CardScan

Privacy Policy

Effective October 23, 2026

CardScan ("the app") is an iPhone app made by Andrew Stevens ("we", "us"). This policy explains what information the app handles and where it goes. In short, we do not collect, store, sell or share your personal information. CardScan has no servers and no accounts of its own.

What the app handles

• Photos and screenshots of business cards and email signatures that you take or choose. These are read entirely on your iPhone using Apple's built-in text recognition. They are not uploaded anywhere and are discarded once read.
• Pasted text such as an email signature you copy into the app. It is read on your iPhone in the same way.
• The contact details read from them: names, job titles, companies, phone numbers, email addresses, websites, postal addresses, and a cropped photo or logo if you have turned that on. These belong to the people whose cards you scan.
• Your Contacts. With your permission, the app adds new contacts to your iPhone's Contacts. It does not read, upload or analyze your existing contacts.

Where your information goes

Contact details are saved only to the places you switch on under Save To in the app:

• iPhone Contacts, which Apple may sync to your iCloud account according to your iPhone settings.
• Google accounts you sign in to. The app sends each new contact directly from your iPhone to Google Contacts using the Google People API.
• Microsoft accounts you sign in to. The app sends each new contact directly from your iPhone to Outlook / Microsoft 365 using Microsoft Graph.

Nothing passes through any server of ours. Once a contact is in one of these accounts, Apple's, Google's or Microsoft's own privacy policies apply to it.

Signing in to Google and Microsoft

You sign in on Google's or Microsoft's own sign-in page; the app never sees your password. The app asks only for permission to see your account's email address (to show which account is which) and to create contacts. The resulting access tokens are stored in your iPhone's secure Keychain, on that device only, and are deleted when you sign out of the account in the app.

The app uses this access only to create contacts you have scanned or pasted, and to show your account's email address. It does not read, change, export or delete your existing contacts, and it does not access email, calendars, files or any other data.

Google user data

CardScan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: information received from Google is used only to provide the contact-saving feature you asked for; it is not transferred to anyone; it is not used for advertising; it is not read by any person; and it is not used to develop or train artificial intelligence or machine learning models.

Purchases

If the app offers an in-app purchase, payment is handled entirely by Apple. We receive no payment details.

Analytics, advertising and tracking

The app contains no analytics, advertising or tracking code, and does not track you across other apps or websites.

Your choices

• Turn any destination on or off under Save To.
• Sign out of a Google or Microsoft account in the app (press and hold it), which deletes its tokens from your iPhone. You can also revoke access at myaccount.google.com/connections or account.live.com/consent/Manage.
• Withdraw Camera, Photos or Contacts permission at any time in the iPhone Settings app.
• Deleting the app removes everything it stored on your iPhone. Contacts already saved stay in your Contacts and accounts until you delete them there.

Children

The app is not directed at children under 13, and we do not knowingly collect information from anyone.

Changes

If this policy changes, the updated version will be posted on this page with a new effective date.

Contact

Questions about this policy: astevens1d@gmail.com.