How Card Master handles your data

This policy applies to the Card Master iPhone app and its website, including the Traditional Chinese and English versions.

1. Cards and text recognition

Business card photos, recognized text, names, companies, phone numbers, email addresses, physical addresses, tags, and notes are stored on your device. Apple text recognition runs on the device. Card Master does not send card content to an external AI provider, advertising platform, or our own server. Core recognition, editing, and search work without an app account.

2. Private cards and encryption keys

Card records are encrypted with a device key. Private cards also require Face ID, Touch ID, or the device passcode. Anyone who knows the device passcode may be able to unlock them. Device keys do not transfer to a new device, and removing the device passcode may invalidate a private key. Card Master cannot prevent screenshots or access on a compromised device.

3. Backups and copies

You may export an encrypted backup and a separate recovery code. Support cannot recover or reset that code. Files you export, system backups, contacts, calendars, and copies shared with other apps may leave the device. Exported unencrypted copies are no longer protected by the private-card lock. Setting a card as private does not delete its original photo from your photo library.

4. Advertising

The free version uses Google AdMob banner and interstitial ads. AdMob may also serve ads through Liftoff Monetize and Unity Ads. These advertising services may process IP addresses, device information, identifiers, diagnostics, ad requests, and ad interactions. Card Master never adds business card content to ad requests. The app requests non-personalized ads, disables the publisher first-party ID, and does not request permission for cross-app tracking. Non-personalized ads still involve data processing. Where required, the app offers advertising privacy choices. See the privacy policies of Google, Liftoff, and Unity.

After a valid ad-removal purchase is confirmed, the app stops future ad loading and refreshes. It cannot recall data already sent. Ad availability depends on network access, privacy choices, and advertising inventory.

5. Purchases

Apple processes payments. Card Master uses StoreKit to verify entitlements and does not receive full payment-card details. Permanent ad removal is a one-time, non-consumable purchase. Refunds, revocations, and billing follow Apple policies.

6. System permissions

The camera captures business cards. The system photo picker provides only the images you select. Device authentication protects private cards. Contacts and calendar access are requested only when you choose the related action. Denying a permission does not affect features that do not need it.

7. Deletion and support

You can delete cards and edit your profile in the app. External backups, exports, photo-library images, retained recovery databases, and copies in other apps are not deleted at the same time. To remove local app data, delete the app from iOS and manage external copies separately. Deleting the app does not issue a refund or erase Apple purchase records.

Support uses the email address, problem description, and diagnostic details you voluntarily provide to answer a request. Do not send business card images, customer details, recovery codes, device passcodes, Apple Account passwords, or payment-card information.

8. Website

These pages do not include our own analytics or website advertising code. GitHub Pages hosts the site and may process connection and security logs under the GitHub Privacy Statement.

9. Contact and updates

For privacy questions, email mkjohnny@gmail.com. We update the date and text when our services or data handling change materially.