Privacy Policy — Card Scanner
Last updated: September 15, 2026
Card Scanner ("the app") is operated by Willowcy ("we", "us"). This policy
explains what data we collect, why, and your rights over it. Questions:
contact@willowcy.com.
1. Your account
An account is required to use the app. You can sign in with an email
address and password, or with Google. The data described below is collected
for every account; see section 6 for how to delete it.
2. Data we collect when you create an account
- Account info: your email address and display name. If you
sign in with Google, we receive your name, email, and profile photo from
your Google account.
- Business card data: the contact details extracted from
the cards you scan (names, phone numbers, emails, companies, etc.). The card
image itself is not stored — it is sent for processing, the
text is extracted, and the image is discarded.
- Usage data: a count of scans performed, to enforce daily
limits by plan tier.
3. Device permissions
The app asks for two permissions, each only when you use the feature that
needs it. You can decline either one and keep using the rest of the app.
- Camera — to photograph a business card when you
choose to scan one. The photo is used only to read the card (see section 5)
and is not stored.
- Contacts (write only) — to add a card to your
phone’s address book, and only when you tap
Save to Phone Contacts. The app never reads your existing contacts,
and nothing from your address book is sent to us.
Cards you save are also kept on your device, so they remain available
offline. If a card can’t be uploaded straight away, it is held on your
device and uploaded to your account once you’re back online.
4. How we use your data
- To extract contact details from card images using AI.
- To sync your cards across your devices and back them up.
- To authenticate you and enforce plan limits.
5. Third-party services
- Supabase — authentication and encrypted cloud database
hosting for your account and cards.
- Google Gemini API — processes card images to extract
text. The image is transmitted for that purpose only and is not retained by us.
- Google Sign-In — optional authentication.
We do not sell your data or share it for advertising.
6. Data retention & deletion
Your cloud data is kept until you delete it. You can delete your entire
account and all associated data at any time from
Profile → Delete Account in the app, or by requesting deletion at
contact@willowcy.com. See our
account deletion page for details. Locally
stored cards are removed when you uninstall the app.
7. Security
Cloud data is protected by row-level security so each user can only access
their own records, and is transmitted over encrypted connections.
8. Children
Card Scanner is not directed to children under 13.
9. Changes
We may update this policy; material changes will be reflected by the "Last
updated" date above.
10. Contact
Willowcy — contact@willowcy.com