Effective date: June 16, 2026
1. About This Policy
This Privacy Policy applies to BizCardMaster (the "App" or "Service"), a
business card scanning and contact management application published by
Haofu Tech. The App is designed solely for capturing, recognizing, organizing,
and sharing business cards — not for general document scanning (such as receipts,
invoices, or contracts).
The App uses shared server infrastructure with our related service
PicPenny. Your account and business card records may be stored on the same
backend (picpenny.haofutech.com).
2. Information We Collect
When you use BizCardMaster, we may collect the following types of information:
- Account Data: Email address, display name, and Google Sign-In identifiers provided during registration.
- Business Card Images: Photos of business cards you capture with the camera or select from your photo library, used for OCR recognition and contact management.
- Contact Information Extracted from Cards: Text recognized from your business cards, such as names, job titles, company names, phone numbers, fax numbers, email addresses, websites, and physical addresses.
- Device & Usage Data: Device model, OS version, app version, and basic usage logs for service quality analysis (does not include personally identifiable information).
- Local Device Storage (mobile app): Business card images and metadata may be cached on your device for offline viewing. This data remains on your device unless you delete the app or clear app data.
- Advertising ID: When you watch rewarded ads to earn scan quota, Google AdMob may collect advertising IDs. Data handling follows Google's Privacy Policy.
3. How We Use Your Information
We use the collected information only for business card management purposes:
- Scanning business cards and extracting contact fields via OCR
- Storing, searching, editing, and organizing your business card collection
- Sharing contacts as vCard (.vcf) files or adding them to your device address book (only when you initiate these actions)
- Managing your account and scan quota
- Improving recognition quality and user experience
- Delivering rewarded ads (via Google AdMob)
- Complying with legal obligations and protecting our legitimate rights
4. Data Sharing & Third-Party Services
The Service integrates with the following third-party services, which may involve data transmission:
- Google Sign-In — Account authentication; governed by Google's Privacy Policy.
- Google AdMob (advertising) — Device advertising ID for rewarded ads; governed by Google's Privacy Policy, with server-side verification (SSV) for quota crediting.
- Google Gemini API (server-side, optional) — Business card OCR text may be sent to the Gemini API to help extract and structure contact fields (name, company, phone, etc.). We do not use this for non–business-card content.
We do not sell, trade, or transfer your personal data to third parties without your consent.
5. Data Storage & Security
- Your business card images and extracted contact text are stored in encrypted cloud storage on Google Cloud (us-central1 region).
- On Android, copies of card images may also be stored locally on your device for faster offline access.
- Data in transit is encrypted using TLS 1.3.
- We implement industry-standard security measures to protect your data.
- Passwords (if you use email login) are hashed using bcrypt; we cannot recover your original password.
6. Data Retention
- Your account data is retained until you delete your account.
- Business card images are purged from servers within 30 days of deletion.
- Local cached images on your device are removed when you uninstall the app or clear app storage.
- We may retain certain records for legal or compliance purposes.
7. Your Rights
You have the right to:
- Access and update your personal data and business card records
- Delete individual business cards or your entire account and associated data
- Revoke Google or Apple Sign-In authorization in your device settings
To exercise your rights, please contact us using the information below.
8. Children's Privacy
The Service is not designed for children under 13. We do not knowingly collect personal data from children. If we discover such data has been collected, we will delete it immediately.
9. Policy Changes
We may update this Privacy Policy from time to time. Material changes will be notified via in-app notice or email. Continued use of the Service after changes constitutes acceptance of the updated policy.