Privacy Policy

Kardly ("we", "our", "us") is a digital business card and professional profile application available on Android. It allows users to create, customize, and share their professional identity — including business cards, brochures, letterheads, and logos.

By using Kardly, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the app.

We collect only what is necessary to provide our service. The table below describes every category of data collected, whether it is shared, and its purpose.

Data you provide directly

• When you create or edit your profile (name, job title, company, phone, email, address, tagline, website, social links)
• When you upload a profile photo from your device's gallery or camera
• When you complete an in-app purchase (processed by Google Play Billing)

Data collected automatically

• Tap and view counts when your business card is shared and opened
• The Android Advertising ID — collected automatically by the Google Mobile Ads SDK and used to serve relevant ads
• Basic device information (OS version, screen size) used for crash reporting and compatibility

Data we do NOT collect

• Precise or approximate location
• Contacts from your address book
• SMS or call logs
• Microphone or audio recordings
• Browsing history outside the app

• To provide the service — render your business card, brochure, letterhead, and logo on-screen and in exported PDFs
• To sync your profile — store your data in our cloud database so you can access it from any device
• To authenticate you — verify your identity via email/password or Google Sign-In so only you can edit your profiles
• To show statistics — display how many times your shared card has been viewed or tapped
• To process purchases — verify premium subscriptions or one-time purchases through Google Play
• To show ads — display relevant advertisements to free-tier users via Google AdMob
• To improve the app — analyse crash reports and anonymous usage patterns to fix bugs and improve features

We do not sell your personal data to any third party. We do not use your data for purposes beyond those listed above.

Kardly integrates the following third-party services. Each has its own privacy policy which governs how they handle data passed to them.

All data transmitted between the Kardly app and our servers is encrypted using industry-standard TLS (HTTPS). Profile data and uploaded photos are stored on Supabase servers, which are hosted on AWS infrastructure with encryption at rest.

Access to your data is protected by Row-Level Security (RLS) policies on our database — meaning each user can only read and write their own data. No other Kardly user or employee can access your profile without explicit authorisation.

We take reasonable technical and organisational measures to protect your data, but no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your data for as long as your account is active. If you delete your account:

• All profile data is permanently deleted from our database within 30 days
• Uploaded photos are removed from our storage within 30 days
• Anonymised, aggregated statistics may be retained for up to 12 months

Purchase records may be retained longer where required by applicable law or to resolve disputes.

Depending on your country of residence, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data at any time via the Edit Profile screen
• Erasure — request deletion of your account and all associated data
• Portability — request an export of your profile data in a structured format
• Object — object to processing of your data for advertising purposes
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at af6781114@gmail.com. We will respond within 30 days.

Opting out of personalised ads

You can opt out of personalised advertising by going to your Android device's Settings → Privacy → Ads → Opt out of Ads Personalisation. This does not remove ads from the app but ensures they are not targeted based on your Advertising ID.

Kardly is designed for professional use and is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at af6781114@gmail.com and we will delete it promptly.

The free version of Kardly displays banner advertisements powered by Google AdMob. AdMob may use the Android Advertising ID (GAID) to personalise ads based on your interests.

We do not use any additional tracking SDKs beyond what is inherent to the services listed in Section 4. We do not use Facebook Pixel, Firebase Analytics, or any behavioural analytics platform.

Premium subscribers who have purchased an ad-free plan will not see advertisements and the AdMob SDK will not serve ads to them, though the SDK itself may still be present in the app binary.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Post a notice inside the Kardly app on your next launch

Continued use of Kardly after an update constitutes acceptance of the revised policy. If you disagree with the changes, please stop using the app and contact us to delete your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

For data deletion requests, please email us with the subject line "Data Deletion Request" and include the email address associated with your Kardly account. We will process your request within 30 days and send a confirmation email when complete.