Private Card Case & Contacts

Privacy Policy

Effective: 1 September 2026 · Last updated: 30 August 2026 · Provider: KHY Partners Inc.

Private Card Case collects no personal data. Your card images and contact information are stored only on your device and in your own iCloud account. Nothing is transmitted to us, or to anyone else.

1.What we collect

None of your cards or contacts. The app requires no account and no sign-in. Your name, the names on the cards you scan, companies, phone numbers, email addresses, postal addresses, notes, and card images never reach us.

We receive nothing about how you use the app beyond the aggregate sales and performance reports Apple publishes to every developer, which identify no one. Section 5 sets this out.

We operate no server that receives your cards or contacts, so there is no mechanism through which we could collect them. The app does talk to Apple — the App Store for your subscription, and iCloud for your own backup — and this page itself is served from our website. What none of those carry is your card data.

2.Where your data lives

DataStored inOur access
Card images, contact details, notes, tags, meeting recordsOn-device storage and your iCloud Private DatabaseNone
App settingsOn-device storageNone
Name and number copy used for caller ID (if enabled)A private shared area on your device and the iOS call databaseNone

The iCloud Private Database belongs to your Apple Account. We have no technical means of reading it. Apple's handling of iCloud data is governed by Apple's Privacy Policy.

The cards hold other people's information

A card you scan carries the name, phone number, email address, and employer of the person who handed it to you. They do not know this app exists, and they never agreed to be in it. Much of the information this policy covers is theirs, not yours.

So the app's default is to leave that information where it already is. It does not reach us, no notification goes to the person who gave you the card, and it does not enter the iOS Contacts that other apps can read unless you add someone yourself, one at a time — and we tell you what that means before you do.

3.Device permissions

Each permission is requested only when you use the feature that needs it. Declining any of them leaves the rest of the app fully functional.

PermissionPurposeDefault
CameraCapturing business cardsOn use
ContactsAdding, updating and removing only the contacts you pick one by oneOff

Adding to iOS Contacts

Off by default. Nothing reaches iOS Contacts until you turn it on. There is no path that happens on its own — each of the three below requires you to switch it on or press it.

Once added, any app that reads your address book can see that number. Messaging apps may suggest them as a friend or signal to them that you saved their number, so we say this plainly the first time you turn it on.

Caller ID

This feature lets the names you have saved appear on incoming calls. It is off by default and only works once you turn it on yourself in iOS Settings › Apps › Phone › Call Blocking & Identification.

4.Third parties and outbound transfers

Card images, recognition results, and the contact details you save are never sent to any server. Capture, recognition and storage all happen on your device, and there is no path by which any of it reaches us.

We considered an optional feature that would send recognition to an external AI provider, but removed it from the product. Even as an opt-in, having a path that can carry a card off the device would put an asterisk on the sentence above.

As a result no card or contact information is disclosed to us or transferred abroad. iCloud sync and subscription billing are Apple system features that run through your own Apple Account; we do not have access to their contents.

5.Analytics and advertising

There is no advertising network and no tracking technology, and we never request App Tracking Transparency permission. We do not sell or share your data with anyone, and nothing is used to profile you across other apps or websites. This is a commitment, not a description of the current build — it will not change.

Today, the only thing we see about usage is what Apple gives every developer: aggregate App Store reports on downloads, retention, and subscriptions, and crash reports that Apple collects and anonymises. Those crash reports reach us only if you have turned on Share With App Developers in iOS Settings, and they identify no one.

We may add a diagnostic or product-analytics tool later, to find crashes faster and see which screens cause trouble. If we do, three things hold. Your cards and contacts will never be part of it — that is the premise of this app, not a setting. We will update this policy and the App Store privacy label before the change ships, not after. And you will be able to switch it off.

Crash information may reach us anonymously through Apple, but only if you have opted in to sharing diagnostics with Apple in iOS Settings. This is a standard Apple facility and does not let us identify individuals.

6.Payments

Subscriptions are processed by Apple through the App Store. We never collect or see your payment details. Apple provides us only with aggregated, non-identifying sales reports.

7.Retention and deletion

8.Data portability

You can export everything at any time as vCard, CSV, or an encrypted backup file. Export remains available even after a subscription expires. We do not hold your data hostage.

9.Children

This is a professional tool and is not directed at children. We gather nothing from anyone, so nothing is gathered from a child either.

10.Your rights

Everything stays under your own control. You view your cards in the app, delete them in the app or in iCloud settings, and move them out with the export feature. We hold no copy of your cards or contacts, so there is nothing on our side to ask us for.

There is one exception — an email you send us (§12). That is the only personal data we hold.

The paragraphs below name the laws we are most often asked about. They are not the only ones that apply to you, and where your local law grants a right that is not named here, we will honour it on request.

EU, EEA, and the United Kingdom

KHY Partners Inc. is the controller for the personal data we process. Under the EU GDPR and the UK GDPR you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your national supervisory authority (in the UK, the Information Commissioner's Office).

What we process is correspondence you send us, and nothing else (§12). Your cards and contacts never reach us, so those rights have nothing to attach to on our side. Our lawful basis for handling correspondence is the legitimate interest of answering you (GDPR Article 6(1)(f)). We do no profiling and make no automated decisions.

Republic of Korea

Under the Personal Information Protection Act you may request access, correction, deletion, or suspension of processing. Your cards and contacts never reach us, so we have nothing to act on — your data is deleted by you, in the app or in iCloud. The same rights apply to any correspondence you have sent us. If you believe your rights have been infringed you may contact the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr) or the Korea Internet & Security Agency's report centre (118, privacy.kisa.or.kr).

United States

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Residents of California and of other states with comparable laws may exercise the rights those laws provide, and will not be treated differently for doing so.

11.Changes to this policy

If this policy changes, we will publish the revision date and a description of the change on this page alongside the app update. Material changes to how data is handled will also be announced inside the app.

12.Contact

For questions about this policy, or to make a request about your data, please write to us. We reply without undue delay.

An email you send us stays with us. We keep it only as long as answering you requires, and delete it within two years at the latest. We do not use it for anything else, do not pass it to anyone, and do not move it out of our mailbox. It has no connection to your cards or to the contacts stored in the app.

This policy is published in English and Korean. The app's interface is available in the same two languages; if you use the app in English, the English text applies to you.

KHY Partners Inc.
app_contact_pcardcase@khypartners.com