CardScan - Privacy Policy

CardScan ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy explains how our mobile application collects, uses, stores, and protects your information when you use CardScan (package: kdr.cardscan).

1. Overview & Core Privacy Principles

CardScan is designed as a privacy-first business card scanner and contact management tool:

• On-Device Processing: OCR (Optical Character Recognition) text extraction is performed entirely on your device using Google ML Kit.
• No Unauthorized Uploads: Scanned business card images and personal data are never sent to external third-party servers without your explicit consent.
• Optional Cloud Backup: You can optionally sign in with your Google account to back up and sync your cards via Google Cloud Firestore.

2. Information We Collect and How We Use It

A. Camera and Images (CAMERA Permission)

We request access to your device camera solely to allow you to capture photos of physical business cards. All image analysis and text extraction happen locally on your device. CardScan does not collect, sell, or transmit your raw camera stream or photos to third parties.

B. Device Contacts (READ_CONTACTS, WRITE_CONTACTS)

When you choose the "Save to Device Contacts" feature, CardScan requests contact permissions to:

• Export scanned contact details (name, phone numbers, email, company, job title, address) directly into your Android address book.
• Check for existing contacts to prevent duplicate entries.

CardScan does not upload your entire phonebook or share your contacts with any third party.

C. User Account Information (Google Sign-In)

If you choose to use the optional Cloud Backup feature, you can sign in with your Google Account via Firebase Authentication. We receive standard profile information:

• Name and Email Address
• Profile Picture URL
• Unique Firebase User ID (UID)

This information is used strictly to authenticate your identity and provide you access to your synchronized business cards.

D. Cloud Storage (Google Cloud Firestore)

If Cloud Backup is enabled, your scanned business card data (names, titles, phone numbers, emails, addresses, and tags) is stored in a private, encrypted Google Cloud Firestore database under your dedicated user account path (/users/{userId}/cards).

E. Analytics and Crash Reporting (Firebase)

We use Firebase Crashlytics and Firebase Analytics to collect anonymous diagnostic and crash logs to improve app stability. This data includes device model, OS version, and crash stack traces, and is never linked to personally identifiable business card contents.

3. Data Retention and Deletion (Your Rights)

You have full control over your data:

• Local Data Deletion: Deleting a card within the CardScan app immediately removes it from local storage.
• Cloud Data Deletion: When cloud sync is active, deleting a card also removes it from your private Cloud Firestore collection.
• Account & Data Purge Request: You can delete all your stored data at any time by signing out or emailing us with your request.

4. Children's Privacy

CardScan is a professional business productivity tool and is not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

5. Security Measures

We implement industry-standard security practices, including HTTPS/TLS encryption for all network communication and Firebase Security Rules that ensure only you can access your cloud data.

6. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our team at:

Developer: kadirmo

Application: CardScan (kdr.cardscan)