Business PouchPrivacy Policy
This policy explains what data the Business Pouch mobile app ("App") processes and why. In short: your business cards stay on your phone; we process only the minimum needed to provide the service, and we never sell your data.
1. Data controller
Business Pouch. Contact: support@businesspouch.com
2. Data that stays on your device
The cards you scan, their photos, your notes, tags and settings are stored only on your device. They are not sent to our servers (except for smart reading, see below).
3. Data we process
| Data | Purpose | Retention |
|---|---|---|
| Card photo for smart reading | Reading the card details (with the Google Gemini AI service) | Not stored; discarded after reading |
| Account details (Apple/Google ID, email, name) | Signing in, keeping credits across devices | Until you delete your account |
| Credit and purchase records | Credit balance, purchases and refunds, abuse prevention | For legally required periods |
| Ad data (advertising ID, device info) | Showing rewarded ads and verifying credits | Per Google AdMob policy |
| Technical logs (IP, error codes) | Security, abuse prevention, debugging | Up to 30 days |
4. Service providers
- Cloudflare: server infrastructure and security.
- Google (Gemini API): smart reading. Paid API data is not used to train models.
- Supabase: account and credit records.
- Apple and Google: sign-in, in-app purchases.
- RevenueCat: purchase and subscription validation.
- Google AdMob: optional rewarded ads. Ad consent, and on iOS tracking permission, are asked separately; you can decline.
- Google Drive: only if you choose to, your backup is saved to the app-specific folder of your own Drive.
Some of these providers may process data outside your country. Transfers are made with the safeguards required by GDPR and KVKK.
5. Your rights
Under GDPR and KVKK you have the right to access, correct, delete, object to processing of, and port your data. Send requests to support@businesspouch.com. You can delete your account in the app at any time (Delete account).
6. Children
The App is not directed to children under 13 and does not knowingly collect data from children.
7. Security
All connections are encrypted (HTTPS). Server access is protected by authorization; we never see your payment details (Apple and Google handle payments).
8. Changes
We may update this policy. Significant changes are announced in the App.