Privacy Policy

1. Information We Collect

• Basic personal info: e.g., name and email (via Firebase login).
• Business card photos are stored in Google Firebase Storage. For OCR, the photo is processed by Microsoft Azure Document Intelligence, which processes it and does not store it. Deleting a contact also deletes the photo. Card fields are extracted with Microsoft Azure OpenAI.
• Usage data: app activity logs and analytics (via Firebase Analytics).
• Payment data: handled by Stripe for website purchases; we do not store credit card details.
• Voice: when you use AI Transcribe, the recording is sent to Google Cloud Speech-to-Text for processing. CardySync does not keep the original recording. The transcript is stored in your notes.
• Ads: the app uses Google AdMob. The AdMob SDK may use advertising identifiers on the device, subject to Google's privacy policy. CardySync does not collect or upload advertising identifiers. When you watch a rewarded ad, we record the account ID, transaction ID, and reward amount in order to grant AI allowance.

2. How We Use Your Information

• Store and manage your scanned cards.
• Allow you to share cards with other users.
• Improve the app experience and usability.
• Enable user authentication and payments.
• Monitor performance and detect errors.

3. Information Sharing

• To comply with legal obligations.
• To protect our service and users.
• With your explicit consent (e.g., sharing cards with others).
• With these third-party services, which may process data according to their own privacy policies: Google Firebase, Stripe, Microsoft Azure (Document Intelligence, Azure OpenAI, and Azure AI), Google Gemini, DeepSeek, Google Cloud Speech-to-Text, and Google AdMob.
• AI Assistant: you can choose Google Gemini (including Gemini with Google Search), Microsoft Azure AI, or DeepSeek. Your questions and conversation are sent to the provider you choose.
• AI image generation uses Google Gemini, or FLUX models through Microsoft Azure AI.
• AI Summary for Quick Notes is processed on CardySync's own systems and is not sent to an external AI provider.

4. Data Storage and Security

Business card photos and your data are stored on Google Firebase. Payment data is handled by Stripe. Encryption and authentication are applied. However, no system can be guaranteed 100% secure.

5. Your Rights

• Access, update, or delete your account data.
• Deactivate your account.
• Contact us regarding your data use.

Contact: support@cardysync.com

Delete your account and data

6. Policy Updates

We may update this Privacy Policy from time to time. Updates will be posted in the app or website. Your continued use indicates your acceptance of the latest version.