Overview
CardBook AI is developed and operated by Oztoprak Energy. This Privacy Policy explains how CardBook AI handles information when you use the Android application.
Short version: Saved business cards stay on your device by default. Optional AI features are disabled by default and only send OCR text or contact fields to the AI provider selected by the user after explicit consent and user API key entry. Business card photos/images are processed locally for OCR and are not uploaded by the app.
Device Permissions We Request
Used when you choose to capture a business card photo. Images are processed on-device by Google ML Kit and are not uploaded by the app for OCR.
Used when you choose an existing business card image from your device gallery. Selected images are processed locally.
Requested only when you explicitly choose to export a saved card to Android Contacts. CardBook AI does not read or upload your existing address book.
OCR Processing - Google ML Kit
CardBook AI uses Google ML Kit Text Recognition to extract text from business card images. OCR processing is performed on-device. Business card photos/images are not uploaded by the app for OCR.
- Google ML Kit's on-device model runs locally for OCR.
- Business card photos/images are not sent to OpenAI, Google Gemini, Anthropic/Claude, OpenRouter, Google servers, or CardBook AI servers for OCR.
- OCR text may be sent to a selected external AI provider only if optional AI is enabled by the user as described below.
Optional AI Features
CardBook AI includes optional AI features for app functionality, such as improving OCR extraction or generating a contact summary. These AI features are disabled by default.
AI features only run if you explicitly enable AI consent in the app and enter your own API key. If enabled, OCR text and contact fields such as name, email address, phone number, address, company, title, website, notes, and tags may be sent directly to the external AI provider you select.
Supported optional AI providers are OpenAI, Google Gemini, Anthropic/Claude, and OpenRouter. CardBook AI does not send OCR text or contact fields to these providers unless AI consent is enabled and an API key is provided by you.
Local Data Storage
Saved contact cards are stored locally on your Android device using AsyncStorage/local app storage. This includes business card contact details, card images you choose to save, tags, notes, favorites, and local timestamps.
Saved data remains local by default. Optional AI requests may transmit OCR text or contact fields only after explicit user consent and user API key entry.
Export, Import, Backup, And Sharing
CSV export, Excel export, vCard import/export, backup/restore, QR sharing, and Android share-sheet actions are user-initiated. Files are generated, selected, imported, exported, or shared locally under your control. CardBook AI does not upload files or documents to its own server.
Google Play Billing
CardBook AI offers an optional premium purchase through Google Play Billing. The app uses Google Play Billing / expo-iap and does not use a third-party purchase management SDK.
Payments are handled by Google Play. CardBook AI does not receive or store payment card data.
Third-Party Services
- Google ML Kit Text Recognition - on-device OCR.
- Google Play Billing - payment processing for optional CardBook AI Pro Lifetime purchase.
- OpenAI, Google Gemini, Anthropic/Claude, and OpenRouter - optional AI providers selected by the user; OCR text and contact fields may be sent only after explicit consent and user API key entry.
CardBook AI does not use advertising SDKs, social media SDKs, behavioral analytics tools, Crashlytics, Sentry, Bugsnag, or diagnostics SDKs.
Google Play Data Safety Alignment
For Google Play Data Safety, optional AI features may require the following personal information types to be marked as collected and shared for app functionality, optional/user choice:
- Name
- Email address
- Phone number
- Address
- Other personal information, such as company, title, website, notes, tags, and OCR text
Photos, files and documents, contacts, device IDs, app performance, financial info, location, app activity, and web browsing are not collected or shared by CardBook AI according to the current app behavior.
Account And Data Deletion
CardBook AI does not require user accounts. Users can delete individual saved business cards inside the app. Users can remove all local app data by uninstalling CardBook AI or by clearing app data from Android system settings.
Users can also contact info@oztoprakenerji.com for data deletion questions related to optional AI or support requests.