Privacy Policy

This Privacy Policy applies to personal information processed through Cardigo’s marketing website (https://cardigoapp.com), authenticated web application (https://app.cardigoapp.com), APIs, and native mobile apps published under the name “Cardigo” (collectively, the “Service”).

By creating an account, using the Service, or otherwise providing information to us, you acknowledge this Privacy Policy. If you do not agree, please do not use Cardigo.

We collect information in three ways: (1) information you provide directly; (2) information generated when you use the Service; and (3) limited technical information from your device and browser.

Information you provide

• Account registration: name, email address, password (stored in hashed form), and authentication session data.
• Profile and card content: photo, job title, company, phone number, biography, social links, theme preferences, public share slug, and branding assets such as logos.
• Contacts you save: names, employers, phone numbers, emails, notes, and source metadata (QR scan, NFC tap, handshake, manual entry, or OCR).
• Support communications: messages you send to our support or privacy inboxes.

Information collected automatically

• Usage data: profile views, scans, exchanges, feature interactions, and timestamps needed for analytics and product improvement.
• Device and app data: operating system, app version, device model, language, and diagnostic logs when troubleshooting errors.
• Network data: IP address, browser type, and referral URLs when using the web app.
• Advertising identifiers: advertising ID on mobile devices when you interact with rewarded ads (Free plan).

Information from device permissions

• Camera: QR code scanning and business card capture for OCR.
• Photo library: selecting profile photos or logos.
• NFC (Near Field Communication): tap-to-exchange when you initiate an NFC exchange.
• Contacts (optional): saving exchanged details to your device address book when you choose that action.

The table below summarizes categories of data processed by Cardigo. This helps you understand what we collect and why, as required by app store data disclosure forms.

• Provide, operate, and maintain the Service, including digital cards, sharing links, QR codes, NFC exchange, contacts, events, and analytics.
• Authenticate users, secure accounts, prevent fraud and abuse, and enforce our Terms of Service.
• Display your public profile to people who visit your share link, scan your QR code, or complete an exchange you initiate.
• Process OCR requests to extract contact fields from business card photos you submit.
• Generate Apple Wallet and Google Wallet passes when you request them.
• Deliver rewarded advertisements on the Free plan and measure ad performance.
• Send transactional communications such as verification codes, security alerts, and service notices.
• Respond to support requests and legal or regulatory inquiries.
• Analyze aggregated trends to improve reliability, performance, and user experience.

Where GDPR, UK GDPR, or similar laws apply, we rely on the following legal bases:

• Contract: processing necessary to provide the Service you request, such as account creation and profile hosting.
• Consent: optional device permissions (camera, photos, NFC) and, where required, marketing communications.
• Legitimate interests: securing the Service, preventing abuse, improving features, and limited analytics, balanced against your rights.
• Legal obligation: responding to lawful requests and maintaining records required by law.

Cardigo’s Free plan may display rewarded video advertisements powered by Google AdMob. AdMob may collect device identifiers and interaction data according to Google’s policies to deliver and measure ads.

• Rewarded ads are optional — they appear when you choose to watch an ad to unlock certain Free-plan limits.
• Pro subscribers do not see rewarded ads for plan-gated features.
• You can reset or limit ad personalization in your device settings (Limit Ad Tracking on iOS, Opt out of Ads Personalization on Android).
• Google’s privacy policy: https://policies.google.com/privacy

We do not sell personal information. We share data only as described below:

• Public sharing: fields on your digital card may be visible to anyone with your link, QR code, or NFC exchange.
• Other users: when you exchange or save contacts, relevant profile fields are shared according to the feature you use.
• Legal and safety: when required by law, regulation, legal process, or to protect rights, safety, and integrity.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection of your information.

Service providers

• Supabase — database, authentication, and file storage
• Vercel — web application hosting
• Google — AdMob advertising, Google Wallet pass generation, ML Kit text recognition (OCR on Android)
• Apple — Apple Wallet pass generation

We retain personal data for as long as your account is active or as needed to provide the Service. Typical retention periods include:

We may retain certain records longer when required by law, to resolve disputes, enforce agreements, or maintain security logs.

We implement administrative, technical, and organizational safeguards designed to protect personal information, including HTTPS encryption in transit, access controls, row-level security on database tables, and industry-standard password hashing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Cardigo may process and store information in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms.

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of personal data we hold about you.
• Correction — update inaccurate profile information in the app or by contacting us.
• Deletion — delete your account in Profile → Delete account, or email us at the privacy address.
• Portability — request an export of your profile data where technically feasible.
• Restriction and objection — object to or request limitation of certain processing where applicable law provides these rights.
• Withdraw consent — where processing is based on consent, such as optional permissions.
• Complaint — lodge a complaint with your local data protection authority.

You can delete your Cardigo account at any time from the mobile or web app: Profile → Delete account. Deletion removes your profile, authentication credentials, and associated personal data from active systems within a reasonable period.

• Contacts you saved about other people may be deleted with your account.
• Public caches or backups may take up to 30 days to fully purge.
• If you cannot access the app, email privacy@cardigoapp.com from your registered address to request deletion.

Cardigo is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us data, contact us at privacy@cardigoapp.com and we will take steps to delete it.

The web app uses essential cookies and local storage for authentication sessions and security. We do not use third-party advertising cookies on the web app. Mobile apps use local storage and secure tokens for session management.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may be communicated by email or in-app notice where appropriate.

Privacy requests and data subject rights: privacy@cardigoapp.com. General support: hello@cardigoapp.com. You may also use our contact page at https://cardigoapp.com/contact.