Carda is an app for keeping track of the people you meet at work. It's made and run by Yaseen Al-Hadeethi, an independent developer in Australia; “we” in this policy means Yaseen. This policy says what we collect, how we use it, who processes it for us, and the choices you have.
What we collect
Account details you give us: name, email, title and company. The contacts, companies, notes, tasks and voice debriefs you add, including details about other people that you choose to record. Calendar meetings are read on your iPhone; only a meeting you log or save is sent to Carda. Crash reports we need to run the app reliably. We collect this only to provide the service to you.
How we use it
To sign you in, sync your network across your devices, write briefings and reminders, transcribe and summarise the voice debriefs you record, and fix problems. Carda asks before it first sends anything to its AI provider, and Settings, AI & privacy lets you limit or stop what is sent. We don't sell your personal data. We don't show ads.
Service providers
We use a small number of processors to run Carda. Clerk, in the United States, handles sign-in and accounts. Supabase stores your data in South Korea and runs our backend functions. OpenAI, in the United States, powers card scanning, transcription, summaries, briefings and drafted messages; it doesn't train its models on what Carda sends and deletes it within 30 days. Sentry receives crash reports, set not to include your name or email. Apple and RevenueCat handle subscriptions; we never see your payment details. To show a company's logo, we ask Logo.dev, unavatar.io or Google for an image by the company's public web address. To show a company's news, we search public news by the company's name and any topics you set. When you search the web from Carda, the words you type go to SerpApi to fetch public results. None of these sends your contacts or notes. Each provider gets only what it needs to do its job.
Your contacts and permissions
Contacts you import or save stay yours. Carda uses the camera, microphone, contacts, calendar and photos only when you start the feature that needs them, and only with your permission. You can turn any of them off in the iPhone Settings app.
Apple Wallet
If you add your card to Apple Wallet, our server builds the pass from your profile.
Storage and security
Your data is stored with Supabase in South Korea and handled by the providers above in the United States. It is encrypted in transit, and row-level security means each account can reach only its own data. We keep your data until you delete it or your account. Recordings are deleted from your iPhone once they are transcribed. Live words while you speak are recognised on your iPhone by Apple.
Your choices
You can edit or delete any record at any time. You can export your contacts from Profile, then Your data, then Export my data. You can permanently delete your account and all its data from Profile, then Account, then Delete account. To see or correct what we hold, email us; we answer within 30 days.
Contact us
Questions about privacy? Email support@carda.network. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or, in the EU or UK, to your local data protection authority.
Company logos provided by Logo.dev.