CardSnap — Privacy Policy

This Privacy Policy explains how Mellivo OÜ (Registry Code 17522398, Sepapaja 6, 15551 Tallinn, Estonia — "we", "us") collects, uses, shares and protects personal data in the CardSnap mobile application (the "App").

CardSnap reads a photo of a business card, turns the details into a contact card (vCard) and saves that contact to your phone's address book.

The short version: You can use CardSnap without an account. The card photo is sent to our servers only to be read and is not stored. Your address book never leaves your device. We do not show ads and we do not use analytics or tracking SDKs.

1. Data We Process

Business card photos. When you take or pick a photo, the App shrinks it and sends it to our servers in the European Union (Amazon Web Services, Stockholm region). The image is passed to an AI model (Anthropic Claude, provided through Amazon Bedrock in AWS EU regions) which returns the name, job title, company, phone numbers, e-mail addresses, websites, addresses and social profiles printed on the card. Neither the photo nor the extracted details are stored on our servers; they exist only for the few seconds the request takes. Amazon Bedrock does not use your content to train models and does not share it with the model provider.

The people on the cards. A business card contains another person's contact details. CardSnap only processes what is printed on a card you chose to scan, and only to save it into your address book on your device. You are responsible for scanning cards you have a legitimate reason to keep.

Your address book. CardSnap asks for access to your contacts so it can add the scanned person to your address book, and, if you choose, open that contact for editing. We never read, upload or copy your existing contacts. The new contact is written directly on your device by the operating system.

Camera and photo library. The camera is used only to photograph a card. If you pick an image from your library, only the image you select is accessed.

Anonymous app identity. On first launch the App creates a random installation identifier and secret and keeps them in your device's secure storage (Keychain / Keystore). Our server stores a hash of the secret, your credit balance, your plan (free, monthly or yearly), its renewal date, and the number of scans you have made. No name or e-mail is needed.

Android device check (Android only). To give the one free welcome credit only once per phone, the App sends the Android ID (an identifier Android assigns to this app on this device) on first launch. We store only a keyed one-way hash of it, never the raw value. On Google Play builds the App may also send a Google Play Integrity token, which Google uses to tell us whether the App is the genuine Play build running on a genuine device; we keep only the result.

Optional e-mail account. If you link an account (Settings → Link an email account), your e-mail address is stored by Amazon Cognito (AWS Stockholm) and used only to send you a one-time sign-in code and to carry your credits and subscription to another phone. There is no password. We never use it for marketing.

Purchases. Subscriptions and credit packs are sold by Apple (App Store) or Google (Google Play); we never see your payment details. Purchases are verified through RevenueCat, which receives your anonymous app user identifier and the store receipt so it can confirm what you bought.

What we do NOT collect. No advertising identifiers, no analytics, no location, no microphone, no tracking across other apps or websites. We do not sell personal data.

2. How We Use Data

To read business cards and give you the contact back; to keep track of your credits and subscription; to stop abuse of the free welcome credit; to restore your purchases and, if you link an e-mail, move them to a new phone; and to answer support requests. We do not use your data for advertising or to train AI models.

3. Legal Bases (GDPR)

Performance of a contract (Art. 6(1)(b)) for scanning cards, credits, subscriptions and account linking. Legitimate interests (Art. 6(1)(f)) for preventing abuse of the free credit (Android ID hash, Play Integrity) and for keeping the service secure. Contact details of the people on the cards you scan are processed on your behalf for your own contact management.

4. Processors and International Transfers

Amazon Web Services EMEA SARL (hosting, Amazon Bedrock, Amazon Cognito — EU regions); RevenueCat, Inc. (purchase verification — USA, under EU Standard Contractual Clauses); Apple and Google (app stores and payments, and on Android the Play Integrity service). Each acts under its own data processing terms.

5. Retention and Deletion

Card photos and extracted details: not retained. Account record (credits, plan, scan count): until you delete your account. Android device hash: kept so the welcome credit cannot be claimed twice on the same device. Purchase records held by RevenueCat and the stores: as required by their terms and by tax law.

Delete your data: In the App open Settings → Delete account and data. This removes your linked e-mail, zeroes your credits and signs out every device. Contacts you saved stay in your address book because they are on your device, not ours. Cancel any active subscription in your App Store or Google Play account settings. You can also e-mail us.

6. Your Rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. You can also complain to your data protection authority (in Estonia: Andmekaitse Inspektsioon). Contact us at the address below.

7. Children

CardSnap is a business tool and is not directed at children under 13 (16 in the EEA). We do not knowingly collect their data.

8. Security

All traffic is encrypted (HTTPS). Server data is encrypted at rest. Access to production systems is restricted.

9. Changes

If we change how CardSnap handles data we will update this page and the "Last updated" date, and ask for your consent in the App where the law requires it.

10. Contact

Mellivo OÜ · Registry Code 17522398
Sepapaja 6, 15551 Tallinn, Estonia
E-mail: studio@mellivoai.com