Privacy Policy
Namecard Box ("the app") is published by Maxxi Dev Enterprise ("we"). The app reads business cards, saves them as contacts, and can back them up or share them with your team. This page explains what happens to the information involved. Business cards contain other people's names, phone numbers and email addresses, so we have tried to keep this short and specific.
What stays on your phone
- Every card you scan: the photo, the name, job title, company, phone numbers, emails, websites, address, your notes and the people-and-date history you add.
- Your settings, including the language you chose.
- A count of how many cards were read on the phone and how many needed AI help. It is only a number, it is kept on the phone, and it is never sent anywhere.
Nothing leaves your phone unless you do one of the things described below.
What is sent when you scan a card
The app reads the card on your phone first: it turns the photo into text and splits the text into name, company, phone numbers and so on, all on the phone. Most cards are finished there and nothing is sent anywhere.
Only when the phone cannot read a card confidently (small print, an unusual layout, a mix of scripts) can the app ask our AI service for help. In that case the app sends the text it read to our AI service or, if the text alone is not enough, the card photo. Our AI service passes it to a third-party AI model provider (currently Anthropic), which returns the name, company, phone numbers and so on.
- We use this only to fill in the fields. We do not sell it, use it for advertising, or build profiles from it.
- Our AI service keeps a record of each request (the text or photo, and the result) so we can fix problems and measure cost. We do not currently delete these records automatically. You can ask us to delete yours by email (see Contact).
- According to the provider's published terms, it may not train its models on what we send, and it deletes inputs and outputs from its own systems within 30 days, with exceptions such as legal requirements and enforcing its usage policy.
The first time a card needs AI help, the app asks whether you agree. If you say no, nothing is sent: the phone fills in what it could read and you type the fields in yourself. You can change your answer any time in Settings.
Older versions. Versions before 1.1.0 sent the text of every scanned card to our AI service (after you agreed the first time you scanned). From version 1.1.0 the phone goes first, as described above.
Contacts, camera and photos
- Camera and photo library are used only to scan cards and to attach pictures to a card.
- Contacts: when you save a card, the app writes a contact on your phone. On Android it also reads your contacts to update a contact it created earlier and to show which numbers are already on WhatsApp. Your contacts are never uploaded.
Backup to Google Drive (optional)
If you turn on backup, you sign in with Google and the app copies your cards, notes and photos into folders in your own Google Drive. The app can only see files it created itself (the drive.file permission), not the rest of your Drive. You can turn backup off, or delete the folder, at any time.
Shared workspaces (optional)
If you create or join a shared workspace, the cards, notes and photos in that workspace are stored on our sharing server so that everyone in the workspace sees the same cards. Everyone who has the invite code can see every card in that workspace, including your clients' phone numbers and emails — only share the code with people who should see them.
| Information | Why |
|---|---|
| Workspace name, invite code, device name | To run the workspace |
| Cards, notes, photos in the workspace | To show them to the workspace's members |
| Your Google account's email and a Google user identifier (workspace creators only) | To let you get your workspace back after changing phones |
Leaving a workspace removes the copy on your phone only; the cards stay in the workspace for the others. To have a workspace or its cards deleted from our server, email us.
Sign in with Google
Google sign-in is used for two things only: backup to your Google Drive, and recovering a shared workspace on a new phone. We receive your email address and an identifier Google gives us for your account. We do not receive your Google password.
Where your information is processed
- Our AI service and our sharing server run on a server in Singapore.
- The AI model provider and Google may process information in other countries, including the United States. The AI provider's terms include a data processing addendum.
Why we use your information
- To give you the features you ask for: reading a card, saving it, backing it up, and sharing it in a workspace.
- Our legitimate interests: fixing problems, keeping the service secure and keeping its cost under control — this is why the AI request records are kept.
- Your agreement: the app asks the first time a card needs the AI service, and you can withdraw that in Settings. When you sign in with Google and choose to back up, you agree on Google's own screen.
We do not use your information for anything else.
How long we keep it
| Information | How long |
|---|---|
| Cards, photos and notes on your phone | Until you delete them or uninstall the app |
| AI request records on our server | Until you ask us to delete them (we do not delete them automatically yet) |
| The AI provider's own copy | Up to 30 days under its terms, with exceptions |
| Cards, notes and photos in a shared workspace | While the workspace exists, or until you ask us to delete it |
| Google email and identifier (workspace creators only) | While the workspace exists |
What we do not do
- No advertising, and no advertising or analytics tracking inside the app.
- We do not sell personal information.
- The app is not directed at children.
- No automated decisions about you: the AI only reads a card to fill in its fields.
- You are never required to give us information: backup, shared workspaces and Google sign-in are all optional. Sending cards to the AI service is optional too: if you say no, the app still reads the card on your phone and fills in what it can, and you type the fields in yourself.
If your details are on someone else's card
Business cards carry the details of the people who handed them out. If someone scanned a card with your details using this app and you want those details removed from what we hold (AI request records, or a shared workspace), email us with the details as printed on the card and we will delete the copies we can find. We cannot remove a card from another person's own phone or Google Drive. We do not use these details to contact you or to build a profile of you.
Your rights, choices and deleting your data
- Delete a card in the app to remove it from your phone (and from a shared workspace, if it was in one).
- Uninstalling the app removes everything stored on your phone.
- For data held by us — AI request records, or a shared workspace — email us from the address you used with the app and we will delete it.
- You can also email us to ask for a copy of what we hold about you, to correct it, to limit how we use it, or to object to how we use it. We aim to reply within 30 days.
- If you are not satisfied with our answer, you can complain to the data protection authority in your country.
Changes
If this policy changes materially we will update the date above and, where the change affects what happens to your cards, say so inside the app.
Contact
Maxxi Dev Enterprise · angtatt2@gmail.com