Passports, ID cards, insurance numbers, loyalty cards — and the rental contract and the policy document too. One place, ready the moment someone asks.
Coming to the App Store.
One place for the whole family
You, your partner, your kids, your parents — each entry is filed under someone. At a check-in desk or a hospital counter you open that person's passport, instead of scrolling a camera roll in front of a stranger.
None of that needs an account, and nothing is uploaded anywhere. One phone, one family.
Five kinds of entry
Two different jobs, handled differently. CardPal keeps them in one place without pretending they are the same thing. These five names are the five on the app's own filter bar.
The data page of a passport or an ID card, plus the fields you actually get asked for: number, nationality, date of birth, expiry.
Insurance, medical record or social security numbers. When all you have is a number, nothing should force you to take a photo first.
Scan the barcode once, show it at the till. The fastest way to a first success.
Rental contracts, insurance policies, vaccination records: multi-page photos, or a PDF kept exactly as it is, read in a continuous vertical scroll.
Whatever does not fit the other four. You decide the fields.
Showing
The show screen hands the entire display to the document, so a passport data page is readable at arm's length. The number and the expiry date float above it; one tap slides them away together with the bars, another brings them back.
A document photographed sideways turns itself to fill the screen the long way — it changes how this screen is laid out, not your file.
While the screen is being recorded or mirrored, CardPal covers the document and says so. In the app switcher it masks itself. Face ID, Touch ID or a PIN keeps the app shut until you open it. iOS cannot stop a screenshot, so CardPal does not claim to — it speaks up only when a protection it promised is not in effect.
Copies
Need to give a copy to a landlord, a school or an insurer? CardPal builds a PNG or PDF copy with a watermark naming what the copy is for and the date it was made.
That is the single most effective way to stop a leaked scan being reused somewhere else — and filling in the purpose is optional, which makes it the most useful thing you can do for a copy.
You choose where it goes; nothing leaves on its own. The file handed over is called "copy-<date>", not "Mum's passport" — that name is one you chose for yourself, and it has no business travelling into someone else's inbox.
Expiry reminders
CardPal warns you before a passport or residence card expires. The reminder shows up on your lock screen, and iOS gives an app no way to hide that preview — so the only reliable protection is for the text to hold nothing worth hiding.
No name, no number, not even whose it is. Your device schedules it; no server is involved at any point.
What is encrypted
This table says the same thing the app says under Settings → Security → What's encrypted. Where it says plain text, it really is not additionally encrypted — lists, search and expiry reminders need it.
The key is generated on this device and held in the iOS Keychain, hardware-backed where the device supports it. It never leaves in a backup.
Check it yourself
Turn on airplane mode. Every feature still works.
That is not a promise you have to take on trust; it is a check you can run yourself. There is no account, no login, and no step that needs a connection to complete. The app bundles no analytics, crash-reporting, advertising or backend SDK — the complete dependency list is published in the privacy policy.
Also
Export an encrypted backup with a password you choose, to wherever you want it. That password cannot be recovered — and there is no copy of your data here for me to lose.
No server holds a copy, so there is no recovery path. You can start a factory reset; it erases everything 24 hours later, and the correct PIN cancels it at any point in between — the delay exists so whoever takes your phone cannot wipe it on the spot.
A policy document you are looking at in a messaging app, in Mail or in Files can be sent straight to CardPal. It lands somewhere that does not go into a backup, and is encrypted into the vault when you next open the app.
No subscription, no locked features, no ads, no analytics, no tracking.