Privacy Policy

Last updated: October 2026

What We Collect

CardIntro stores the data you enter — your profile information, card design preferences, scanned contacts, smart label contents (titles, descriptions, item lists, locations, photos), and dynamic QR names and target links. When cloud backup is enabled, this data is encrypted in transit (TLS) and stored on our servers so you can restore it on any device.

If you join a product waitlist on our website, we store the email address you submit, used only to contact you about that product.

If you open someone’s CardIntro page and choose to share your own details back, the details you enter are stored in that card owner’s CardIntro account as one of their contacts, visible to them in their app.

Scan Data

When someone scans one of your QR codes (your card, a smart label, or a dynamic QR) or taps an NFC tag you wrote (including cards you hand out in Booth Mode), our server records the time of the scan, the scanner’s IP address, their browser user-agent string, and an approximate location (city, region and country) looked up from that IP address. We never record a precise location. We use this to count scans against your plan’s allowance, to show you aggregate analytics (scan counts by day and week, most-scanned codes, device types, busiest times and top cities), to avoid charging you twice for the same visitor, and to detect abuse. You see the time, code, device type and approximate city of scans; scanners’ IP addresses are never shown to you.

Approximate locations come from the IP Geolocation by DB-IP database, licensed under CC BY 4.0, which runs on our own server: scanners’ IP addresses are not sent to any third party for the lookup.

We do not build profiles of people who scan your codes, do not use scan data for advertising, and do not sell or share it. Scan records are deleted when the associated account is deleted.

Details Visitors Choose to Share

A business can set its card booth card to show a short “share your details” page before opening its website. If you fill it in and agree, the name, email and phone number you enter are sent to that business and saved in its CardIntro contacts. Sharing is always optional: you can skip straight to the business’s site, and nothing you type is stored unless you submit. The same applies when you share your details back on someone’s CardIntro card page. To have shared details removed, contact the business or support@getdcard.com.

A card owner can add up to three short questions to that form (for example “What do you need help with?”). Answering is optional; any answers you give are stored with the details you share and shown only to that card owner in their app.

Booking a Meeting

If a card owner lets visitors book a meeting from their card page and you book one, we store the time you picked and the name, email, phone number and note you enter. They are shown to the card owner in their CardIntro app and saved in their CardIntro contacts. We send a confirmation email to you and to the card owner, with a calendar file and a private link you can use to cancel. Bookings are kept in the owner’s account until it is deleted; to have a booking removed, contact the card owner or support@getdcard.com. Emails are sent through our email provider, Resend, which processes them only to deliver them.

Buttons on a CardIntro Card Page

When you open someone’s CardIntro card page and tap a button on it (Save to Contacts, Call, Text, Email, Website, LinkedIn, Directions, Review, Book a meeting or a payment link), we count that tap so the card’s owner can see which buttons people use, together with an approximate city from your IP address. We don’t store your IP address: each tap is tied only to a code that changes every day, used to count one tap per visitor per button per day. The owner sees counts and approximate places, never who tapped. Automated traffic is ignored. A payment or review button opens the provider’s own page (Stripe, PayPal, Square, Venmo or Google); CardIntro never sees or handles the payment or review.

Live Contacts, AI Writer & Voice Notes

Live contacts. When someone saves your card in the app, their copy follows your card: if you change your name, title, company, phone, email, website, LinkedIn or address, their saved contact updates too and shows what changed (for example, a new job). Only details already on your public card are shared. You can turn this off in the app (Me › Settings › Share card updates); saved copies then keep what they have and stop updating. Anyone who saved a card can stop updates for that contact at any time. If you agree, the app can also update the copy in your phone’s Contacts app — only for contacts you saved there from CardIntro.

AI follow-up writer. When you tap “Write it for me”, the contact’s name, title and company, where you met, and any notes you add are sent to our AI provider (Anthropic) to draft the message, together with your own first name, title and company. The draft comes back to you to edit before you send it yourself. We don’t store the request or the draft, we don’t log contact details, and the provider does not use it to train its models. We only count how many drafts you used this month.

Voice notes. A voice note after a meeting is turned into text on your phone using its built-in speech recognition (on some phones Apple or Google may process the audio to recognise it). CardIntro never uploads or keeps the recording; only the text you save becomes the contact’s note, synced like any other note. Microphone and speech recognition permissions are asked for only when you start a voice note.

Lead Alerts, Monthly Results & Follow-ups

If you open a CardIntro card page several times in a week, tap Save, Call, Text or Email on it, or share your details, the card’s owner may get an alert such as “Someone from Toronto opened your card 3 times this week”. Unless you shared your details, the alert never says who you are: repeat visits are recognised from the IP address and device already recorded for each card open (see Scan Data above), and the alert itself keeps only a code made from them that changes every week, plus an approximate city.

For card owners: lead alerts appear in the app and, only if you turn alert emails on, by email (at most 3 a day). Once a month we may email you a summary of your card’s results (views, taps, new contacts, follow-ups); you can turn it off in Settings. Follow-up reminders you set for your contacts (which step you’re on, snoozes) are stored with your account so they survive a reinstall. These emails go to the email on your card, are sent through our email provider (Resend) and are never used for advertising.

Public Pages

Your card page, smart label pages, and dynamic QR redirects are public URLs: anyone who scans the code or has the link can view that content. Only put information on your card and labels that you are comfortable sharing with anyone who encounters the printed code.

Device Identifier

We generate a random device ID on first launch. This ID is hashed (SHA-256) before being sent to our server. We cannot reverse it to identify your device. It is used to associate your data with your device before you sign in, and to make sure each device gets only one free trial.

App Version & Diagnostics

When the app opens, it sends us its version, your phone’s model and operating-system version, its language and its time zone. If the app hits an error, it sends the error message and where in the app it happened. We use this only to support you, fix bugs and tell you when an update is required. It contains no card or contact details, is never shared or used for advertising, and error reports are deleted after 90 days.

Camera & Contacts Permissions

CardIntro requests access to your device camera to photograph physical business cards (front and back) for on-device text recognition (OCR), and to scan QR codes. Card images are processed locally using Google ML Kit — no images or extracted text are sent to any external server during OCR. Captured card photos may be stored locally for your reference and uploaded only when cloud backup is enabled.

Contacts permission is requested only when you explicitly choose to save a scanned contact to your device address book. These permissions are optional; the app functions without them but some features will be unavailable.

Images

Profile photos, company logos, and scanned card images (front and back) are stored locally on your device. They are uploaded to our servers only when cloud backup is enabled, stored securely, and never shared with third parties. Smart label photos are stored on our servers so label pages can display them; they are retained for a maximum of one year from upload and then deleted.

Account & Sign-In

When you sign in, authentication is handled by Clerk, our sign-in provider, which processes your email address and (if you use Apple or Google sign-in) the identity your provider shares. We link your signed-in account to your backed-up data so it can follow you across devices.

No Third-Party Tracking

CardIntro does not use advertising trackers or third-party analytics SDKs, and we do not sell or share your data. The scan analytics described above are first-party: collected by our own servers, shown only to you. Our service providers are limited to Clerk (authentication), Apple and Google (payments), Anthropic (AI follow-up drafts, only when you ask for one) and our hosting infrastructure.

Website Analytics

On cardintro.com (and our old address, getdcard.com) we count page views and a few clicks (such as app store and email links) with our own first-party analytics. We use no cookies and store nothing on your device. Your IP address is never stored: it is used only for a moment to make an anonymous visitor ID that changes every day and to look up an approximate city. If your browser sends Do Not Track or Global Privacy Control, nothing is collected. These statistics are used only in aggregate, to understand how the site is used.

In-App Purchases & Subscriptions

CardIntro is offered by subscription (Pro and Business) and one-time scan packs through the App Store and Google Play. Payment is processed entirely by Apple or Google — we never receive your card details or billing address.

To unlock your plan on every device, the app sends us the signed purchase record Apple or Google issues for each purchase, and Apple notifies our server of renewals, cancellations and refunds. From these we store the product, transaction identifiers, purchase and expiry dates, and whether it was a test purchase — linked to your CardIntro account and deleted with it. Subscription management and refunds are handled through the respective store’s policies.

One Free Trial per Person

To stop the 7-day trial being restarted, we keep a record of which device IDs, verified email addresses and Apple/Google sign-in identities have already used a trial, and when it started. Each is stored only as a one-way SHA-256 hash together with the trial start date — no name, email or other content. This record is kept after account deletion (otherwise deleting and re-registering would restart the trial) and is used for no other purpose.

CardIntro Network & CardIntro Verified

If you use the CardIntro network, you can confirm the email on your card with a 6-digit code; we keep the confirmed address and when it was confirmed. Event rooms and Discover show your name, title, company, headline, city and industry to other members — never your phone or email until you both agree to swap cards. Rooms and Discover are opt-in, and you can report or block anyone.

CardIntro Verified (Pro and Business) checks your name against a government ID and a live selfie. The check is run by our ID partner, Stripe (Stripe Identity), which handles the ID images and selfie under the Stripe Privacy Policy. CardIntro receives and keeps only the result: the first and last name on the ID and the date it was checked. We never see or store the ID images, your date of birth or ID number. The badge shows only that your name was checked and your email confirmed; it lapses after 12 months, and deleting your account deletes the result.

Lead Temperature, Events & Integrations

You can mark a contact as a hot, warm or cold lead, add a short lead note, mark when you followed up, and enter what an event cost you. These are stored with your contacts so they sync across your devices, are shown only to you, and are deleted with the contact or your account.

If you connect an integration (a webhook such as Zapier, Make or n8n, HubSpot, or Salesforce), CardIntro sends the details of new leads — name, company, title, email, phone, website, address, notes, tags and lead temperature — to the destination you choose, when you choose it. From then on that copy is handled by that service under its own terms and privacy policy; CardIntro does not control it. Your webhook signing secret and HubSpot access token are encrypted on our servers and never shown again after you save them. We keep a log of the last delivery attempts (time, destination, the lead’s name and whether it worked) so you can see what was sent. Disconnecting an integration stops sending and deletes its saved credentials and any leads still waiting to be sent. A CSV export is created on your phone and goes only where you share it.

Teams

A Business account can create a team and invite people by email or a shareable code; an email you’re invited with is used only to send the invite and to check that you are the one joining. While you’re an active member, the team’s owner and admins can see your name, role, card email, your card stats (views, saves) and the leads you capture as a team member — details visitors share on your card page or the team’s booth cards, and contacts you choose to share with the team. A copy of each such lead belongs to the team and stays with it if you leave or are removed; the contacts in your own card People list stay yours. The team can set its logo, colors, company name, website and address on your card while you’re a member. Leaving the team gives your card back its own details and ends your access to the team’s leads.

Data Deletion

You can delete your account at any time from Settings › Delete Account. This permanently removes your profile, contacts, card images, smart labels and their photos, dynamic QRs, scan records, purchase records, and account (including your sign-in identity) from our servers. Only the hashed trial record described above is kept. Deleting your account does not cancel a store subscription. You can also delete individual scanned contacts, labels, or dynamic QRs within the app. Deleting a label or dynamic QR immediately stops its printed code from working. Uninstalling the app removes all locally stored data.

Children’s Privacy

CardIntro is not directed at children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the app constitutes acceptance of any changes.

Contact

Questions? Email support@getdcard.com.