Cardcatch: Business Card Scan Privacy Policy
Last updated: October 5, 2026
In short
- Some information leaves your iPhone, only as described in this policy.
- No account needed. There is no sign-in, and we do not ask for your name or email address.
- No tracking and no ads. Cardcatch: Business Card Scan does not track you across other companies' apps and websites, and shows no advertising.
- One anonymous install message. The first time you open the App it sends us a single message with basic technical details (section 3).
- Purchases go through Apple, together with RevenueCat. We never see your card or payment details.
- 2 service providers (Aurora Apps AI service (Google Gemini) and Google Firebase App Check with Apple App Attest) receive limited information to run the App (section 4).
Aurora Apps / Daniel Steel ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains what Cardcatch: Business Card Scan (the "App") does with information when you use it on your iPhone, who receives it, and the choices you have.
By using the App, you agree to the practices described in this Privacy Policy.
1. Information the App Handles
To work, Cardcatch: Business Card Scan sends some information off your iPhone. It goes only to the recipients described in this policy: our install notification (section 3) and the service providers in section 4. Anything the App does not send to these recipients stays on your iPhone.
2. Information We Do Not Collect
- We do not sell your personal data, and we do not share it with data brokers.
- The App has no accounts or sign-in, so we do not ask for your name, email address or password.
- The App does not track you. It does not combine data about you with data from other companies' apps and websites, and it does not ask for App Tracking Transparency permission.
- The App shows no advertising and does not share data with advertisers.
3. Install Notification
The first time you open the App, it sends one anonymous message to a small server we run on Vercel, which forwards it to an internal channel in our team's Slack workspace. The message contains only:
- app version
- OS version
- device model
- region
- language
- build channel
Why we send it. Lets the developer count installs; contains no identifier and no user content.
The message is sent once for each installation of the App. As with any request over the internet, the server can see your device's IP address when the message arrives; we do not store it with the message or use it to identify you. The message is not used for advertising or tracking. We keep it only as long as we need it to count installs.
4. Service Providers & Apple
Cardcatch: Business Card Scan uses the following service providers. Each one receives only the information described here, and handles it under its own privacy policy.
- RevenueCat. Processes the one-time purchase and restores it on other devices. It receives an anonymous app user ID and App Store purchase receipt data. RevenueCat privacy policy.
- Aurora Apps AI service (Google Gemini). Smart Fill, optional and off until you allow it. Reads a card photo and returns the name, company and contact details. It receives the photo of the card you chose to scan and an anonymous service ID (not your name, and not an account you create), sent securely when Smart Fill is on; the photo and the result are not stored by Aurora Apps. Aurora Apps AI service (Google Gemini) privacy policy.
- Google Firebase App Check with Apple App Attest. Proves that a Smart Fill request comes from the genuine Cardcatch app on a real device, so the service cannot be used by anyone else. Only when Smart Fill is on. It receives an attestation that Apple generates for the app on your device (an identifier for that app install, no name or personal details), sent to Apple and to Google's App Check service. Google Firebase App Check with Apple App Attest privacy policy.
Apple runs the App Store and your device's operating system. It handles your purchases (see section 5). If you have chosen to share analytics with app developers in your device settings, Apple may give us anonymous crash and usage statistics. We do not control how Apple handles your data, which is covered by Apple's privacy policy.
Some of these providers, and the server used for the install notification, may process information outside the UK and European Economic Area, including in the United States. Where they do, they rely on safeguards such as standard contractual clauses or the EU-US Data Privacy Framework.
5. Purchases
Cardcatch Pro is a one-time in-app purchase. Payment is handled entirely by Apple through your Apple Account. We never see or store your card or other payment details.
- RevenueCat also takes part in your purchase and receives an anonymous app user ID and App Store purchase receipt data.
6. Children's Privacy
Cardcatch: Business Card Scan is not intended for children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us at support@aurorapps.com and we will delete it.
7. How Long We Keep Information & Deleting It
- Install notification (section 3): kept only as long as we need it to count installs.
- Service providers (section 4): information they hold is kept under their own policies. You can contact them directly, or email us and we will help.
- Purchases: Apple keeps your purchase records under its own policies.
Deleting your data
Cardcatch has no account. Everything you add (cards, events, notes and card photos) is stored only on your iPhone: delete a card from the Cards tab, or choose Settings > Delete All Cards to remove everything. Deleting the app removes it too. Smart Fill does not keep your card photos or results on our servers, so there is nothing to delete there.
8. Your Rights & Choices
Depending on where you live (for example in the UK or EU), you may have the right to access, correct, delete, restrict or object to our use of personal data we hold about you, and to receive it in a portable format. To use any of these rights, email us at support@aurorapps.com.
Because the App has no accounts, the information we receive is not linked to your name or email address, so we may not be able to find data that relates to you. If we cannot, we will tell you.
You can change or withdraw any permission you have given the App, such as access to your photos or notifications, at any time in the Settings app.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live. We would appreciate the chance to help first, so please contact us.
9. Changes to This Privacy Policy
We may update this policy from time to time. When we do, we will change the "Last updated" date above. Continued use of the App after any modifications constitutes acceptance of the updated policy.
Contact
For any privacy-related questions or concerns, please contact us at support@aurorapps.com.