Privacy Policy

Effective 8 October 2026. Applies to the OvniCard iPhone app, the OvniCard web app and ovnicard.com.

The short version of this privacy policy: OvniCard has no accounts, no analytics, no advertising and no trackers. The card you make and the contacts you collect are stored on your own device. We do not sell, rent or share personal data.

What stays on your device

• Your card — name, title, company, phone numbers, emails, links, photo and logo.
• The contacts you collect, including the photo of each scanned paper card and your notes (where and when you met, category, importance).

In the iPhone app these live in the app’s own storage; in the web app, in your browser’s local storage. They are not synced or backed up to us, and we cannot see them. Deleting a contact deletes it; deleting the app (or clearing the site’s data in your browser) deletes everything.

Permissions the iPhone app asks for

• Camera — to scan QR codes and photograph paper business cards. Photos are read on the device by Apple’s text recognition (Vision) and are not uploaded.
• Photos — to pick a card photo you already took, and to save your QR code image to your library when you ask. The app sees only the photos you choose.
• NFC — to write your card to an NFC tag and read tags you hold to the phone. The tag holds only what you chose to write; nothing is sent to us.

Apple Intelligence: on iPhones that support it, the text read from a card is sorted into fields by Apple’s on-device model. That processing happens on your iPhone.

Your address book: OvniCard does not read your iPhone Contacts. When you export or share a card, iOS’s share sheet sends the .vcf file only where you choose.

Sharing your card

Your QR code and your link contain your card itself. Sharing them does not upload your card to us. Anyone you give the QR or link to can see the details on your card, so only put on it what you are happy to hand out.

Optional cloud reader (web app and test builds only)

The App Store version of the iPhone app does not include it. The web app, and test builds distributed through TestFlight, offer an optional cloud reader for difficult cards. It is off until you switch it on, and the app asks you before the first upload. When you use it:

• the card photo is sent over HTTPS to our server and passed to a third-party AI provider (Anthropic) to turn it into text, then the result comes straight back;
• we do not store the photo or the text read from it;
• the AI provider processes it under its own terms, which we do not control;
• your IP address is used to count scans against a daily limit (a counter, not a log of what you scanned).

Licence keys (web app)

If you activate a licence key in the web app, the key is sent to our server to check it. No other personal data goes with it.

This website and the support form

• ovnicard.com and the web app are served by Cloudflare, which processes standard request data such as IP address and browser type to deliver and protect the site. We do not add analytics or tracking.
• If you use the support form, the name, contact details and message you type are sent to us so we can reply, and we keep them as long as we need to help you.
• Emails to [email protected] are forwarded to our inbox and kept like any other email.

Children

OvniCard is a business tool and is not directed to children under 13. We do not knowingly collect personal data from children.

Your choices and rights

Because your card and contacts are on your device, you can view, change, export or delete them yourself at any time. For anything you have sent us (a support message, an email), write to [email protected] and we will tell you what we hold and delete it on request.

Changes

If this policy changes, we will update this page and the date at the top. If the app ever starts collecting data it does not collect today, the policy and the App Store privacy details will say so before that version ships.

Contact

Questions about privacy: [email protected].