in future, and regardless of any commercial relationship Crino may enter.

Measurement of the public website is a separate matter, described in Section 7. It concerns anonymous visitors, not members, and it is the one area of this policy where our practice may change as the business grows.

Where the information comes from

From you, through the card check, the intake form and the dashboard. From your use of the Services, in the form of sign-in and session records and server logs. And from our payment processor, in the form of subscription status and the last four digits of your card.

We do not obtain information about you from data brokers, advertising networks, credit bureaux, or any card issuer or loyalty program.

How we use it

We use your information to:

Provide the Services — work out what applies to you, what is expiring, what a goal costs, and what we think you should do.
Decide what reaches you, and suppress what does not apply. Most of the work the product does is deciding not to tell you something.
Operate your subscription — take payment, send renewal reminders, and handle cancellation.
Send service messages about deadlines, changes affecting cards you hold, corrections, and account or security matters.
Keep the Services secure, prevent fraud and abuse, and diagnose faults.
Measure whether our recommendations were right, and publish accuracy statistics in aggregate and anonymized form.
Send a card-check result to someone who asks for it, followed by at most three short notes about the same cards, each with a one-click unsubscribe.
Learn which channels bring people to Crino, from answers to “How you found us” and the campaign tags of the links people arrive on. This is counted in aggregate; it is not used to target anyone.
Improve the catalog and the product. Where a member’s question reveals a rule we had not recorded, we write the rule into the catalog. The rule is recorded; the member is not.
Meet legal obligations and enforce our terms.

We do not use member information to build advertising or marketing profiles, and we do not make decisions about you that produce legal or similarly significant effects without a person involved. Recommendations are proposals; you decide and you act.

We do not use your information to train general-purpose machine-learning models, and we do not send it to any third party for that purpose.

Cookies and measuring the website

What we do today. The Crino public website currently sets no cookies and loads no third-party advertising or tracking scripts. Where we measure how the website is used, we currently do so with aggregate, cookieless measurement that records page views, referring sites, and approximate country, and that does not identify you, follow you between websites, or store anything on your device.

The card check and the sign-up page keep two small pieces of information in your browser’s session storage, for that browser tab only: the campaign tag of the link you arrived on, so that it can be recorded if you join, and the email address you paid with, so that the sign-in box can be filled in for you once. Both are first-party, are never read by anyone else, and are deleted when you close the tab. Neither is a cookie, and neither is used for advertising or to follow you between websites.

The member dashboard uses strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. These cannot be switched off without the product ceasing to work. They are not used for advertising, profiling, or cross-site tracking.

What may change. As Crino grows we may introduce more capable measurement of the public website — for example, to understand which sources bring people to us, or where in signing up people get stuck. That work concerns anonymous visitors, not members, and Section 4 continues to apply in full to member information regardless.

If we introduce anything that stores information on your device or shares visitor information with a measurement provider beyond what is described above, we will: update this policy and its effective date before it takes effect; identify the provider in Section 8; give you a clear way to refuse it that does not degrade the Services; and, where the law requires consent rather than the opportunity to refuse, ask for consent first rather than infer it from your continued use.

We will not use any such tool to record what you type, to replay your session, or to connect a visit to a member’s portfolio. Those are excluded permanently, not pending review.

Your controls. We honour the Global Privacy Control and similar browser signals, and we do so today even though we currently sell and share nothing that such a signal would apply to. If we introduce measurement that qualifies as sharing for cross-context behavioural advertising under California law, that signal will operate as an opt-out and we will also publish a direct opt-out link.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done either.

We share it only with the service providers we need to run the business, each under contract, each limited to what its job requires, and none permitted to use it for its own purposes:

Provider	What it does	What it can see
Supabase	Hosts the database that holds member and card-check records.	All information described in Section 3.
Cloudflare	Hosts and serves the website and application.	Network and request data, including IP addresses.
Stripe	Takes payment and manages subscriptions.	Your name, email, billing details, and payment card. Crino receives a token and the last four digits, never the card number.
Google Workspace	Hosts Crino’s mailboxes, including support, privacy and legal.	Your name, email address, and the contents of messages you send to those mailboxes or receive from them.
Resend	Delivers sign-in links, card-check results, and service, recommendation and billing emails.	Your name, email address, the contents of the emails we send you, and whether each one was delivered, bounced or reported as spam.
Airtable	Holds the card, benefit, program, and pricing catalog that the product reads from.	No member information. The catalog describes cards and programs, not people.

Brand partners. If Crino ever works with a brand partner, as the Terms of Service allow, the partner receives no personal information of any kind: no member or card-check information, no lists, no audience matching, and no reporting about individuals. A partner is never given code to run on our pages.

We may also disclose information where the law requires it, in response to a valid legal process, to protect the rights or safety of members or the public, or to establish or defend a legal claim. If Crino is acquired or merges with another company, information may transfer as part of that transaction; we will tell you before it does, and this policy will continue to apply until it is replaced.

We do not transfer member information outside the United States other than through the providers above, which may process data in other countries under contractual safeguards.

How long we keep it

While your account is open, we keep your information so the product works. Balances and confirmations are expected to age; that is by design, and the product tells you when a figure has gone stale rather than quietly relying on it.
When your account closes, we keep your information for thirty (30) days so that you can export it, then delete it. Ask us and we will delete it sooner.
Recommendations and their outcomes are retained in de-identified form after that, because our published accuracy statistics depend on them and a record we can delete on request is a record we could also quietly edit. De-identified means the record is no longer linked to you or to your account.
If you asked for your card check by email, we keep that record for twelve (12) months from your request and then delete it. If you unsubscribe, we stop emailing that address at once; ask us and we will delete the record straight away.
We keep billing records for as long as tax and accounting law requires.
Server logs are kept for a short operational period and then discarded.

How we protect it

Member information is encrypted in transit and at rest. Access is restricted by row-level security in the database, so one member’s records are not reachable from another member’s session. Administrative access is limited to those who need it and is logged.

The strongest protection is structural: because Crino holds no credentials, no card numbers, and no transaction history, a breach of Crino cannot give anyone access to your money or your accounts. That is why the product is built to ask you for balances rather than to fetch them.

No system is impenetrable and we do not claim otherwise. If a breach affects your information, we will notify you and the relevant authorities as the law requires.

Your choices

Export everything. Write to privacy@getcrino.com from the address on your account and we will send you a complete copy of your information, in a portable format, within thirty (30) days and usually within a few days. A one-tap export inside the product is being built; until it ships, the request route above is the one that works.
Correct anything. Your cards, balances, goals, and profile are all editable by you.
Delete your account and your information. Cancel from your account settings, or write to privacy@getcrino.com to have everything deleted straight away rather than waiting out the thirty-day window. We will confirm in writing what was deleted.
Control what reaches you. Set how much promotional news you want, and mark any benefit as one you will never use — we stop counting it and stop raising it.
Turn off recommendation emails without cancelling. Service and security messages will still reach you, because they concern your account.
Cancel your subscription at any time from your account settings.
Stop card-check emails. Every one carries a one-click unsubscribe. To have the record deleted straight away, write to privacy@getcrino.com from the address you gave us.

Your rights under state law

Depending on where you live, you may have some or all of the following rights. We honour them for every member, wherever they live, rather than only where a statute requires it.

To know what personal information we hold, where it came from, why we hold it, and who we share it with.
To obtain a copy in a portable format.
To correct information that is inaccurate.
To delete your information, subject to the limited retention described in Section 9.
To opt out of sale, sharing for advertising, or profiling with legal or similarly significant effects. Crino does none of these, so there is nothing to opt out of.
To limit the use of sensitive personal information. Crino collects none, so this right has nothing to operate on.
Not to be discriminated against for exercising any of these rights. We will not charge you more, give you a worse service, or refuse to serve you.

California residents. Under the California Consumer Privacy Act, the categories of personal information we collect, the purposes, the sources, and the categories of recipients are set out in Sections 3, 5, 6, and 8, which are written to serve as the notice that statute requires. We have not sold or shared personal information in the preceding twelve months, and we do not collect sensitive personal information.

Texas residents. Under the Texas Data Privacy and Security Act, we confirm that we do not sell personal data, and that we do not sell sensitive or biometric personal data — we do not collect any.

Residents of other states with comparable laws, including Virginia, Colorado, Connecticut, Utah, Oregon, Montana, and others as they take effect, have equivalent rights and may exercise them the same way.

How to exercise them. Email us at the address in Section 16, from the address on your account (or, for card-check information, from the address you gave us). We will verify that the request is yours by confirming it against your account, and will respond within forty-five (45) days, extending once by a further forty-five (45) days where a request is complex and telling you if we do. An authorized agent may act for you with written permission that we can verify. If we decline a request we will tell you why, and you may appeal by replying to our response; we will answer an appeal within sixty (60) days and tell you how to contact your state attorney general if you remain dissatisfied.

Information about other people

Crino is designed so that you do not need to tell us about anyone else. We ask how many people you travel with, not who they are, and the number of authorized users on a card, not their names.

Please do not enter another person’s details in a free-text note. If you do, you are responsible for having their permission, and we will delete it if they or you ask us to.

Children

The Services are for adults. They are not directed at children, we do not knowingly collect information from anyone under 18, and an account may only be created by someone who is at least 18 or the age of majority where they live. If we learn that we hold information from a child, we will delete it. If you believe a child has given us information, write to us at the address in Section 16.

Changes to this policy

We will update this policy as the product changes. The effective date at the top always reflects the current version, and we keep prior versions available so you can see what changed and when.

If a change materially reduces the protection this policy gives you — for example, if we ever began sharing information with a party not listed in Section 8 — we will tell you by email at least thirty (30) days beforehand and, where the law requires your consent, we will ask for it rather than assume it from your continued use.

Some things in this policy are described as current practice and some as permanent commitments, and the difference is deliberate. How we measure the public website is current practice and will change. The commitments in Section 4 about member information are not, and we will not revise them by giving notice — if they ever ceased to be true, that would be a different company.

How to reach us

Privacy questions, requests, and appeals:

Crino LLC

[Registered office address]

Registered agent: [name], Austin, Texas

Email: privacy@getcrino.com

Web: www.getcrino.com

We aim to answer every privacy enquiry within five (5) business days, and every formal rights request within the statutory period set out in Section 12.

Version 4 · Effective 9 October 2026