This Privacy Policy (the "Policy") explains how CardVault (the "App") handles your data.
The App is built around one core principle: the business cards you scan stay on your own device. The App requires no account and operates no developer server. By default it sends no network requests at all; only when you actively turn on "iCloud Sync" is your data synced to your personal iCloud (Apple account) — kept in your own private cloud space, which the developer cannot access.
Using the App does not require registration, an email address, or logging into any account. The App does not generate, collect, or store any data that could identify you personally.
Every card you scan or import — including the recognized name, company, title, phone number, email, website, address, notes, and the original front and back images — is stored in your iPhone's local database by default. If you enable "iCloud Sync," a copy is also kept in your personal private iCloud database so it can sync across your devices (see Section 8).
To provide card scanning, the App requests the following system permissions when needed:
All images are processed and stored only on your device and are never transmitted externally.
Card text recognition uses Apple's built-in Vision framework and runs entirely offline, on-device; your card images are never sent to the cloud or any external service for recognition. Field classification (identifying names, phone numbers, and so on) is handled by the App's built-in rule-based parser, which likewise requires no network connection and does not send content to any AI service.
The App requests Contacts access only when you actively choose "Add to iPhone Contacts," and it writes only the single card you selected at that time. The App never reads, collects, or uploads your existing contacts. Whether and what to export is entirely your decision.
To let you find cards quickly through iPhone's system search, the App indexes card data with the system's Spotlight service. This index exists only on your device, is managed by iOS, and is never transmitted externally. You can disable the App's "Siri & Search" permission at any time in system Settings.
The App provides share images, QR codes, and data backup features. These are always triggered by you and handed off through iOS's standard share sheet to a destination you choose (Messages, AirDrop, Files, and so on). What you share and with whom is entirely up to you.
The App connects to no developer backend server and integrates no third-party analytics, advertising, or tracking services. The App does not use cookies. Its only network use is the optional "iCloud Sync": when enabled, the App uses Apple's iCloud service to sync your card data to the private iCloud database of your personal Apple account. That data resides in your own iCloud space, is governed by Apple's Privacy Policy, and cannot be read or accessed by the developer. This feature is off by default and can be turned on or off at any time in the App's settings.
When you tap a phone number, address, or LinkedIn link on a card, your device opens the corresponding system app (Phone, Maps, or a browser). That interaction is between you and that service — the App does not participate in or record it.
The App does not proactively collect usage data or diagnostic logs. If you enable "Share With App Developers" analytics in iOS Settings, Apple may provide the developer with crash reports containing no personally identifiable information, used solely to fix issues. This mechanism is managed at the Apple system level, and you may disable it at any time in Settings.
The App is designed for a general audience, is not directed at children, and does not knowingly collect personal data from children.
Should the App later introduce other features that require network access (such as an optional AI-assisted parsing mode), those features will — like iCloud Sync — always be opt-in, with a clear explanation of how your data would be handled before you enable them, and this Policy will be updated accordingly.
This Policy will be revised as the App evolves. Material changes will be reflected in the "Last updated" date above. We encourage you to review this page periodically to stay informed of our current privacy practices.
If you have any questions about this Policy, please reach out at
abelhu.tw@gmail.com
