Privacy Policy

1. INTRODUCTION

Welcome to WhatsCard ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our mobile application WhatsCard (the "App").

By using WhatsCard, you agree to the collection and use of information in accordance with this policy.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

When you use WhatsCard, we collect the following information you directly provide:

• Account Information
  • Email address
  • Full name
  • Profile photo (optional)
  • Password (encrypted)
• Contact Information You Scan or Enter
  • Names, phone numbers, email addresses
  • Company names and job titles
  • Physical addresses
  • Business card images
  • Custom notes and tags you add
• Voice Recordings (Premium Feature)
  • Voice notes you record for contacts
  • Audio transcriptions (processed by OpenAI Whisper)
• Subscription Information
  • Payment details (processed by third-party payment providers)
  • Subscription tier (Free, Pro, or Enterprise)
  • Transaction history

2.2 Information Collected Automatically

• Device Information
  • Device model and operating system
  • Unique device identifiers
  • Mobile network information
  • App version and settings
• Usage Data
  • App features you use
  • Time and date of access
  • Crash reports and error logs
  • Performance metrics
• Camera and Photos
  • Business card images you capture
  • Only accessed when you actively use the scanning feature
  • Images are stored locally and in your secure cloud storage

2.3 Information We Do NOT Collect

• We do NOT access your device contacts without permission
• We do NOT read your WhatsApp messages
• We do NOT track your location
• We do NOT collect browsing history outside the app
• We do NOT use cookies or tracking pixels

3. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

3.1 To Provide Our Services

• Process scanned business cards using OCR technology
• Store and organize your contact database
• Enable WhatsApp integration for networking
• Sync your data across devices
• Export contacts to Excel format

3.2 To Improve Our Services

• Analyze app usage to improve features
• Fix bugs and technical issues
• Develop new features based on user needs
• Optimize OCR accuracy and performance

3.3 To Communicate With You

• Send service-related notifications
• Provide customer support
• Send subscription renewal reminders
• Notify you of app updates and new features
• Send promotional offers (you can opt-out anytime)

3.4 To Process Payments

• Handle subscription purchases
• Process distributor commissions
• Generate invoices and receipts

3.5 For Security and Fraud Prevention

• Protect against unauthorized access
• Detect and prevent fraudulent activity
• Enforce our Terms of Service

4. HOW WE SHARE YOUR INFORMATION

We do NOT sell, rent, or trade your personal information to third parties.

We only share your data in the following limited circumstances:

4.1 Service Providers

We use trusted third-party services to operate our app:

• Supabase (Database & Authentication)
  • Stores your account and contact data
  • Provides secure authentication
  • Data stored in secure cloud servers
  • Privacy Policy: https://supabase.com/privacy
• Google Gemini AI (OCR Processing)
  • Processes business card images to extract text
  • Images are processed and not stored by Google
  • Privacy Policy: https://ai.google/responsibility/
• OpenAI Whisper (Voice Transcription - Premium Feature)
  • Transcribes voice notes to text
  • Audio processed and not permanently stored
  • Privacy Policy: https://openai.com/privacy/

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or legal processes
• Government requests or regulatory requirements
• Protection of our legal rights
• Investigation of fraud or security issues

4.3 Business Transfers

If WhatsCard is acquired or merged with another company, your data may be transferred to the new entity. You will be notified of any such change.

4.4 With Your Consent

We may share your information with third parties when you explicitly give us permission to do so.

5. DATA STORAGE AND SECURITY

5.1 Where We Store Your Data

• Primary Storage: Supabase Cloud (AWS infrastructure)
• Server Locations: Singapore and United States
• Local Storage: Your device (for offline functionality)
• Backup Storage: Encrypted cloud backups

5.2 How We Protect Your Data

• End-to-end encryption for data in transit (HTTPS/TLS)
• Encryption at rest for stored data (AES-256)
• Secure authentication with hashed passwords
• Regular security audits and updates
• Role-based access controls for our team
• Automatic session timeout for inactive users

5.3 Data Retention

• Account data: Retained until you delete your account
• Contact data: Retained until you manually delete contacts
• Voice recordings: Retained for 90 days or until deleted
• Backup data: Retained for 30 days after deletion
• Analytics data: Anonymized after 12 months

6. YOUR RIGHTS AND CHOICES

You have the following rights regarding your personal data:

6.1 Access and Portability

• View all your stored data anytime in the app
• Export your contacts to Excel format
• Request a complete copy of your data

6.2 Correction and Updates

• Edit your profile information anytime
• Update or correct contact details
• Modify your account settings

6.3 Deletion

• Delete individual contacts or voice notes
• Delete your entire account and all associated data
• Request permanent deletion of backups

6.4 Opt-Out of Marketing

• Unsubscribe from promotional emails
• Disable push notifications in app settings
• Contact us to opt-out of all marketing communications

6.5 Data Restriction

• Limit how we process your data
• Object to certain data processing activities
• Request temporary suspension of data processing

7. CHILDREN'S PRIVACY

WhatsCard is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately, and we will delete the information.

8. INTERNATIONAL DATA TRANSFERS

Your data may be transferred to and stored on servers located outside your country of residence, including Singapore and the United States. By using WhatsCard, you consent to this transfer. We ensure that appropriate safeguards are in place to protect your data in accordance with this privacy policy.

9. THIRD-PARTY SERVICES

WhatsCard integrates with WhatsApp for messaging functionality. When you use WhatsApp integration:

• You are subject to WhatsApp's Privacy Policy
• We do NOT access your WhatsApp messages or contacts
• We only facilitate opening WhatsApp with a pre-filled number
• WhatsApp's Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

10. CHANGES TO THIS PRIVACY POLICY

We may update this privacy policy from time to time. When we make changes:

• We will update the "Last Updated" date
• We will notify you via email or in-app notification
• Continued use of the app constitutes acceptance of changes
• You can review the latest policy anytime in the app

11. YOUR CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do NOT sell your data)
• Right to non-discrimination for exercising your rights

12. GDPR COMPLIANCE (EU/EEA USERS)

If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Legal basis for processing your data:

• Performance of contract (providing our services)
• Legitimate interests (improving our services)
• Your consent (for optional features)

13. CONTACT US

14. SUPERVISORY AUTHORITY

If you are located in the EU/EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.