Legal

Privacy Policy

Last updated July 18, 2026

Cardfolio helps you capture and organize information from business cards. This policy explains what information Cardfolio handles, why it is used, and the controls available to you.

1. Information we collect

Account information

When you create an account, Cardfolio processes your email address, user identifier, authentication provider information, and account creation date.

Business-card content

Cardfolio processes the information you scan, enter, or edit, which may include a person's name, employer, job title, email address, phone number, website, social profile, physical address, notes, raw extracted text, and the card image. This information may relate to another person. You are responsible for having an appropriate reason to collect and use it.

Subscription information

We process subscription status, product type, transaction identifiers, purchase and expiration dates, and related entitlement information. Apple processes payment details; Cardfolio does not receive your full payment-card number.

Trial records

Cardfolio may store a normalized version of your account email and user identifier to determine trial eligibility and reduce repeated trial abuse.

2. How we use information

• Authenticate your account and maintain your session.
• Extract, display, edit, search, organize, sync, export, and delete business-card information.
• Provide subscription features and determine trial eligibility.
• Protect Cardfolio, investigate failures, and prevent misuse.
• Respond to support requests and comply with legal obligations.

Cardfolio does not sell personal information and does not use it for cross-app advertising or tracking.

3. Storage and service providers

On-device processing and storage

Optical character recognition begins on your device. Free-plan cards and their images are stored locally for that account. Removing the app or losing the device may remove local-only data unless you exported it.

Supabase

Cardfolio uses Supabase for authentication, database services, cloud storage, and server functions. Premium cloud sync stores card fields and images in account-protected cloud storage. A local image copy may remain cached on your device.

OpenAI

When a premium user uses enhanced parsing, Cardfolio sends extracted card text to OpenAI through a server function to identify structured fields. The card image is not sent to OpenAI. OpenAI processes that text as a service provider under its applicable business terms and privacy practices.

Apple

Apple provides Sign in with Apple and processes App Store subscriptions, billing, refunds, and related purchase information under Apple's policies.

4. Retention and deletion

Cardfolio keeps account and cloud-synced information while your account is active or as needed to provide the service. Individual cards can be deleted in the app. You can delete your account from Profile → Delete Account. Account deletion removes the authentication account, cloud card records, stored card images, subscription entitlement records, trial-claim records associated with the account, and the account's local Cardfolio directory.

Deleting your Cardfolio account does not cancel an Apple subscription. Cancel subscriptions separately through your Apple account settings. Limited records may be retained when required for security, fraud prevention, dispute resolution, or law.

5. Your choices

• Review and correct extracted information before saving it.
• Edit or delete individual cards in Cardfolio.
• Export eligible card data using available export tools.
• Manage or cancel subscriptions through Apple.
• Delete your Cardfolio account from the app.

6. Security

Cardfolio uses account-scoped storage, access controls, and encrypted network connections designed to protect information. No system can guarantee absolute security, so keep your device and account credentials protected.

7. Children

Cardfolio is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes to this policy

We may update this policy as Cardfolio changes. The latest version and its effective date will remain available on this page.

9. Contact

Questions or privacy requests can be sent to cardfolio@aaryanshah.dev.