Initial card model, TODO: address privacy